TerraLumeTasmania ← Back to Terra Lume
Terra Lume · Policies

Privacy Policy

Version 1.5 · 8 September 2026 · Supersedes Version 1.4

Terra Lume is a complementary wellbeing practice operated by Frederica Dillon as a sole trader in southern Tasmania, Australia. This Policy explains how we collect, hold, use and disclose your personal information.

Terra Lume’s services involve collecting health information. Under the Privacy Act 1988 (Cth), a business that provides a health service and holds health information is a health service provider and must comply with the Australian Privacy Principles (APPs) — regardless of its size or turnover. Terra Lume is covered on that basis, and this Policy is written to meet those obligations.

By booking or attending a session, completing one of our forms, subscribing to our list, purchasing a product or otherwise communicating with us, you agree to the handling of your information described here.

1. Who we are, and how to reach us

Terra Lume — Frederica Dillon, sole trader
ABN: 46 048 234 630
Email: energy@terralume.com.au
Website: terralume.com.au

Frederica Dillon is the person responsible for privacy at Terra Lume and handles all privacy enquiries, access requests and complaints personally.

2. What we collect

Identity and contact information. Your name and how you prefer to be addressed, email address, phone number, and — where relevant to an in-person session — an emergency contact name and number.

Health information. Health information is sensitive information under the Privacy Act and carries the highest level of protection. We collect it only to work out whether a session is appropriate for you and to deliver that session safely. Depending on the service, this may include current and past health conditions, current medications or medical treatment, recent surgery or injury, implanted medical devices, pregnancy, seizure history, and anything else you tell us is relevant.

How much we ask, and when, differs by service. Biofield Tuning practice sessions require a suitability screen that is completed and reviewed before a place is confirmed. Reiki is not gated by a health screen and uses the details and consent provided in the booking form. Each form sets out exactly what is asked.

Appointment and session information. Sessions you have booked, attended, rescheduled or cancelled; whether a session was in person or by distance and, for an in-person session, where it was held; practitioner notes made before, during or after a session; and your stated preferences for how a session is delivered.

Session recordings (distance Biofield Tuning only). Distance Biofield Tuning sessions are audio-recorded and the recording is sent to you afterwards, because the recording is part of what the session offers. Recordings are made only with your prior consent, given on the screening form. Reiki sessions are not recorded, and in-person sessions are not recorded. You may withdraw consent to recording at any time before the session; if you do, the session proceeds without a recording. See section 7.

Payment information. Records of transactions — what was paid, how, when, and for which service or product, including a record of any payment made in cash. We do not see or store your full card number or bank details; card payments are handled online by our payment provider (section 8), and we do not process card payments at an appointment.

Order and delivery information. If you buy a product from us, we collect the order details and, for a physical product, a delivery address.

Marketing preferences. Whether you have opted in to our email list, what you have opened or clicked, and when you unsubscribe.

Feedback and testimonials. Feedback you choose to give, and — separately and only with your written permission — a testimonial and your recorded preference for how you are identified.

Website information. Information collected automatically when you visit terralume.com.au — see section 9.

3. How we collect it

We collect personal information:

  • directly from you, when you complete a screening, booking, consent, order or enquiry form;
  • when you contact us by email, phone, SMS or social media;
  • when you attend a session, including notes the practitioner makes;
  • when you subscribe to our email list or download something from us;
  • when you buy a product or pay for a session; and
  • automatically, when you use our website (section 9).

Wherever it is reasonable and practicable, we collect health information directly from you rather than from anyone else.

Anonymity. You may enquire about our services anonymously or under a pseudonym. However, we cannot deliver a session anonymously — a session requires identification and a way to contact you. Biofield Tuning practice sessions also require the suitability information requested in the relevant form.

