Cookie Policy

Effective date: 1 September 2026
Last updated: 1 September 2026
Most recent cookie audit: 1 September 2026

This Cookie Policy explains how Back To Function Chiropractic uses cookies, pixels, tags, local storage and similar technologies when you visit or interact with our website.

It explains:

  • what these technologies are;
  • which providers and technologies we use;
  • why we use them;
  • what information they may collect;
  • how long identifiers may remain on your device;
  • how information may be shared with third parties; and
  • how you can accept, reject, withdraw or change your choices.

This Cookie Policy should be read with our Privacy Policy and Terms of Use.



1. About Back To Function Chiropractic

For the purposes of this Cookie Policy, “Back To Function,” “we,” “us” and “our” refer to:

Business and privacy contact

Back To Function Chiropractic
Practitioner and privacy contact: Adam Gavine, BHK, M.Chiro
ABN: 37 574 639 193
Address: Suite 36–38, 12–14 Waratah Street, Mona Vale NSW 2103, Australia
Mobile: 0468 749 223
Email: adam@backtofunction.com.au
Website: https://www.backtofunction.com.au/
Google Maps: View our Mona Vale location



2. What Are Cookies and Similar Technologies?

Cookies are small text files placed on your browser or device when you visit a website. Cookies can recognise a browser, remember settings, maintain a shopping cart, support security or help website operators understand how visitors use a site.

We may also use technologies that perform similar functions.


2.1 Pixels and web beacons

A pixel or web beacon is a small piece of code that can record when a page, advertisement, email or feature is viewed or used. A pixel may send information about that activity to a third-party platform.


2.2 Tags

Tags are code snippets used to operate analytics, advertising, conversion-measurement or website features. A tag-management platform may control when other tags activate.


2.3 Local and session storage

Local storage and session storage allow a website or third-party service to store information in a browser. Local-storage information may remain until deleted, while session-storage information is generally removed when the browser session ends.


2.4 Device and online identifiers

Websites and third-party services may process IP addresses, cookie identifiers, advertising identifiers, browser details or similar information to distinguish one browser or device from another.

In some circumstances, these identifiers and associated browsing information may constitute personal information under the Privacy Act 1988 (Cth), particularly where they can be connected with other information about an identifiable person.



3. Australian and NSW Privacy Requirements

Our use of cookies and tracking technologies is governed by applicable Australian and New South Wales privacy requirements, including:

  • the Privacy Act 1988 (Cth);
  • the Australian Privacy Principles, or APPs;
  • the Health Records and Information Privacy Act 2002 (NSW), or HRIP Act;
  • the NSW Health Privacy Principles, or HPPs;
  • direct-marketing requirements under APP 7;
  • the Spam Act 2003 (Cth), where applicable;
  • the Do Not Call Register Act 2006 (Cth), where applicable; and
  • the Australian Consumer Law, including protections against misleading conduct and unfair contract terms.

Australian law does not impose one universal consent rule for every type of cookie. However, we must handle personal and health information lawfully, fairly, transparently and only for appropriate purposes.

Sensitive information, including information revealing or reasonably capable of revealing a person’s health status, generally requires consent where collected through third-party tracking pixels.

We therefore use an express opt-in approach for non-essential advertising and tracking technologies where they could collect, infer or disclose sensitive health information.



4. Our Cookie Principles

We aim to follow these principles:

  • clearly explain the technologies used on the website;
  • limit collection to information reasonably necessary for legitimate purposes;
  • avoid sending form contents or detailed health information to advertising platforms;
  • obtain consent before activating non-essential advertising technologies where required;
  • make rejecting optional cookies as accessible as accepting them;
  • provide a way to withdraw or change consent;
  • avoid deceptive interfaces or preselected advertising consent;
  • not condition access to clinical care on acceptance of advertising cookies;
  • not disadvantage a person for declining optional tracking;
  • periodically audit tags, pixels, cookies and third-party integrations; and
  • update this policy when our technology use materially changes.


5. Categories of Cookies We Use

5.1 Strictly necessary cookies

These cookies and storage technologies support functions required for the website to operate securely and correctly.

They may be used to:

  • provide page navigation;
  • protect forms and transactions against fraud or misuse;
  • maintain a shopping cart or checkout session;
  • remember cookie choices;
  • support website security;
  • route users to the correct page; and
  • maintain an authenticated account session where available.

