∴

drrey.health · privacy

privacy policy

last updated · 22 july 2026

IKIGAI CITY PTY LTD
ABN 59 693 793 494
trading as dr rey
privacy contact · privacy@drrey.health

This website is operated by IKIGAI CITY PTY LTD, trading as dr rey. In this policy, “I” and “me” refer to the company.

I take your privacy seriously. This page explains, in plain language, what information I collect, why I use it, where it may be handled, and the choices you have.

I handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

what I collect

Depending on how you interact with me, I may collect:

• your name and email address when you make an enquiry or join the mailing list
• a record of your newsletter consent and any unsubscribe request
• correspondence you send directly by email
• booking or appointment information, if you arrange a call
• billing and transaction information when you pay by invoice, bank transfer or Stripe
• privacy requests, complaints or security-related correspondence
• limited technical information recorded by the website host, such as your IP address and the time a page was requested.

This website uses no advertising pixels, behavioural analytics or session recording.

how I collect it

I may collect personal information:

• directly from you through the website form
• when you email or communicate with me
• when you arrange a booking
• when you make a payment
• automatically through limited website-host server logs
• from another person where you have authorised them or where collection is otherwise permitted by law.

You may browse this public website without identifying yourself. I need basic contact details if you would like a response to an enquiry.

why I use it

I use personal information only where reasonably necessary to:

• respond to enquiries
• manage newsletter subscriptions
• arrange calls or services
• process payments and maintain business records
• operate, secure and troubleshoot the website
• respond to privacy requests or complaints
• comply with legal, accounting, insurance and security obligations.

You do not have to provide personal information. However, I may be unable to respond or provide the requested service without basic contact details.

health information

Health information is sensitive information.

This website does not currently collect health, medical or pathology information. Please do not send health information through the general enquiry form or by ordinary email.

The health intake and program-record systems for dr rey are still being finalised. Before I begin collecting health information, I will provide a separate collection notice and consent explaining:

• what will be collected
• why it is needed
• which organisation holds each record
• who may access it
• which systems are used
• whether it may be processed overseas
• how long it will be retained.

If health information is sent to me unexpectedly, I will restrict access and decide whether it should be securely deleted or moved into an approved system, taking account of safety, legal and recordkeeping requirements.

where your information lives

I use a small number of service providers to run the website and business:

• Google Workspace for email, business files, enquiry records and mailing-list administration
• Google Apps Script and Google Sheets to send website form submissions into my Google Workspace account
• Vercel to host this website and maintain standard technical server logs
• Stripe to process card payments, where used
• my bank to process bank transfers.

Stripe may provide me with limited billing and transaction information. I do not receive or store your complete card number.

These providers handle information under their own contractual, privacy and security terms.

who I may share it with

I may disclose personal information where reasonably necessary to:

• technology and payment providers that support the business
• professional advisers, insurers or auditors
• regulators, courts or law-enforcement bodies where required or authorised by law
• another person where you have asked or authorised me to do so
• a purchaser or adviser in connection with a proposed business sale or restructure.

I do not sell personal information.

I do not disclose personal information for third-party advertising.

AI tools

I use OpenAI ChatGPT and Anthropic Claude for general drafting, organisation and research.

I do not enter your name, contact details or identifiable health information into these tools. They may be used only with public, synthetic or genuinely de-identified information unless a separately approved environment and lawful process are established.

overseas processing

Some service providers may store, process or support information outside Australia, including in the United States and other countries where they or their subprocessors operate.

I assess the type of information involved, the provider’s terms, access controls, retention practices and security measures. I take reasonable steps to require personal information to be handled consistently with the Australian Privacy Principles.

how I protect it

I use reasonable administrative and technical safeguards, including:

• restricted access
• multi-factor authentication
• device encryption
• secure business accounts
• limited external sharing
• security alerts
• regular access and application reviews
• collecting only the information reasonably needed.

No online system is completely risk-free. I review safeguards as the business and services change.

how long I keep it

I keep personal information only for as long as reasonably needed for the purpose for which it was collected, or where retention is required for legal, accounting, insurance, complaint, safety or security reasons.

My current operational standards are:

• unanswered enquiries · up to 90 days
• resolved enquiries that do not become clients · up to 12 months
• newsletter information · while you remain subscribed
• after unsubscribe · a minimal suppression record may be retained to prevent further marketing
• payment and business records · for the period required by applicable law.

You may ask me to delete information. I will delete or de-identify it where it is no longer required and there is no lawful reason to retain it.

newsletter and marketing

I will send marketing or newsletter emails only where you have opted in or where another lawful basis applies.

Every marketing email will identify IKIGAI CITY and include a clear way to unsubscribe. You may also unsubscribe by emailing privacy@drrey.health.

I will action unsubscribe requests within five working days.

adults only

My services are designed for adults aged 18 and over.

This website is not directed at children, and I do not knowingly collect personal information from anyone under 18.

if something goes wrong

If I suspect a data breach, I will promptly:

• contain the incident
• assess what information and people may be affected
• take steps to reduce possible harm
• document and review what happened.

Where I have reasonable grounds to believe an eligible data breach has occurred, I will notify affected individuals and the Office of the Australian Information Commissioner as soon as practicable, as required by the Notifiable Data Breaches scheme.

your rights

You may ask to access or correct personal information I hold about you by emailing privacy@drrey.health.

I may need to verify your identity before releasing or changing information. I will respond within a reasonable period and explain any lawful reason why access, correction or deletion cannot be provided.

You may also ask:

• what information I hold
• how it has been used
• who it has been disclosed to
• for marketing communications to stop.

complaints

If you believe I have mishandled your personal information, please email privacy@drrey.health.

I will:

1. acknowledge your complaint within five business days
2. investigate it fairly
3. aim to provide a written response within 30 days
4. explain any corrective action taken.

If you are not satisfied with my response, you may complain to the Office of the Australian Information Commissioner.

changes

I may update this policy when the website, services, systems or legal requirements change.

The current version will always appear on this page with its updated date.

← return home