4. Why we collect it

We use your personal information to:

  • assess whether a session is appropriate and safe for you;
  • book, confirm, reschedule and manage your appointments;
  • send you preparation guidance, reminders, aftercare notes and a follow-up check-in;
  • make and send a distance Biofield Tuning session recording, where you have consented;
  • keep accurate session and service records;
  • take payment and keep the financial records the law requires;
  • fulfil product orders;
  • maintain the practitioner training record described in section 6;
  • send you marketing communications where you have asked us to (section 10);
  • collect feedback and, with your separate written permission, publish a testimonial;
  • respond to your questions and complaints;
  • meet our legal, insurance and professional obligations; and
  • improve how the practice runs.

We will not use your personal information for any other purpose without your consent, except where the law permits or requires it.

Because health information is sensitive information, we collect it only with your consent. That consent is given through the Biofield Tuning suitability screen and, where relevant, the Reiki booking form, which set out separately what you are consenting to — including the nature of the practice, permission for light touch during a session, recording of a distance Biofield Tuning session, and collection of your health information.

You can withdraw your consent at any time by telling us, in person or in writing. Withdrawing consent for touch or recording during a session takes effect immediately and needs no explanation. Withdrawing consent to hold your health information means we can no longer deliver sessions to you, and we will tell you what we are legally required to keep and for how long (section 12).

6. Biofield Tuning practice sessions and the training record

Terra Lume’s complimentary Biofield Tuning sessions are practitioner-development practice sessions, completed as part of Frederica’s BioSona training. They are not a paid professional service.

Because they are training, these sessions generate a training record: the date, the format, and the practitioner’s own reflections on the session. Practice sessions may also be discussed with Frederica’s trainer, supervisor or peer group for the purpose of her learning.

When that happens, your information is de-identified. Your name and contact details are not included. We will not disclose information that identifies you to a trainer, supervisor, peer group or training provider unless you have given separate written consent.

Feedback you give after a practice session is used to improve the practice and, where relevant to her training, may be shared in de-identified form. If you would prefer your feedback not to be used at all, tell us and we will honour that.

7. Session recordings

For distance Biofield Tuning sessions only, and only where you have consented:

  • the session is audio-recorded;
  • the recording is sent to you afterwards by email or a private link;
  • a copy is held in our client management system as part of your session record, and is retained for the period in section 12;
  • the recording is not shared with anyone else, is not used in marketing, and is not published anywhere, unless you give separate written consent for a specific use; and
  • you may ask us to delete your recording at any time, and we will, unless we are required by law to keep it.

8. Who we share it with

Terra Lume does not sell, rent or trade your personal information.

We share it only where it is necessary, with:

Service providers who operate our systems.

Provider What they do Where they process data
HighLevel Inc. (GoHighLevel) Bookings, forms, client records, email and SMS, and our online store United States
Stripe, Inc. Card payments made online, at booking or on an invoice United States
Google LLC Email, calendar and document storage United States and elsewhere
Emergent Hosting for terralume.com.au Outside Australia
Meta Platforms, Inc. Advertising and website measurement (section 9) United States

These providers act on our instructions and are not authorised to use your information for their own purposes. Each has its own privacy policy governing how it handles data.

Where the law requires or permits it — for example, to comply with a court order or a lawful request from a regulator.

In an emergency — if we reasonably believe it is necessary to lessen or prevent a serious threat to your life, health or safety, or to public health or safety.

With your consent — including a testimonial you have given written permission to publish.

We do not share your health information with your other health practitioners unless you ask us to and consent in writing.

9. Our website, cookies and tracking

Hosting and forms. terralume.com.au is hosted by Emergent. Some pages embed a form from our client management system; when you submit one, the information goes to that system, not to the website host.

Cookies and similar technologies. Our website and the embedded forms use cookies and similar technologies to make the site work, remember your session, and measure how the site is used.

Advertising and measurement. We use the Meta pixel on some pages to measure the results of our advertising and, where you have consented, to show you advertising. This may involve Meta receiving information about your visit, including the page you viewed and an identifier associated with your browser or Meta account. You can manage this through your Meta ad preferences, your browser’s cookie settings, or a tracking-blocking extension.

