Privacy Policy

Last updated: 13 November 2026

1. Introduction

Steps 2 Harmony respects your privacy and is committed to handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, enquire about our services, complete an assessment or form, participate in coaching or wellbeing services, or book a mobile relaxation experience.

Steps 2 Harmony operates in Australia and offers online holistic health and wellbeing coaching as well as selected in-person services.

2. Information We Collect

Depending on your interactions with us, we may collect:

Your name, email address, telephone or WhatsApp number and relevant contact details.
Your appointment preferences, service enquiries and booking information.
Your session address or accommodation details when arranging mobile services.
Information you voluntarily provide about your wellbeing, health concerns, relevant medical circumstances, mobility, comfort preferences and service suitability.
Information you provide through coaching intake forms, wellbeing assessments, feedback or other service-related communications.
Payment status and transaction information necessary for booking administration and recordkeeping.
Website usage information collected through applicable cookies or analytics tools.

We aim to collect only information reasonably necessary for our services.

3. Why We Collect Information

We collect and use personal information to:

Respond to enquiries and provide information about our services.
Review suitability for a requested coaching or relaxation service.
Arrange, confirm, reschedule and deliver appointments.
Provide personalised coaching or complementary wellbeing services.
Manage payments, refunds and relevant business records.
Communicate important information concerning your appointments.
Improve our services and website.
Meet applicable legal obligations.
Send optional wellbeing updates or promotional communications where you have provided appropriate consent.

We do not use your health information for unrelated marketing without appropriate specific consent.

4. Health and Sensitive Information

Some of our services involve collecting health-related or other sensitive personal information.

We request relevant information to understand your circumstances, assess service suitability and support the safe and appropriate delivery of our services.

We seek your consent to collect this information and explain its intended use.

You may discuss concerns about providing particular information before proceeding. However, we may be unable to provide a service if essential suitability information is unavailable.

Our services are complementary wellbeing and coaching services and do not replace medical diagnosis, treatment or advice.

5. How We Collect Information

We may collect information when you:

Contact us through our website, email, telephone, WhatsApp or social media.
Complete a booking, consent, screening or coaching form.
Participate in a consultation or wellbeing session.
Use a wellbeing assessment or planning tool.
Subscribe to updates or voluntarily provide feedback.
Use our website, where analytics or similar technologies are active.

Where practicable, we collect your information directly from you.

6. Storage and Security

For mobile relaxation bookings, contact details, screening responses, client preferences and consent information may be collected using Google Forms and stored in Google Forms and associated Google Sheets.

Basic contact information, such as name, email address and telephone number, may also be transferred to Systeme.io for contact and appointment administration. Health screening responses will not intentionally be transferred to Systeme.io through this contact integration.

Access to screening records is restricted to authorised persons who need the information to provide or administer our services.

7. Third-Party Service Providers

We may use external service providers for website hosting, form collection, appointment administration, communications, payments and other necessary business operations.

These providers may process personal information on our behalf to deliver their services.

We do not sell or rent personal information to third parties for their independent marketing purposes.

8. Overseas Handling of Information

Some technology providers we use may store, process or access information outside Australia.

Where overseas handling is relevant, we take reasonable steps to assess and manage privacy risks and comply with applicable legal requirements.

We use third-party technology providers, including Google and Systeme.io, to support our business operations. Depending on their services and infrastructure, personal information may be stored, processed or accessed outside Australia. Where personal information is disclosed to overseas recipients, we aim to comply with applicable Australian privacy requirements.

9. Email and Marketing Communications

We may use your email address or contact number to communicate about enquiries, appointments, payments and services you have requested.

We send promotional information, wellbeing updates and special offers only where permitted by applicable law and where appropriate consent has been obtained.

You may withdraw your marketing consent or unsubscribe at any time.

Withdrawing marketing consent does not prevent necessary communications about an appointment or service you have requested.

10. Cookies and Website Analytics

Our website may use cookies, analytics or other technologies to understand visitor activity and improve website functionality.

The information collected depends on the tools enabled on our website.

11. Access, Correction and Privacy Requests

You may contact us to request access to personal information we hold about you or ask us to correct information that is inaccurate, outdated or incomplete.

Requests to delete information will be considered in accordance with applicable law, professional obligations and legitimate recordkeeping requirements.

We may need to verify your identity before responding to certain requests.

12. Retention of Information

We retain personal information only for as long as reasonably necessary for service delivery, relevant professional and business recordkeeping, legal obligations or other lawful purposes.

When information is no longer required and there is no lawful reason to retain it, we take reasonable steps to securely delete or de-identify it.

We periodically review the personal information and records we hold to determine whether they are still required for service delivery, recordkeeping or legal purposes. Where information is no longer required and no legal retention obligation applies, we take reasonable steps to securely delete or de-identify it.

13. Privacy Concerns and Complaints

If you have a privacy-related concern or complaint, please contact us using the details below.

We will review your concern and respond within a reasonable timeframe.

If you remain dissatisfied, you may be able to contact the Office of the Australian Information Commissioner (OAIC), subject to its complaint procedures.

14. Changes to This Policy

We may update this Privacy Policy when our services, technology, legal obligations or business practices change.

The current version will be published on our website with its updated date.