Privacy Policy

• Account details - your name, contact details, date of birth and sign-in credentials.
• Health information - the records, readings, prescriptions, appointments and messages created when you and your care team use the platform, including information about dependants you are authorised to manage.
• Technical information - device and browser details, and security logs of access to the platform.

We collect only what the platform needs to work. We do not buy information about you from anyone.

• to provide your care services - bookings, records, prescriptions and messaging;
• to send you service messages, such as appointment reminders you have chosen to receive;
• to keep the platform secure and to detect misuse;
• to meet legal and professional record-keeping obligations.

Where the law where you live requires a legal basis for processing, we rely on your consent, the performance of our agreement with you, our legal obligations, or legitimate interests that do not override your rights. You may withdraw consent at any time where processing is based on it.

We never sell your personal information, and we do not use your health information for advertising.

Your health record is visible to you and to the members of your care team involved in your care. Access is enforced at the database level, not just on the screen: a request for a record that is not yours returns nothing.

Every time a health record is opened, the platform logs who opened it, when and what was accessed. That audit trail exists to protect you.

We share personal information only with:

• your care team, for your care;
• service providers who help us run the platform (such as hosting and message delivery), under contracts that limit what they may do with it;
• authorities, where the law requires it and to the extent it requires it.

• your connection to the platform is encrypted;
• sign-in uses secure, protected cookies that scripts in your browser cannot read, and sessions expire automatically;
• passwords are stored only in strongly hashed form;
• access to records is role-restricted and logged.

No system can promise perfect security, but if an incident ever puts your information at risk, we will inform you and the relevant authority as the law requires.

Health records are kept for the periods that clinical record-keeping rules require in your region, and other information only as long as it is needed for the purposes above. When you close your account, information that no longer has to be kept is removed; information we must retain (such as clinical records within their statutory period) is kept only for that purpose and then disposed of.

Depending on where you live, you have the right to:

• see the personal information we hold about you, and get a copy;
• correct information that is wrong or incomplete;
• ask for information to be deleted;
• object to or restrict certain processing, and withdraw consent;
• receive your information in a portable form.

You can exercise the main rights directly from inside the platform, or by writing to us. We respond within the time the law allows, and we will never charge you for a reasonable request. If you are not satisfied with our answer, you may complain to the data protection authority in your region.

Accounts for children and other dependants are created and managed by a parent, guardian or carer with the authority to do so. Their records receive the same protection as every other record, and control passes to them when the law where they live says it should.

The platform uses only essential cookies - the secure cookies that keep you signed in and protect your session. There are no advertising or tracking cookies.

If we change this policy in a way that matters, we will tell you before the change takes effect and update the date at the top of this page.

For any privacy question, or to make a data request, write to support@zeetac.com.au.