Security and Compliance

How we protect your information

Your health information is sensitive, and we treat it that way. Information is encrypted in transit and at rest, access is limited to the people who need it to provide your care, and our systems are monitored for unauthorised access.

Australian Privacy Principles

We handle personal and health information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Our Privacy Policy sets out what we collect, why, how long we keep it, and the choices available to you.

Responding to data incidents

We have processes in place to detect and respond to data security incidents. Where an eligible data breach is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner and the individuals affected, in line with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

Our security practices

• Encryption of data in transit (TLS) and at rest
• Role-based access controls with audit logging
• Multi-factor authentication on staff accounts
• Regular review of our security controls against recognised information security standards
• Data hosted with reputable providers, in Australia where practicable

Identity and telehealth

Your clinician verifies your identity at the start of your consultation, and consultations take place over a secure, video connection.

Automated tools and clinical judgement

We may use software tools to help organise information and support our clinicians. These tools support, but never replace, professional judgement. No prescribing or treatment decision is finalised without review by a clinician.

Reporting a security concern

If you believe you have found a security vulnerability, or you have a concern about how your information is handled, please contact us at [email protected]. We take every report seriously and will respond as quickly as we can.

Advertising and prescription medicines

We don't advertise prescription medicines to the public, in line with Australian regulations.