Privacy Policy

HeyDoc Health Pty Ltd (ABN 88 526 376 986) ("HeyDoc", "we", "us", "our") is an Australian healthcare provider delivering telehealth and related medical services.

We are committed to protecting your privacy and managing your personal information responsibly and in accordance with the Privacy Act 1988 (Cth) ("the Act") and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, and disclose your personal information in the course of providing our services, including via our website and online platforms.

By using our website, telehealth services, or interacting with us, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Privacy Policy, "personal information" (also referred to as personal data) means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether it is recorded in a material form or not.

This includes information such as your name, contact details, date of birth, medical history, or any other details that can identify you.

The type of personal information collected by HeyDoc depends on your interaction with our services but typically includes:

• Full name, address, email, telephone number, and other contact details;
• Date of birth, age, gender, and next of kin or emergency contact;
• Health and medical information, including clinical notes, consultation records, prescriptions, pathology results, and other health data relevant to your care;
• Details of products or services you have received, requested, or enquired about;
• Billing, payment, and transaction details;
• Technical information such as IP address, browser type, and usage data when accessing our website; and
• Any additional information you choose to provide or authorise us to collect.

We collect personal information directly from you when you:

• Register for or use our telehealth services;
• Submit information through our website or online forms;
• Communicate with us by email, phone, or chat services; or
• Participate in feedback or customer support activities.

We may also collect information indirectly, with your consent, from third parties such as healthcare providers, laboratories, pharmacies, or allied health professionals involved in your care.

HeyDoc collects, holds, and uses personal information for purposes including:

• Providing and managing telehealth consultations and related health services;
• Verifying your identity and eligibility to receive services;
• Administrative, billing, and internal record keeping functions;
• Communicating with you regarding appointments, results, and service updates;
• Conducting quality assurance, staff training, and service improvement activities;
• Performing data analytics, market research, and product development activities;
• Complying with our legal, regulatory, and professional obligations; and
• Responding to enquiries, feedback, or complaints.

As part of providing healthcare services, we may collect "sensitive information" as defined in the Privacy Act, including details about your:

• Health or medical conditions;
• Genetic or biometric information; or
• Racial or ethnic origin where relevant to clinical care.

Sensitive information will only be collected with your consent, unless required or authorised by law, and will be handled in accordance with the APPs.

HeyDoc will use or disclose personal information solely for the purposes outlined in this Policy or otherwise permitted by law.

We may disclose personal information to:

• Treating doctors, specialists, pathology providers, pharmacies, and other healthcare professionals involved in your care;
• Our employees, contractors, and service providers engaged to assist in operating our platform and supporting service delivery;
• Insurers, regulators, or law enforcement agencies where required by law or to defend legal claims.

We do not sell, rent, or trade personal information to any third parties.

If you choose to opt out of receiving marketing or promotional communications, you can do so at any time by using the unsubscribe link in our emails or by contacting us directly.

Please note that we may still contact you regarding your ongoing relationship with HeyDoc.

Our website may use cookies and similar technologies to enhance user experience, analyse traffic, and support site functionality.

Cookies may collect data such as IP address, browser type, device information, and website usage statistics.

You may choose to disable cookies through your browser settings, although this may limit your use of certain features on our website.

We store personal information in electronic form using secure databases and cloud storage solutions based in Australia with trusted providers.

HeyDoc takes reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. This includes encryption of data in transit and at rest, private network architecture with no public database access, daily automated backups, and comprehensive audit logging of all access to patient records.

Access to personal information is restricted to authorised personnel only and protected by appropriate security controls including session management and multi-factor authentication.

You are entitled to request access to the personal information HeyDoc holds about you and to seek corrections where you believe it is inaccurate, out-of-date, incomplete, or misleading.

Requests for access or correction can be made by contacting our Privacy Officer at the details below.

We do not charge a fee for making such requests, and we will respond within a reasonable timeframe in accordance with the APPs.

HeyDoc does not routinely disclose personal information to overseas recipients.

If such disclosure is required (for example, where a cloud storage provider is located overseas), we will take reasonable steps to ensure that the recipient complies with the APPs and equivalent privacy protections.

Where lawful and practicable, you may choose to interact with HeyDoc anonymously or by using a pseudonym (e.g. when making a general enquiry).

However, we may be unable to provide some services unless you identify yourself.

If you have any questions, concerns, or complaints about how HeyDoc has handled your personal information, please contact our Privacy Officer:

Email: admin@heydochealth.com.au

We will acknowledge your complaint within seven (7) days and aim to resolve the matter within thirty (30) days.

We take privacy concerns seriously and will respond to your inquiry promptly. You also have the right to contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you wish.

HeyDoc may update this Privacy Policy from time to time to reflect legal or operational changes.

The latest version will always be available on our website at www.heydochealth.com.au.

We encourage you to review this Policy periodically to remain informed about how we manage your personal information.