These technologies cannot always be disabled through our consent tool because the requested website service may not function without them.

You may still block them through your browser, but parts of the website may stop working.


5.2 Functional cookies

Functional technologies support optional website features such as:

  • embedded maps;
  • embedded videos;
  • appointment-booking links;
  • accessibility or display settings;
  • location features; and
  • remembering user preferences.

Some functional content is provided by third parties and may set cookies when it loads or when you interact with it.


5.3 Analytics and performance cookies

Analytics cookies help us understand:

  • how many people visit the website;
  • which pages are viewed;
  • how visitors reach the website;
  • how long visitors interact with pages;
  • whether technical errors occur;
  • general device, browser and approximate location information; and
  • which website content or navigation may need improvement.

Analytics information should be used in aggregated or appropriately limited form where practicable.


5.4 Advertising and conversion cookies

Advertising technologies may help us:

  • measure whether an advertisement resulted in a website visit;
  • attribute enquiries, telephone calls or booking-link selections to an advertising campaign;
  • measure campaign performance;
  • limit repeated advertisements;
  • build advertising audiences where legally permitted; and
  • understand how people interact with advertising landing pages.

Because Back To Function Chiropractic is a health-service provider, advertising technologies must not be used to infer, collect or disclose sensitive health information without the consent and other lawful basis required under Australian privacy law.

We do not intentionally use detailed clinical information, treatment records or contact-form contents to create personalised advertising audiences.



6. Current Cookie and Tracking Inventory

The following inventory is based on a review of the technologies detected on the website as of 1 September 2026.

Cookie names, durations and functions may change when providers update their systems. A cookie may not be placed on every visit because placement depends on the page viewed, features used, browser settings and consent choices.


6.1 Squarespace website platform

Squarespace provides website hosting, content, security, commerce and analytics functionality.

Cookie or storage item Category Purpose Typical duration
crumb Strictly necessary Helps prevent cross-site request-forgery and supports secure form or transaction processing Session
CART Strictly necessary Remembers when a visitor adds an item to the website shopping cart Approximately two weeks
CHECKOUT_WEBSITE Strictly necessary Identifies the correct website during checkout where applicable Session
recentRedirect Strictly necessary Helps Squarespace manage URL redirects Approximately 30 minutes
ss_cookieAllowed or equivalent consent identifier Strictly necessary Records whether a visitor has made a general cookie choice Provider controlled
ss_performanceCookiesAllowed Strictly necessary Records whether performance and analytics cookies were accepted Approximately 30 days
ss_marketingCookiesAllowed Strictly necessary Records whether marketing cookies were accepted Approximately 30 days
ss_cid Analytics Identifies unique visitors and associates visits with a browser Approximately two years
ss_cpvisit Analytics Helps identify visitors and measure sessions Approximately two years
ss_cvisit Analytics Measures a website visit or session Approximately 30 minutes
ss_cvr Analytics Identifies returning visitors and measures sessions Approximately two years
ss_cvt Analytics Measures visits and website sessions Approximately 30 minutes

Other strictly necessary Squarespace identifiers may be activated when a visitor uses commerce, login, forms or other optional Squarespace features.


6.2 Google Analytics

Google Analytics is used to measure website traffic and visitor interactions.

The website audit detected a Google Universal Analytics implementation identified as UA-27468681-1. Google may also activate related measurement through Google Tag Manager.

Cookie Category Purpose Typical duration
_ga Analytics Distinguishes browsers and measures visits Up to two years
_gid Analytics Distinguishes browsers for short-term analytics reporting Approximately 24 hours
_gat or _gat_UA-* Analytics Limits the rate at which analytics requests are sent Approximately one minute
_ga_* Analytics Maintains session state if a Google Analytics 4 property is enabled Up to two years

Google Analytics may receive:

  • IP address;
  • browser and device information;
  • approximate geographic location;
  • referring website or campaign;
  • pages viewed;
  • session timing; and
  • general website interaction events.

We do not intend to send names, email addresses, telephone numbers or detailed health information to Google Analytics.


6.3 Google Tag Manager

The website uses Google Tag Manager container GTM-MHQV524.

Google Tag Manager manages the activation of analytics, advertising and other website tags. The tag manager itself does not ordinarily require a separate visitor cookie, but tags deployed through it may set cookies or transmit information.

