Privacy
Policy

How Project 97 collects, uses, and protects your information.

Last updated: June 2026

Project 97 (ABN 60 744 009 751) is an Accredited Exercise Physiology practice operated by Christopher Anastasiou, based in Brisbane, Queensland. This Privacy Policy explains how we handle your personal and health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using this website or engaging our services, you consent to our collection and use of your information as described below.

1. What information we collect

We may collect the following types of personal information:

  • Contact details — your name, email address, and any other information you provide when making an enquiry, booking, or subscribing to our newsletter.
  • Health information — when you attend a consultation (in-person or online), we collect clinical information including your medical history, current conditions, symptoms, medications, and goals. This is considered sensitive information under the Privacy Act.
  • Technical data — our website uses a visitor counter (no personal data is stored) and browser local storage to remember newsletter preferences and promotional codes you have received. We do not use tracking cookies or third-party analytics.

2. How we collect your information

We collect information:

  • Directly from you when you complete a contact or booking form, subscribe to our newsletter, or send us a message via Instagram or email.
  • During consultations (clinical intake forms, verbal history, movement assessments).
  • Through our website when you interact with it (see Technical data above).

3. Why we collect your information

Your information is collected and used for the following primary purposes:

  • To provide clinical exercise physiology services, including assessment, program design, and ongoing care.
  • To communicate with you about appointments, results, and your care plan.
  • To send our free newsletter, Strong in 3, if you have subscribed (you may unsubscribe at any time).
  • To meet our legal obligations, including Medicare, NDIS, DVA, and WorkCover requirements.
  • To improve our services.

We will not use your information for a secondary purpose without your consent, unless an exception under the Privacy Act applies.

4. Disclosure to third parties

We may share your information with the following parties, only to the extent necessary:

  • Netlify — our website host (United States). Netlify stores website files and serverless function logs. No client health records are stored on Netlify infrastructure. See Netlify's Privacy Policy.
  • Halaxy — our clinical management and booking system (Australia). Health records and appointment data are stored in Halaxy. See Halaxy's Privacy Policy.
  • Email provider — if you subscribe to our newsletter, your email address is stored with our email service provider. We will update this policy when the provider is confirmed.
  • Funding bodies — with your consent, we may share relevant clinical information with Medicare, NDIS, DVA, WorkCover, or your GP as required to process claims or coordinate care.
  • Legal obligations — we may disclose information where required by law (e.g., mandatory reporting obligations).

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

5. Cross-border disclosure

Some of our service providers (including Netlify) operate outside Australia. Where personal information is disclosed overseas, we take reasonable steps to ensure the recipient handles the information consistently with the Australian Privacy Principles.

6. Health records

As an allied health provider, Project 97 is subject to obligations regarding health records under the Privacy Act 1988 and relevant Queensland legislation. Your health records are treated as sensitive information and are afforded additional protection. They are used only for the purpose of your clinical care.

Clinical records are retained for a minimum of 7 years from the date of last service (or until a minor turns 25), in accordance with professional and legal obligations.

7. Storage and security

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access. Measures include secure clinical software (Halaxy), encrypted communications, and limited access controls. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

8. Your rights

Under the Privacy Act, you have the right to:

  • Request access to the personal information we hold about you.
  • Request correction of information that is inaccurate, out of date, or incomplete.
  • Request that we delete your information (subject to our legal record-keeping obligations).
  • Withdraw consent to receive marketing communications at any time.

To exercise any of these rights, contact us using the details in Section 10 below. We will respond within 30 days.

9. Website cookies and local storage

This website does not use tracking cookies or third-party analytics. We use your browser's local storage solely to remember whether you have dismissed our newsletter prompt and to store any discount code issued to you. This data stays on your device and is not transmitted to our servers. You can clear it at any time through your browser settings.

10. Contact us

For any privacy enquiries, to access or correct your information, or to make a complaint, please contact us:

  • By email: christopher.anastasiou1@gmail.com
  • By Instagram DM: @project.97_
  • Practice: Project 97, Brisbane, QLD

11. Complaints

If you are not satisfied with our response to a privacy concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992
  • GPO Box 5218, Sydney NSW 2001

12. Updates to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page. Material changes will be communicated via our newsletter or the website.