Privacy

Privacy Policy

How Fern & Soul collects, uses, holds and protects your personal information — including the health information you share with us before treatment.

Last updated: 25 July 2026

Who we are

Fern & Soul is the trading name of Retro River Pty Ltd (ABN 93 140 139 055), a remedial massage studio at Unit 2, 39 King George Street, Innaloo WA 6018, Australia. In this policy, “we”, “us” and “our” mean Retro River Pty Ltd trading as Fern & Soul.

Because we provide a health service, we are covered by the Privacy Act 1988 (Cth) and the Australian Privacy Principles — the small-business exemption does not apply to health providers, and we don’t rely on it. Health information is treated as sensitive information under the Act, and we handle it accordingly.

The information we collect

We only collect information you give us directly, through:

  • The contact form — your name, email address, phone number (optional) and message.
  • The wait list — your email address.
  • The health intake form— completed before your first treatment: your name, date of birth, gender, contact details, occupation, emergency contact, relevant health history (conditions, medications, allergies, surgeries), treatment preferences and your signature. For clients under 18, a parent or guardian’s name and consent as well.
  • Gift voucher purchases— your name, the recipient’s name and email address, an optional recipient mobile number, your gift message and the voucher amount.
  • Bookings — appointments are made through Fresha, a third-party booking platform. Information you enter there is also handled under Fresha’s privacy policy.

Your health information

The health intake form exists so your therapist can judge whether massage is safe for you, plan your treatment, and keep the treatment records they are professionally required to keep. You consent to this collection when you complete the form.

  • Who sees it. Your treating therapist. Nobody else sees your health details unless you ask us to share them, or the law requires it.
  • Health fund claims. If you claim through HICAPS we pass on only what your fund needs — your name, the date and the service. Never your health history.
  • How long we keep it. At least seven years after your last visit, the record-keeping standard for massage therapy in Australia. For clients under 18, until they turn 25.

How we use your information

  • To provide safe, appropriate massage treatment and keep accurate treatment records.
  • To respond to your enquiries and manage your appointments.
  • To process gift voucher purchases and deliver the voucher to your recipient.
  • To let you know when we open or share studio news — only if you have opted in.
  • To understand how our website is used, so we can improve it.

We never sell your information, and we never share it for marketing.

How your information is held

This website doesn’t run its own customer database. Form submissions are delivered to and held in our business email (bookings@fernandsoul.com.au), which serves as the record. Gift voucher details are held within our payment records with Stripe, and mirrored to a voucher register in our Google Workspace so studio staff can check a voucher at the counter. Card payments are processed entirely by Stripe — your full card number never reaches us.

Service providers

Like most small businesses, we rely on a small number of established providers to run our website and services:

  • Stripe — payment processing for gift vouchers.
  • Resend — delivery of form submissions and voucher emails.
  • Google — business email (Google Workspace), website analytics and advertising measurement.
  • Vercel — website hosting.
  • Fresha — appointment bookings.

Some of these providers store data on servers outside Australia, including in the United States. We take reasonable steps to ensure any overseas handling of your information is consistent with the Australian Privacy Principles.

Marketing

We only send marketing email if you have opted in — on the wait list or the intake form. Every marketing email includes an unsubscribe link, and you can opt out at any time by emailing bookings@fernandsoul.com.au.

Cookies and analytics

We use Google Analytics (via Google Tag Manager) to understand how visitors use the site, and Google Ads conversion measurement when someone arrives from one of our ads. These tools use cookies and similar identifiers. They tell us about pages and visits — not who you are. You can block or clear cookies in your browser settings without affecting your use of the site.

Access and correction

You can ask to see the personal information we hold about you, or ask us to correct it, at any time — email bookings@fernandsoul.com.au and we will help. If something is wrong, we will fix it.

Data breaches

If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Complaints

If you have a concern about how we have handled your information, please contact us first at bookings@fernandsoul.com.au or (08) 6285 0378 — we take privacy seriously and will respond promptly. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au.

Changes to this policy

If we change how we handle personal information, we will update this page and revise the date at the top. Questions are always welcome — get in touch any time.