The activation of optional analytics or advertising tags through Google Tag Manager should respect the visitor’s cookie choices.


6.4 Google Ads and call-conversion measurement

Google advertising and website call-conversion technologies may be used to determine whether an advertisement led to a website visit, enquiry, call or other conversion.

Cookie or identifier Category Purpose Typical duration
_gcl_au Advertising and conversion Measures advertising and conversion performance Approximately 90 days
_gcl_aw Advertising and conversion Stores Google Ads click and conversion attribution information Approximately 90 days
gclid or related click identifier Advertising and conversion Identifies an advertising click for attribution; it may appear in a landing-page URL and be stored by measurement systems Provider controlled
Call-conversion identifier Advertising and conversion Supports Google website call-conversion measurement and may display a forwarding number to measure calls generated by advertising Provider controlled

Google Ads technologies may process:

  • advertising click identifiers;
  • campaign and referring-page information;
  • device and browser information;
  • IP address;
  • page visits;
  • conversion events; and
  • telephone-call attribution information.

We do not intentionally place a patient’s name, email address, telephone number, health condition or treatment details in advertising URLs or campaign parameters.


6.5 Meta Pixel

The website audit detected Meta Pixel identifier 626177358120311.

Meta Pixel may allow Meta Platforms to measure website events and connect them with advertising activity on Facebook, Instagram or other Meta services.

Cookie Category Purpose Typical duration
_fbp Advertising Distinguishes browsers and measures advertising or website interactions Approximately three months
_fbc Advertising Records Facebook click attribution when a Meta click identifier is present Approximately three months
fr or equivalent Meta identifier Advertising Supports advertising delivery, measurement and relevance on Meta services Provider controlled, commonly up to three months

Meta Pixel may process:

  • IP address;
  • browser and device information;
  • page URL and page title;
  • referring information;
  • Meta advertising click identifiers;
  • general website events; and
  • other information permitted by the pixel’s configuration.

We do not intend to transmit website-form contents, clinical records or detailed health information to Meta.

Because page visits on a healthcare website may reveal or permit an inference about health interests, Meta Pixel should remain disabled until the visitor expressly accepts advertising cookies.


6.6 Google Maps

The website uses embedded Google Maps to display clinic locations and directions.

Google Maps may set or access identifiers such as:

Cookie or identifier Category Purpose Typical duration
NID Functional or advertising Remembers Google settings and may support security or advertising functions Commonly up to six months
SOCS Functional Stores a user’s Google consent choices Provider controlled
AEC Strictly necessary or security Helps confirm that requests in a browsing session are made by the user Commonly up to six months
Map session identifiers Functional Loads map tiles, settings and interactive map features Session or provider controlled

Google may receive your IP address, browser details, general device information and interactions with the map.

If you select a map or directions link, you will leave our website and Google’s policies will govern your use of the destination service.


6.7 YouTube and embedded video

The website contains video content supplied through YouTube and Squarespace’s embedded-content provider.

When video content loads or you interact with it, YouTube or Google may set cookies such as:

Cookie Category Purpose Typical duration
YSC Functional or analytics Measures video views and maintains a viewing session Session
VISITOR_INFO1_LIVE Functional or analytics Estimates bandwidth and supports video delivery Commonly up to six months
PREF Functional Remembers video or display preferences Provider controlled
CONSENT or SOCS Strictly necessary or functional Records Google consent choices Provider controlled
NID Functional or advertising Remembers Google preferences and may support advertising Commonly up to six months

Embedded video providers may receive your IP address, device information, referring page and information about video interactions.

Where supported, optional video tracking should respect the visitor’s cookie choices.


6.8 Cliniko online booking

The website links to an external Cliniko booking service.

Selecting a Cliniko booking link takes you to a website operated by Cliniko or its related service provider. Cliniko may use cookies and similar technologies for:

  • booking functionality;
  • security;
  • account or session management;
  • fraud prevention;
  • service performance; and
  • remembering booking information.

Cookies placed after you leave our website are governed by Cliniko’s own terms and privacy information.

We do not control the cookie names or retention periods used on Cliniko’s domain.


6.9 Adobe Fonts

The website uses Adobe Fonts to deliver website typefaces.

Adobe may receive limited technical information such as:

  • IP address;
  • browser and operating-system information;
  • font request information; and
  • the website requesting the font.

