Privacy Policy

Last updated: [INSERT DATE]

Calm Clinic ("we", "us", "our") is committed to protecting your privacy and handling your personal and health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use our website and telehealth services.

1. What Information We Collect

We may collect the following types of information:

Personal information: name, date of birth, contact details (email, phone, address)
Health information: medical history, current medications, symptoms, eligibility information you provide during booking and consultation, and any information shared with our doctors during your consultation
Payment information: processed securely through our third-party payment provider — we do not store your full card details
Technical information: IP address, browser type, and website usage data collected automatically when you visit our site

2. How We Collect Information

We collect information when you:

Book a consultation through our website
Complete an intake or eligibility form
Communicate with us by email, phone, or during a telehealth consultation
Browse our website (via cookies and analytics tools)

3. How We Use Your Information

We use your information to:

Facilitate and deliver telehealth consultations
Allow AHPRA-registered doctors to assess your eligibility for treatment
Process prescriptions and share necessary information with partner pharmacies for dispensing
Process payments for consultations
Communicate with you about appointments, follow-ups, and your care
Comply with our legal and regulatory obligations as a healthcare provider
Improve our website and services

We do not use your health information for marketing purposes without your explicit consent.

4. Disclosure of Your Information

We may disclose your information to:

The AHPRA-registered doctor conducting your consultation
Partner pharmacies, solely for the purpose of fulfilling a prescription issued to you
Payment processors, to facilitate payment for services
Regulatory bodies, where required by law (e.g. AHPRA, TGA, state health departments)
IT and hosting service providers who support our website and systems, under strict confidentiality obligations

We do not sell your personal or health information to third parties.

5. Data Storage and Security

We take reasonable steps to protect your personal and health information from misuse, loss, unauthorised access, modification, or disclosure, including:

Secure, encrypted storage of patient records
Restricted access to health information, limited to authorised personnel and treating doctors
Secure payment processing via PCI-compliant third-party providers

While we take security seriously, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. Data Breach Notification

In the event of an eligible data breach involving your personal information that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

7. Access and Correction

You have the right to:

Request access to the personal and health information we hold about you
Request correction of any inaccurate or outdated information
Make a complaint if you believe we have mishandled your personal information

To make a request, contact us using the details below.

8. Cookies

Our website may use cookies to improve your browsing experience and analyse website traffic. You can adjust your browser settings to refuse cookies, though this may affect site functionality.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to access, correct, or make a complaint about your personal information, please contact us at:

Calm Clinic

Email: [INSERT REAL EMAIL]

Phone: [INSERT REAL PHONE]

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

This document is a general template and has not been reviewed by a lawyer. Before publishing, have it reviewed by a legal professional familiar with Australian health privacy law (Privacy Act 1988, Australian Privacy Principles, and any applicable state health records legislation) to ensure it accurately reflects your actual data handling practices.