Privacy policy
Bark Dietetics
Jack Bark, Accredited Practising Dietitian | ABN: 45 303 209 843
Last updated: 25/10/2026
1. About this policy
This policy explains how I collect, use, store and share your personal and health information. I follow the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records Act 2001 (Vic).
I’m a sole practitioner. No one else works in my practice or has access to your records.
2. What information I collect
Contact details: name, date of birth, address, phone, email, emergency contact.
Health information: medical history, medications, test results, what and how you eat, your goals, and your sensory and communication needs.
Referral information: details from your GP, paediatrician or other health professional.
Billing information: Medicare, health fund and payment details.
Website information: what you send through my website contact form, and basic website analytics.
You can use a different name with me where practical, for example for a general enquiry. I need your legal name for Medicare and health fund claims.
3. How I collect it
From you, in intake forms, sessions and messages.
From your referrer, such as your GP.
From a parent or carer, for clients under 18.
From other health professionals or support people, only with your consent.
4. Why I use it
To provide your dietetic care.
To write reports to your referrer.
To process Medicare and health fund claims.
To send appointment reminders and invoices.
To meet my legal and professional obligations.
I never use your health information for marketing. I never sell your information.
5. Who I share it with
Your referring GP or health professional: reports about your care, as Medicare requires.
Other health professionals or support people: only with your consent.
Medicare and health funds: to process claims.
Parents or carers: for clients under 18.
My practice software (Halaxy) stores your records and handles bookings, billing and claims.
My AI note-taking tool (Heidi) is used only with your consent (see section 6).
When the law requires it, for example a court order, or to lessen a serious threat to someone’s life, health or safety.
6. How I use AI
With your consent, I use Heidi, an AI note-taking tool, to draft my clinical notes, your session summaries and my letters to your referrer. I use Claude, an AI writing assistant, to help draft public content such as blog posts. I never enter your personal information into Claude or any other public AI tool.
No computer program makes decisions about you. AI tools only produce drafts. I read, check and correct every draft myself before it is saved or sent. AI tools are never used to decide whether I can see you, how urgent your needs are, what risks apply to you, or what care you receive. I make those decisions.
You can say no to the AI note tool at any time. Your care and fees stay the same. More detail: How I Use AI
7. How I store and protect it
Your records are kept in Halaxy, my secure practice software.
I use two-factor login and locked devices.
Heidi doesn’t keep audio recordings, and it deletes its copy of my notes after 7 days.
Capacity Eats, my meal ideas app, stores your food preferences on your own device. I can’t see them.
8. Information stored overseas
Heidi stores and processes clinical information in Australia. My website (Squarespace) and business email (Google) may store information outside Australia, including in the United States. That is why I ask you to keep health details out of email and website forms.
9. How long I keep it
I keep health records for at least 7 years after your last appointment. For clients under 18, I keep them until you turn 25, or for 7 years after your last appointment, whichever is later. After that, I destroy them securely and keep a note of whose record it was, the period it covered and the date it was destroyed.
10. Seeing and correcting your information
You can ask to see your information, or ask me to correct it. Email me and I’ll reply within 30 days. If I can’t give you access, I’ll tell you why in writing.
12. Data breaches
If a data breach is likely to cause you serious harm, I’ll tell you and the Office of the Australian Information Commissioner, as the law requires.
13. Children and young people
For clients under 18, a parent or carer usually provides consent and information. As young people grow older, they may have the right to make their own privacy decisions. I’ll talk this through with each family.
14. Complaints
If you’re unhappy with how I’ve handled your information, please email me first. I’ll respond within 30 days.
If you’re still not satisfied, you can contact:
Office of the Australian Information Commissioner: oaic.gov.au
Health Complaints Commissioner (Victoria): hcc.vic.gov.au
15. Changes to this policy
I review this policy at least once a year, and whenever my tools change. The date at the top shows the latest version.