Adobe Fonts does not ordinarily require an advertising cookie merely to deliver a font, but provider practices may change.


6.10 Embedly and other embedded-content services

Squarespace may use Embedly or another content-delivery provider to display embedded media.

These providers may process:

  • IP address;
  • browser and device information;
  • referring page;
  • requested media; and
  • interaction information.

Any provider-controlled cookies may vary according to the embedded service.



7. Information Collected Through Cookies and Pixels

Depending on the technology, settings and your consent choices, cookies and pixels may collect:

  • IP address;
  • cookie, device or advertising identifier;
  • browser type and version;
  • device type and operating system;
  • approximate location derived from an IP address;
  • referring website, advertisement or campaign;
  • pages visited;
  • buttons or links selected;
  • video, map or booking-link interactions;
  • dates, times and session duration;
  • shopping-cart or checkout activity;
  • advertising click identifiers;
  • conversion events;
  • technical errors; and
  • consent preferences.

A page visit, URL or interaction on a healthcare website may sometimes reveal or allow an inference about a person’s health interests. We therefore treat tracking on condition-specific and treatment-specific pages with additional care.



8. Information We Do Not Intend to Send to Advertising Platforms

We do not intentionally configure advertising or analytics technologies to collect:

  • clinical notes;
  • diagnostic reports or images;
  • medical histories;
  • medication information;
  • treatment plans;
  • contact-form message contents;
  • appointment notes;
  • uploaded health records;
  • payment-card numbers;
  • Medicare numbers;
  • private health-insurance membership numbers; or
  • other detailed patient information.

Website forms should use secure submission methods and should not place personal information in URLs.

If we discover that sensitive or personally identifiable information has been unintentionally transmitted through a tracking technology, we will investigate and take appropriate corrective action.



9. Consent and Your Choices

9.1 Strictly necessary cookies

Strictly necessary cookies may be activated without optional consent because they support a service you request or help secure and operate the website.


9.2 Analytics, advertising and optional functional cookies

Where required or appropriate, analytics, advertising and optional functional technologies will remain disabled until you make an affirmative choice.

You should be able to:

  • accept all optional cookies;
  • reject all optional cookies;
  • select categories separately; and
  • change or withdraw your choice later.

Advertising cookies must not be preselected.


9.3 Declining cookies

Declining optional cookies will not:

  • prevent you from contacting the clinic;
  • prevent you from requesting an appointment;
  • change the clinical care available to you;
  • increase the price of a service;
  • reduce your rights under the Australian Consumer Law; or
  • result in discriminatory treatment.

Some embedded maps, videos or other optional website features may not work until their associated cookies are accepted.



10. How to Change or Withdraw Consent

You may change or withdraw your cookie choices at any time by selecting the Manage Cookies or Cookie Preferences link displayed in the website footer or cookie banner.

Withdrawing consent will prevent future optional tracking to the extent supported by the website configuration. It does not automatically delete information already processed by a third-party provider.

You may also:

  • delete existing cookies through your browser;
  • block all or selected cookies;
  • prevent cross-site tracking;
  • use a private-browsing mode;
  • reset an advertising identifier;
  • manage advertising settings through Google or Meta; or
  • use recognised browser privacy tools.

Blocking all cookies may affect website navigation, shopping-cart, security, map, video or booking functions.



11. Google Advertising Choices

Google provides controls that may allow you to manage advertising and measurement preferences:

Google may process information in Australia and other countries under its own terms and privacy policies.

We must not:

  • send personally identifiable information to Google through advertising tags or URLs unless using an expressly permitted Google service and lawful process;
  • use personal information in a way users have not consented to;
  • collect sensitive information without appropriate security and disclosures;
  • set unauthorised cookies on Google-controlled domains; or
  • use advertising to imply that we know a person has a particular medical condition.


12. Meta Advertising Choices

You may manage certain Meta advertising preferences through your Facebook or Instagram account settings.

You may also reject advertising cookies through our website consent controls.

Meta may connect information received through Meta Pixel with information associated with a Meta account, subject to Meta’s own policies and settings.



13. Cross-Border Processing

Squarespace, Google, Meta, Adobe, Cliniko and other technology providers may process or store information outside Australia.