Campaign links. Links in our ads, posts and printed material may carry parameters (such as utm_source) that tell us which ad, post or flyer brought you to the site. These are not used to identify you personally.

Choices. You can set your browser to refuse cookies or to tell you when one is being set. Some parts of the site — particularly embedded booking and screening forms — may not work correctly if you do.

We do not use your health information for advertising, ever, and we do not build advertising audiences from our client records.

10. Marketing and our email list

We send marketing emails — newsletters, offers and announcements — only to people who have opted in, consistent with the Spam Act 2003 (Cth).

Every marketing email identifies Terra Lume as the sender and contains a working unsubscribe link. You can also unsubscribe at any time by emailing energy@terralume.com.au. We action unsubscribes promptly.

Unsubscribing from marketing does not stop transactional messages about a session you have booked — confirmations, preparation guidance, reminders, aftercare notes and receipts. Those are part of delivering the service.

If you download a free resource from us, we will tell you at the point of download whether that subscribes you to our list, and you can unsubscribe immediately.

11. How we protect your information

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, modification or disclosure:

  • access to client records is limited to Frederica Dillon;
  • accounts holding your information are protected by strong, unique passwords and multi-factor authentication where the provider supports it;
  • we use reputable platforms that maintain their own security controls and encrypt data in transit and at rest;
  • paper notes, if any are made, are stored securely and transferred to the electronic record; and
  • we do not store card or bank account numbers.

No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.

Data breaches. As a health service provider we are covered by the Notifiable Data Breaches scheme. If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as soon as practicable, and tell you what happened and what to do about it.

12. How long we keep it

We keep client records — including health information, session notes and recordings — for seven years from your last session or interaction, consistent with standard health record retention practice.

Where a client was under 18 at the time of the session, we keep the record until they turn 25.

Financial records are kept for at least five years, as tax law requires.

Marketing list data is kept until you unsubscribe, and then only as much as we need to make sure we do not contact you again.

After the retention period, records are securely deleted or de-identified.

13. Overseas disclosure

The providers listed in section 8 store and process information on servers outside Australia, including in the United States.

We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles, including by relying on their contractual commitments and published privacy terms. However, we cannot guarantee that another country’s privacy laws offer the same protection as Australian law, and foreign laws may apply to information held there.

By using our services and completing our forms, you consent to your information — including health information — being stored and processed overseas on this basis.

14. Accessing and correcting your information

You may ask for access to the personal information we hold about you, and ask us to correct anything inaccurate, out of date, incomplete, irrelevant or misleading.

Email energy@terralume.com.au. We will respond within 30 days. There is no charge for making a request; if a request requires substantial work, we may charge a reasonable cost-based fee and will tell you before doing anything.

In limited circumstances we may refuse access — for example, where giving access would pose a serious threat to someone’s life, health or safety, or would unreasonably affect another person’s privacy. If we refuse, we will explain why in writing and tell you how to complain. Where full access is refused, we will consider giving access through an intermediary, such as your treating practitioner.

15. Complaints

If you think we have mishandled your personal information, please tell us first: energy@terralume.com.au.

We will acknowledge your complaint within 5 business days and give you a substantive response within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

  • oaic.gov.au
  • 1300 363 992
  • GPO Box 5218, Sydney NSW 2001

16. Children and young people

Terra Lume sessions are available to people aged 18 and over. We do not provide Reiki or Biofield Tuning sessions to anyone under 18 through the public booking or suitability pathways.

We do not knowingly collect personal information from a person under 18 through our website or marketing.

17. Changes to this Policy

We may update this Policy to reflect changes in our services, systems or legal obligations. The current version is always at terralume.com.au/privacy, with the version number and date at the top. If we make a material change, we will tell existing clients.

Version 1.5 · 8 September 2026. Supersedes Version 1.4 and the earlier versions of 7 September 2026, and Version 1.1 (25 June 2026).