Privacy Notice

Privacy Notice

This notice explains how Kurokawa Retreat (3/15 Parry Street, Fremantle WA 6160) collects, uses, stores and protects your personal information. As a provider of remedial massage we handle health information, so we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. What we collect

  • Contact and booking details: your name, mobile number, email address (optional), appointment dates and times, and any notes you add to a booking.
  • Health information (remedial treatments): your intake form, including current complaints, medical conditions, medications, injuries, pregnancy status and treatment goals, plus clinical treatment notes made by your therapist. This is sensitive information and we collect it only with your consent.
  • Payment records: the amount, date and status of deposits and payments. Card details are entered directly with our payment provider, Square. We never see or store your full card number.
  • Login and security data: one-time SMS codes for phone verification, and technical data such as your IP address, used only to keep accounts and bookings secure.

2. Why we collect it

  • To take, confirm, remind you about, and manage your bookings.
  • To provide safe, appropriate treatment. Your health information lets our practitioners plan and adjust your care.
  • To issue receipts, including provider receipts for health-fund claims when you request them.
  • To meet our legal and professional record-keeping obligations.
  • To protect the site and our clients against fraud and misuse.

We send only service communications about your own appointments (confirmations, reminders, follow-ups and login codes). We do not send marketing without your separate consent, and we never sell your information.

3. Card payments and Square

Card payments, including booking deposits, are processed by Square AU Pty Ltd. When you pay by card:

  • Your card details go directly to Square over an encrypted connection. Kurokawa Retreat never receives or stores your full card number.
  • Square collects and handles transaction information (such as card details, purchase amount and, where provided for a receipt, your email or phone number) in its own right, as described in the Square Buyer Privacy Notice.
  • Square may create a customer profile linked to your card so that sellers who use Square can serve you faster. You can view, manage or opt out of this through Square's own profile portal, linked from the Square Buyer Privacy Notice above or from any Square receipt you receive.

4. Who we share information with

  • Square (payment processing, as above).
  • Our SMS and email carriers, which transmit appointment messages and login codes to you. Message content is limited to what the message needs.
  • Your health fund, only through the receipt we give you to claim with, or on-the-spot claiming you ask us to process.
  • Professional or legal recipients where the law requires it, or where you give us written permission (for example a report to your doctor or physiotherapist).

Some of our providers (including Square and our SMS carrier) process data on servers located overseas, including in the United States. We only use established providers that publish their own privacy commitments.

5. How your information is stored

  • All pages and payments on this site use encrypted connections (HTTPS).
  • Health records and booking data are held in access-restricted storage. Only our practitioners and management can open client files, and clinical notes are further limited within the team.
  • Login codes are stored only in protected form and expire within minutes.
  • We keep treatment records for at least seven years from your last visit (or, for clients under 18, until they turn 25), in line with standard Australian health record-keeping practice. After that, records are securely deleted.

6. Access, correction and deletion

You may ask to see the personal information we hold about you, ask us to correct it, or ask us to delete information we are not legally required to keep. Email admin@kurokawa.com.au and we will respond within 30 days. We will verify your identity before releasing any records.

7. Data breaches

If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

8. Complaints

If you believe we have mishandled your information, please contact us first at admin@kurokawa.com.au so we can put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

9. Changes to this notice

We may update this notice from time to time. The current version is always published on this page.

Last updated: 21 July 2026

← Back to Kurokawa Retreat