Depending on the provider and its infrastructure, information may be processed in countries including:

  • the United States;
  • Canada;
  • the United Kingdom;
  • European Union member states;
  • New Zealand;
  • Singapore; and
  • other countries in which a provider or its subcontractors operate.

Provider infrastructure may change, and it may not be practicable to identify every country in advance.

Where the Australian Privacy Principles apply, we take reasonable steps appropriate to the circumstances when selecting and using providers that may process personal information overseas.



14. Data Retention

Cookie retention periods are identified in the inventory above where reasonably available.

Actual retention may differ because:

  • a provider changes its technology;
  • you delete cookies;
  • your browser automatically removes them;
  • consent is withdrawn;
  • the website configuration changes; or
  • a cookie is refreshed when you return.

Information transferred to a third-party provider may be retained separately under that provider’s terms and privacy practices.

We will not retain identifiable cookie-derived information for longer than reasonably necessary for its disclosed purpose or as required by law.



15. Security and Data Minimisation

We take reasonable steps to reduce cookie and tracking risks, which may include:

  • using encrypted HTTPS connections;
  • limiting enabled tags;
  • restricting optional technologies until consent;
  • avoiding personal information in URLs;
  • excluding form fields from analytics and advertising tags;
  • limiting events sent to advertising providers;
  • reviewing tag-manager access;
  • maintaining access controls;
  • auditing website tags and pixels;
  • removing obsolete integrations; and
  • investigating unexpected disclosures.

No internet service can guarantee complete security.



16. Children

This website is intended for a general audience and is not designed to profile children for targeted advertising.

We do not knowingly use health information about children for personalised advertising.

A parent or guardian should assist a child when making an online booking or providing personal information.



17. Consumer Protection

We aim to describe our cookie and advertising practices accurately and in plain language.

We will not knowingly:

  • disguise advertising cookies as strictly necessary;
  • use a misleading button design to pressure visitors into accepting tracking;
  • falsely state that optional cookies are required to receive clinical care;
  • conceal a material advertising purpose;
  • use cookie choices to remove a statutory consumer right; or
  • make a materially false or misleading statement about how tracking data is used.

Nothing in this Cookie Policy excludes, restricts or modifies any consumer guarantee, privacy right, remedy or other protection that cannot lawfully be excluded under the Australian Consumer Law or applicable privacy legislation.



18. Cookie Audits and Policy Updates

We will periodically review:

  • cookies stored by the website;
  • tags configured through Google Tag Manager;
  • Google Analytics and Google Ads settings;
  • Meta Pixel settings;
  • embedded maps and videos;
  • Squarespace integrations;
  • booking and payment links;
  • consent-banner operation;
  • website forms and landing-page URLs; and
  • whether any tag may transmit personal or sensitive information.

We may update this policy when:

  • a cookie or provider is added or removed;
  • the purpose of a technology changes;
  • a provider changes its cookie names or retention periods;
  • laws or regulatory guidance change; or
  • we change our analytics, advertising or consent practices.

The current version will be published on this page with an updated effective date.



19. Questions, Requests and Complaints

Questions, requests to opt out, or concerns about cookies and online tracking may be directed to:

Privacy contact

Adam Gavine, BHK, M.Chiro
Back To Function Chiropractic
Suite 36–38, 12–14 Waratah Street
Mona Vale NSW 2103, Australia
Mobile: 0468 749 223
Email: adam@backtofunction.com.au

Please describe:

  • the device and browser used;
  • the page or feature involved;
  • the approximate date and time;
  • the cookie, pixel or provider involved, if known; and
  • the outcome you are seeking.

We will investigate the concern and respond within a reasonable period.

Privacy complaints may also be directed to:

Office of the Australian Information Commissioner

Website: https://www.oaic.gov.au/privacy/privacy-complaints
Telephone: 1300 363 992

Information and Privacy Commission NSW

Website: https://www.ipc.nsw.gov.au/
Telephone: 1800 472 679
Email: ipcinfo@ipc.nsw.gov.au



20. Contact Us

Back To Function Chiropractic
Attention: Adam Gavine, BHK, M.Chiro
ABN: 37 574 639 193
Address: Suite 36–38, 12–14 Waratah Street, Mona Vale NSW 2103, Australia
Mobile: 0468 749 223
Email: adam@backtofunction.com.au
Website: https://www.backtofunction.com.au/