Privacy Policy

1. Introduction

Clinical Information Technologies Pty Ltd (ACN 693 101 941) trading as OzMed ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital health platform and services.

We are bound by the Australian Privacy Principles ("APPs") contained in the Privacy Act 1988 (Cth) and, where applicable, the Health Records Act 2001 (Vic) and equivalent state and territory health privacy legislation.

2. Information We Collect

We may collect and hold the following types of personal information:

Personal Information

• Name, date of birth, and contact details (email address, phone number, postal address)
• Account credentials and authentication information
• Medicare number and other government identifiers (where required)
• Emergency contact details

Health Information

• Medical history, diagnoses, and treatment information
• Prescription and medication records
• Pathology and imaging results
• Appointment and consultation records
• Health insurance details

Technical Information

• Device information and identifiers
• IP address and browser type
• Usage data and interaction with our platform
• Cookies and similar tracking technologies

3. How We Collect Information

We collect personal information:

• Directly from you when you register, use our services, or communicate with us
• From healthcare providers who use our platform to deliver care to you
• From other healthcare organisations with your consent or as permitted by law
• From government agencies such as Medicare and the Pharmaceutical Benefits Scheme
• Automatically through our platform's technical systems

4. How We Use Your Information

We use your personal information to:

• Provide and improve our digital health platform and services
• Facilitate healthcare delivery and coordination between you and your healthcare providers
• Process appointments, referrals, and prescriptions
• Communicate with you about your care and our services
• Comply with legal and regulatory obligations
• Conduct research and analytics to improve healthcare outcomes (in de-identified form where possible)
• Protect the security and integrity of our platform

5. Disclosure of Information

We may disclose your personal information to:

• Healthcare providers involved in your care
• Pathology laboratories, imaging services, and other diagnostic providers
• Health insurers for claims processing
• Government agencies as required by law (e.g., Medicare, public health authorities)
• Our service providers who assist in operating our platform (under strict confidentiality agreements)
• Emergency services in life-threatening situations

We will not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement robust security measures to protect your personal information from unauthorised access, modification, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Multi-factor authentication
• Regular security audits and penetration testing
• Access controls and audit logging
• Staff training on privacy and security obligations
• Compliance with Australian Government Information Security Manual (ISM) guidelines

7. Data Storage and Retention

Your personal information is stored on secure servers located in Australia. We retain health information in accordance with applicable retention requirements under healthcare legislation, which generally require medical records to be kept for a minimum of seven years from the date of last service (or until a patient reaches 25 years of age, whichever is later, for minors).

8. Your Rights

You have the right to:

• Access your personal information held by us
• Request correction of inaccurate or incomplete information
• Request deletion of your information (subject to legal retention requirements)
• Withdraw consent for certain uses of your information
• Complain about a breach of your privacy

To exercise these rights, please contact us using the details below. We will respond to your request within 30 days.

9. Cookies and Tracking

Our platform uses cookies and similar technologies to enhance your experience, analyse usage patterns, and improve our services. You can manage cookie preferences through your browser settings. Essential cookies required for platform functionality cannot be disabled.

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our platform and, where appropriate, by email. Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to access or correct your personal information, or have a privacy complaint, please contact our Privacy Officer:

If you are not satisfied with our response to your privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC):