Australian Privacy Act Notice

Grovvve handles personal information, including health information, in line with the 13 Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth). Health information is treated as sensitive information and given a heightened level of protection.

As with our other regional obligations, practitioners act as the data controller for their client data, and Grovvve processes that data only on the practitioner's instructions, in the same role as under our Data Processing Agreement.

We collect only the personal and sensitive information needed to provide the platform: practitioner account details, and whatever client information a practitioner chooses to record, such as names, contact details, session notes, intake forms, and billing details.

Personal information is not used or disclosed for any purpose beyond providing the service, except where required by Australian law or with consent.

Some data processing occurs via infrastructure providers located outside Australia, including the EU and US. Where personal information is disclosed overseas, we take reasonable steps to ensure recipients handle it consistently with the Australian Privacy Principles, including through contractual data processing terms.