Privacy policy

Ngaya Wellness Pty Ltd (ABN 29 699 510 211) ("Ngaya", "we") runs the studio at 5/122 Garden Grove Parade, Adamstown NSW 2289. This policy explains what personal information we collect through our booking system and how we look after it. We follow the Australian Privacy Principles in the Privacy Act 1988.

What we collect

• Your name, email address and phone number.
• Your bookings: treatments, practitioners, dates, and attendance.
• Notes you or your practitioner add about your booking. These can include health information relevant to your treatment, such as injuries, pregnancy or allergies.
• Your health form (your health, medications, allergies and emergency contact) and your practitioner's treatment notes. Only the practitioners who treat you and Ngaya's management can see these.
• Gift voucher details, including the purchaser's and recipient's names and emails for vouchers bought online.
• Payment details. Your card is handled by Stripe. We only see the card type, the last four digits and the expiry date.

Why we collect it

• To take, confirm and remind you about bookings.
• To give you safe, suitable treatment.
• To apply our cancellation policy.
• To sell and redeem gift vouchers.
• To contact you about your bookings.

We don't send marketing emails from the booking system. We don't sell your information.

Who sees it

• Your practitioner sees your booking and the notes for it. Some practitioners are independent businesses that rent rooms at Ngaya. They see only their own clients' bookings.
• Ngaya's reception and admin staff.
• Service providers that help run the booking system: Supabase, which stores the data in Sydney, Australia; Vercel, which hosts the website; Stripe, for payments; and Resend, which sends our emails. Some of these providers may process information outside Australia, including in the United States.
• Others, only where required by law.

How we protect it

• Access is limited to signed-in staff, and each person only sees what their role needs.
• The data is encrypted in transit.
• We don't store card numbers.

How long we keep it

We keep booking records for as long as we need them for treatment, legal and tax purposes, generally 7 years. After that we delete or de-identify them.

Your choices

• You can ask to see or correct the information we hold about you.
• You can ask us to delete it, unless we need to keep it by law.
• Email hello@ngayawellness.com.au or call 0489 078 970.
• If you're unhappy with how we've handled a privacy matter, contact us first. If it isn't resolved, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Last updated 28 October 2026.