Privacy Policy

Last updated: 15 August 2026

UpHill Performance (“we”, “us”, “our”) is a physiotherapy, bike fitting, aerodynamic testing and sport science practice operated by Joshua Lindenthaler at 25 Diesendorf St, Wright ACT 2611, Australia.

This policy explains what personal information we collect, why we collect it, who we share it with, and how you can access, correct or delete it.

The law that applies to us

We are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles, and by the Health Records (Privacy and Access) Act 1997 (ACT).

Many small businesses are exempt from the Privacy Act. We are not. Because we provide a health service and hold health information, the small business exemption does not apply to us regardless of our turnover, and we are subject to the Act in full.

What we collect

Health information

Health information is classed as sensitive information and attracts the highest level of protection under the Act. For patients this includes your medical history, current and past injuries, symptoms, medications, surgical history, relevant family history, examination and measurement findings, treatment provided, clinical notes, bike fit measurements and coordinates, aerodynamic test data, and metabolic and physiological test results.

Personal and contact information

Your name, date of birth, address, phone number, email address, emergency contact, occupation, and the sports or activities relevant to your care.

Billing and claiming information

Private health fund name and membership number, Medicare number where a referral or care plan applies, Department of Veterans Affairs number where applicable, and claim, employer and insurer details where your treatment relates to a workers compensation or compulsory third party motor accident claim.

Payment information

We accept payment by card terminal in the clinic, through our online booking and practice management system, and by bank transfer or cash. Card payments are handled by our terminal provider and by our practice management provider. We do not see, store or have access to your full card number.

Website information

This website does not have a contact form, a login, a comment system or a shop. If you browse the site we collect only what is standard for any web server: IP address, browser type, pages viewed, and referring page. Aggregate, non-identifying visit statistics are collected to understand which pages are useful.

When you click through to book an appointment you leave this website and enter our booking provider’s system, where their own privacy terms also apply.

How we collect it

Wherever it is reasonable and practicable, we collect personal information directly from you: on the booking form, in the initial consultation, during treatment and testing, and in follow-up conversation.

Sometimes we collect it from someone else, with your consent or where the law allows. That usually means a referring GP or specialist, a parent or guardian for a patient under 18, another treating practitioner, or an insurer or employer where you have made a claim.

Why we collect it

• To provide physiotherapy, bike fitting, aerodynamic testing and sport science testing safely and appropriately.
• To identify risks and contraindications before testing you at maximal effort.
• To keep the clinical records that a registered health practitioner is legally required to keep.
• To communicate with you about your appointments and your care.
• To bill you and to process health fund, Medicare, DVA or insurer claims.
• To communicate with other practitioners involved in your care, with your consent.
• To meet our legal and professional obligations, including those of the Physiotherapy Board of Australia and the Australian Health Practitioner Regulation Agency.

If you choose not to provide the information we ask for, we may not be able to treat or test you safely, and in some cases we may not be able to treat you at all.

Who we disclose it to

We do not sell your information, and we do not disclose it for marketing. We may disclose it to:

• Your private health fund, when you claim on the spot through the clinic terminal.
• Medicare, where you are being treated under a GP referral or chronic disease management plan.
• The Department of Veterans Affairs, where your treatment is funded by DVA.
• Workers compensation and compulsory third party insurers, and in some cases your employer or their rehabilitation provider, where your treatment relates to a claim. This normally includes progress reports and may include clinical notes.
• Other health practitioners involved in your care, such as your GP, a specialist or another allied health provider, with your consent.
• Our practice management and online booking provider, which stores your appointment and clinical records on our behalf under contract.
• Our payment and terminal providers, for the purpose of processing payment.
• Our website host and website service providers, incidentally, in the course of operating this website.
• Anyone we are required or authorised to disclose to by law, including where there is a serious and imminent threat to someone’s life, health or safety.

Information sent overseas

Your clinical records are held in our practice management system, not on this website.

Some of the services that operate this website are provided by companies based outside Australia, including in the United States. These handle website performance, security, image delivery and aggregate visit statistics. They do not receive your health information. Where we disclose personal information to an overseas recipient we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

Cookies

This website uses a small number of cookies for caching and performance, so that pages load quickly. We do not use cookies to build advertising profiles, and we do not run advertising trackers on this site. You can block or delete cookies in your browser settings; the site will still work.

Social media

We maintain profiles on Facebook and Instagram. If you interact with us there — following, commenting, liking, or sending a direct message — that interaction happens on Meta’s platform and is governed by Meta’s own privacy policy as well as this one.

We may use tools that publish posts and stories to our own social media accounts. These tools access our business account only. They do not collect information about you, and they do not give us access to your personal social media account.

Please do not send us health information through social media. Direct messages are not a secure channel and are not part of your clinical record. If you need to discuss your care, call the clinic on 0+61 438 284 788.

How we keep it secure

Clinical records are held electronically in a password-protected practice management system with access limited to the practitioner. Any paper records are stored securely on the premises. This website is served over an encrypted connection (HTTPS) and kept up to date.

No system is perfectly secure, and we cannot guarantee the security of information transmitted to us over the internet or by email. Email in particular is not a secure channel.

How long we keep it

We are required to retain health records for a minimum period. In general this means at least seven years from the date of your last visit for an adult patient, and until a patient who was a child at the time of treatment reaches the age of 25.

Once records are no longer required and the retention period has passed, we destroy or de-identify them securely.

Accessing and correcting your information

You have the right to ask for a copy of the personal and health information we hold about you, and to ask us to correct it if it is wrong, out of date, incomplete or misleading.

Ask in writing at info@uphill.com.au. We will need to verify your identity. We aim to respond within 30 days. In limited circumstances set out in the legislation we may refuse access — for example where giving access would pose a serious threat to someone’s life, health or safety, or would unreasonably affect another person’s privacy. If we refuse, we will tell you why in writing and explain how to complain.

A reasonable fee may apply for retrieving and copying a large record. There is no fee for asking for a correction.

Deleting your information

To request deletion of information we hold about you, email info@uphill.com.au with the subject line “Data deletion request”, from the email address we hold for you, and tell us what you want removed. We will confirm receipt and tell you what we can and cannot delete, normally within 30 days.

What we can delete: your contact details, marketing preferences, enquiry correspondence, and any data held by our social media tools.

What we cannot delete: clinical records that we are legally required to retain for the period described above. We can restrict access to them and stop contacting you, but we cannot destroy them early. Records already lawfully disclosed to a health fund, Medicare, DVA or an insurer are held by that organisation under its own policy, and you would need to approach them directly.

Data breaches

We are covered by the Notifiable Data Breaches scheme. If a breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as soon as practicable.

Complaints

If you think we have mishandled your personal or health information, tell us first — email info@uphill.com.au or call 0+61 438 284 788. We will acknowledge your complaint and aim to resolve it within 30 days.

If you are not satisfied with our response, you can take it further:

• Office of the Australian Information Commissioner — 1300 363 992, oaic.gov.au
• ACT Human Rights Commission, which handles health records and health service complaints in the ACT — hrc.act.gov.au

Changes to this policy

We review this policy periodically and will update it when our practices change. The current version is always available at uphill.com.au/privacy-policy, with the date it was last updated at the top.

Contact us

UpHill Performance
25 Diesendorf St, Wright ACT 2611, Australia
Phone: 0438 284 788
Email: info@uphill.com.au