DrAdrian.org — Traditional, Contemporary Chinese Medicine

DrAdrian.org

Privacy Policy

How we collect, use and protect your personal information.

Australian Privacy Principles

This policy is a draft pending review by the practice. Prepared 4 July 2026.

DrAdrian.org (“the practice”, “we”, “us”) is committed to protecting the privacy of everyone who visits the clinic or this website. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy explains what information we collect, why we collect it, how it is stored, and the choices you have. If anything is unclear, you are welcome to ask — in person at the clinic or by phone.

What information we collect

We only collect personal information that is reasonably necessary to provide safe, appropriate care. Depending on your circumstances, this may include:

  • Contact details — such as your name, phone number, address, date of birth and, where you provide it, an email address.
  • Health information — such as your health history, current concerns and symptoms, medications, and notes made during your consultations and treatment.
  • Appointment details — such as bookings, attendance and your communication preferences.

Health information is treated as sensitive information under the Privacy Act and is handled with particular care.

Why we collect it

We collect and use personal information so that we can:

  • Provide you with assessment, treatment and ongoing care.
  • Manage appointments and communicate with you about your care.
  • Keep accurate and complete clinical records.
  • Meet our legal, professional and regulatory obligations.

We do not use or disclose your personal information for direct marketing without your consent.

How we collect it

Wherever practical, we collect information directly from you — in person, over the phone, or through forms you complete for the practice.

Occasionally, and only with your consent or as permitted by law, relevant information may be provided by another health practitioner involved in your care.

Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Records are kept securely, with physical and electronic safeguards, and access is limited to those who need it to provide or support your care.

We keep health records for as long as is necessary to provide your care and to meet our legal and professional record-keeping obligations. When information is no longer required, we take reasonable steps to destroy it or de-identify it.

When information may be shared

Your personal information is never sold. We only disclose it:

  • With your consent — for example, to another health practitioner involved in your care.
  • Where required or authorised by law.
  • With the trusted service providers who run our systems on our behalf — described below.

Like most modern practices, we rely on carefully chosen technology providers to operate: secure cloud hosting and databases, email and SMS delivery, payment processing, and limited software services that help prepare clinical notes. Some of these providers store or process information on servers located overseas, including in the United States; SMS messages are handled within Australia.

Wherever information leaves Australia, we take reasonable steps to protect it in line with the Australian Privacy Principles and Victoria's Health Privacy Principles: we send each provider only the minimum it needs to do its job (for example, clinical note drafting is de-identified before processing), we use providers with strong security practices under written terms, and we never allow your information to be sold or used for advertising.

Access and correction

You may ask to access the personal information we hold about you, and ask for it to be corrected if it is inaccurate, out of date or incomplete.

Please contact the practice using the details below. We will respond within a reasonable time and, in the rare case a request cannot be met, we will explain why.

Our website

You can browse this website without providing personal information. We use Google Analytics and Microsoft Clarity to understand general website usage, such as which pages are visited, how visitors move through the site and where the experience can be improved.

These services may use cookies or similar browser storage. Advertising features are disabled and IP addresses are anonymised, and you can opt out at any time using “Analytics Preferences” in the website footer.

Patient intake forms and the information entered into them are excluded from analytics. Booking and intake areas are additionally marked for content masking so that personal and health information is not included in recordings.

Any details you choose to share with the practice — for example, when enquiring about an appointment — are handled in line with this policy.

Questions and complaints

If you have a concern about how your information has been handled, please raise it with the practice first — we take privacy seriously and will do our best to resolve it promptly.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time to reflect changes in our practice or the law. The current version will always be available on this page.

Privacy questions

For any questions about this policy, or about how your information is handled, please contact the practice:

DrAdrian.org

402 Burke Rd, Camberwell, VIC 3124

0401 669 883

You can also ask in person at any appointment — no question is too small.