Privacy Policy

Upstanding Health Group Pty Ltd (UHGroup, we, us, our) is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect, how we use and store it, and how you can access or correct it.

This policy applies to information collected through our website (uhgroup.au) and in the course of providing Occupational Therapy, Physiotherapy, Podiatry and Allied Health Assistant services.

What we collect

Depending on how you interact with us, we may collect:

• Contact details — name, email address, phone number, and any details you provide through our website contact form
• Referral and service information — when you make a referral or become a client, information such as your NDIS or aged care details, funding arrangements, and the reason for referral
• Health information — clinical notes, assessment results, and other health information relevant to the services we provide, collected as part of delivering therapy services
• Enquiry details — the content of any message you send us, including the subject you select and anything you write

We only collect health information (which is “sensitive information” under the Privacy Act) with your consent, or where reasonably necessary to provide our services to you.

How we collect it

• Directly from you — through our website contact form, by phone, by email, or in person
• Through referrals made on your behalf — by a support coordinator, case manager, family member, or other health professional (with appropriate consent)
• Through our clinical practice management software, Splose, which we use to manage referrals and appointments — if you submit a referral form through Splose, that information is collected and stored by Splose on our behalf; Splose has its own privacy and security practices, which you can review at splose.com

How we use your information

We use your personal information to:

• Assess and respond to referrals and enquiries
• Deliver and coordinate allied health services
• Communicate with you about appointments, reports, and your care
• Process funding and billing through NDIS, Medicare, HICAPS, or private health arrangements
• Meet our legal and regulatory obligations, including reporting obligations to bodies such as the NDIS Quality and Safeguards Commission, the Aged Care Quality and Safety Commission, or AHPRA where required

We do not use the personal or health information you give us as a client for marketing, and we do not sell your personal information to third parties. Advertising measurement on our website is a separate matter, explained under Advertising and the Meta Pixel below.

Who we may share it with

We only share your information where necessary to deliver your care or where required by law, including with:

• Other treating practitioners involved in your care, with your consent
• Support coordinators, case managers, or plan managers you’ve authorised to liaise with us
• Splose, as our clinical software provider
• Regulatory or oversight bodies, where we are legally required to report (e.g. the NDIS Commission, Aged Care Quality and Safety Commission, AHPRA, or the Office of the Health Ombudsman Queensland)
• Our IT and website service providers, to the extent necessary to operate our systems

Our website specifically

Our contact form collects your name, email, phone number, the subject you select, and your message, and sends this directly to our admin email address. We use standard protections (including spam and rate-limit filters) to keep this form secure.

Our Contact page includes an embedded Google Map to help you find our clinic. When this map loads, Google may collect information in accordance with its own privacy policy — this occurs outside our control, and we encourage you to review Google’s privacy policy if you have concerns.

Referral forms linked from our Referrals page are hosted externally by Splose, not on our own website — information you enter there is collected under Splose’s own privacy practices.

Advertising and the Meta Pixel

We advertise on Facebook and Instagram. To understand whether those advertisements are working, our website uses the Meta Pixel — a small piece of code provided by Meta Platforms, Inc. When you visit a page on uhgroup.au, the Pixel tells Meta that a visit took place and records the page address, your IP address, your browser and device type, and an identifier from any Facebook or Instagram cookie already on your device. It also records when a visitor taps one of our referral buttons, phone numbers, or email links, so we can count how many enquiries our advertising produces.

We have deliberately switched off Meta’s Automatic Advanced Matching feature, which would otherwise read what you type into forms on our site. Nothing you enter into our contact form is sent to Meta, and no clinical information — your health, diagnosis, funding, or care — passes through the Pixel, because none of that information exists on our public website. The Pixel also does not run at all if a page address contains anything that looks like personal details.

Meta will, however, be able to see which pages of our site a device visited, including service pages such as Podiatry or Occupational Therapy. If you would prefer that not to happen, you can stop it: most browsers let you block third-party cookies or switch on tracking protection, privacy extensions such as uBlock Origin or Privacy Badger will prevent the Pixel loading, and you can change what Meta does with this data under Ad Preferences in your Facebook or Instagram account. Blocking the Pixel will not affect your ability to use any part of our website or to make a referral.

Website analytics (Google Analytics)

We use Google Analytics 4, provided by Google LLC, to understand how people find and use our website — for example, which pages are visited, how visitors arrived (such as from a Google search or one of our advertisements), what type of device and browser they used, and their approximate location (city or region, not a street address). Google Analytics sets its own cookies to tell repeat visits apart. It also records when a visitor submits our quick enquiry form or taps a referral button, phone number or email link, so we can count enquiries. It does not receive what you type into our forms, and no clinical information passes through it.

Google Analytics does not run for staff who are logged in to our website. We use this information only in summary form to improve our website and our advertising. You can opt out by blocking third-party cookies in your browser, using a privacy extension, or installing Google’s own Analytics opt-out browser add-on. Doing so will not affect your ability to use our website or make a referral.

Overseas disclosure

We primarily use Australian-based service providers. Some third-party services we rely on — Google, for the embedded map on our Contact page and for Google Analytics, and Meta Platforms, Inc., for the advertising Pixel described above — store or process data on servers located overseas, including in the United States. We take reasonable steps to ensure any third party we engage handles personal information in a manner consistent with the Australian Privacy Principles, but we cannot guarantee the privacy practices of services outside our control, such as Google.

Storage and security

We take reasonable steps to protect the personal information we hold from misuse and interference, loss, and unauthorised access, modification, or disclosure. Health information is stored in Splose, a purpose-built clinical software platform. We retain personal and health information only for as long as necessary to provide our services and to meet our legal and professional record-keeping obligations.

Cookies

Our website uses the minimal cookies required for the site to function correctly (for example, session cookies used by WordPress), together with the Meta Pixel cookie and the Google Analytics cookies described above, which measure how our website and our Facebook and Instagram advertising are performing. We do not use any other analytics or advertising platforms. You can block or delete cookies through your browser settings at any time and the site will continue to work normally.

Access and correction

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it’s inaccurate, out of date, or incomplete. To make a request, contact us using the details below.

Complaints

If you have a concern about how we’ve handled your personal information, please contact us directly first — see our Feedback and Complaints page for how this works. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The most current version will always be available on this page. This policy was last updated on 25 September 2026.

Contact us

Upstanding Health Group Pty Ltd
1/19 Railway Parade, Darra QLD 4076
PO Box 70, Underwood QLD 4119
admin@uhgroup.au
(07) 3187 5018
ABN 40 666 152 003