medihealthcare.com
Privacy Policy
1. About this policy
MediHealthcare Global Pty Ltd (ACN 672 439 691) trading as MediHealthcare (“MediHealthcare”, “we”, “us”, “our”) is committed to protecting your privacy.
This policy explains how we collect, hold, use, disclose and protect personal information. It applies to:
our website at medihealthcare.com and any registration or enquiry pages we operate
the MediHealthcare platform, once it is live and you or your practice use it
our dealings with clinicians, practices, pharmacies, patients, investors, suppliers and job applicants
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because we handle health information we are also subject to the health privacy provisions of the Privacy Act and, in New South Wales, the Health Records and Information Privacy Act 2002 (NSW). Where the platform connects to My Health Record, the My Health Records Act 2012 (Cth) also applies.
2. Who to contact
Privacy Officer
MediHealthcare Global Pty Ltd
[CONFIRM: Privacy Officer name and title]
Email: [email protected] [CONFIRM: create this mailbox, or substitute [email protected]]
Post: ‘309’ 20A Lexington Drive, Bella Vista NSW 2153, Australia
Phone: [CONFIRM]
If you have a question about this policy, want to access or correct your information, or want to make a complaint, contact the Privacy Officer first. Section 12 sets out how complaints are handled.
3. What personal information we collect
3.1 If you register interest through our website
When you complete a waitlist, registration or enquiry form we collect:
your name
your email address
your phone number
your postcode
for clinicians and practices: your practice or business name and your role
for investors: the organisation you represent and the nature of your interest
anything else you choose to type into a free text field
We do not ask for health information in any website form, and you should not enter any. Our forms say so, and if you send us health information through a website form we will delete it unless we are required to keep it.
3.2 If you use the MediHealthcare platform
Once the platform is live and your practice uses it, we handle:
Practitioner and staff information: name, contact details, professional registration details, provider numbers, role, login credentials and audit records of activity in the system.
Patient information, including health information: identity and contact details, Medicare and health identifier details, clinical notes, prescriptions, pathology and imaging results, referrals, appointments, and communications relating to care.
Practice information: business details, configuration, billing and usage data.
Health information is sensitive information under the Privacy Act and attracts higher protection. We collect it only where it is reasonably necessary for our functions and, where required, with consent.
3.3 Automatically, when you visit our website
We collect device and usage information such as IP address, browser type, pages viewed, referring page and the date and time of your visit. Section 9 covers cookies and analytics.
3.4 Information we do not seek
We do not seek information about your race or ethnicity, religion, political opinions, sexual orientation, criminal record or union membership, and you should not provide it.
4. How we collect personal information
We collect personal information:
directly from you, when you complete a form, email us, call us, or use the platform
from your practice or employer, where they enrol you as a user
from other healthcare providers and national health infrastructure, where the platform is authorised to receive information about a patient’s care
from publicly available sources, for example a practice website or a professional register, when we are researching whether to contact a practice
Where we collect your information from someone other than you, we take reasonable steps to make sure you are made aware of this policy.
5. Why we collect, hold, use and disclose personal information
We use personal information to:
respond to your enquiry and keep you informed about the launch program or waitlist you registered for
assess whether a practice is a fit for our launch program
provide, operate, support and improve the platform
enable clinicians to deliver and coordinate care, including prescribing, results, referrals and recalls
meet our legal, regulatory, accreditation and record keeping obligations
maintain the security and integrity of the platform, including audit logging and fraud prevention
produce de-identified and aggregated analytics for service improvement and reporting
We do not use personal information for a purpose you would not reasonably expect, unless you have consented or the law permits it.
5.1 Direct marketing
If you register interest with us we may send you updates about MediHealthcare. Every message includes an unsubscribe option, and you can opt out at any time by using it or by contacting the Privacy Officer. We do not sell personal information, and we do not disclose it to third parties for their own marketing.
5.2 De-identified information
We may create de-identified and aggregated data sets for service improvement, research and reporting. De-identified information is not personal information, and we do not attempt to re-identify it.
6. Who we disclose personal information to
We may disclose personal information to:
your practice or employer, where they are our customer and you use the platform through them
other healthcare providers involved in a patient’s care, where the platform is authorised to share information for that purpose
national health infrastructure, including My Health Record, electronic prescribing services and provider directories, where authorised
our service providers, who help us operate the business, including hosting, customer relationship management, email delivery, analytics, payments and professional advisers
regulators, courts and law enforcement, where required or authorised by law
a purchaser or investor, in connection with a sale, merger or funding of our business, subject to confidentiality
We require our service providers to protect personal information and to use it only for the purpose we engage them for.
7. Overseas disclosure
Some of our service providers are located, or store data, outside Australia.
Website and marketing. Our registration and enquiry pages and our customer relationship management system are provided by HighLevel Inc. (LeadConnector), which is based in the United States. Information you submit through a website form may be stored and processed in the United States.
Platform. The MediHealthcare platform is hosted in Australia. We hold platform data, including all patient health information, in Australian data centres, and we do not transfer patient health information overseas.
Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, as APP 8 requires.
8. How we hold and protect information
We hold personal information in electronic systems operated by us and by our service providers.
Our security measures include:
1.hosting platform data in Australian data centres
2.encryption of data in transit and at rest
3.role based access control, so users see only what their role requires
4.audit logging of access to records
5.multi-factor authentication for platform users
6.regular security testing, patching and staff training
7.an information security framework aligned to Australian government assurance standards
No system is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
9. Cookies, analytics and tracking
Our website uses cookies and similar technologies to make the site work, remember your preferences, and understand how the site is used.
We use:
1. essential cookies, needed for the site to function
2. analytics cookies, which tell us how people find and move through the site
You can control cookies through your browser settings. Blocking essential cookies may stop parts of the site working.
10. Automated decision making
MediHealthcare uses software that supports clinical and administrative workflows. Clinical decisions are made by registered health practitioners. The platform supports human decision making and does not replace clinical judgement. Where automated processing is used in a way that significantly affects an individual, this section will describe the information used and the kinds of decisions involved.
11. Accessing and correcting your information
You can ask us for access to the personal information we hold about you, and ask us to correct it if it is wrong, out of date, incomplete or misleading. Contact the Privacy Officer.
We will respond within 30 days. There is no fee to make a request. We may charge a reasonable cost for giving access, and we will tell you before we do.
We may refuse access in limited circumstances the Privacy Act allows, for example where giving access would pose a serious threat to someone’s life, health or safety, or would unreasonably affect another person’s privacy. If we refuse, we will tell you why in writing and how to complain.
If you are a patient, your clinical records are generally held by your treating practice. In most cases you should ask your practice for access, and we will support your practice in responding.
12. Complaints
If you think we have breached the Australian Privacy Principles or mishandled your personal information:
1.Contact our Privacy Officer using the details in section
2. Set out what happened and what you would like us to do.
3.We will acknowledge your complaint within 5 business days and give you a written response within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.
Office of the Australian Information Commissioner
Phone: 1300 363 992
Post: GPO Box 5288, Sydney NSW 2001
Website: oaic.gov.au
If your complaint concerns health information handled in New South Wales, you may also complain to the NSW Information and Privacy Commission or the NSW Health Care Complaints Commission.
13. Retention
We keep personal information only as long as we need it, or as long as the law requires.
Waitlist and enquiry records:
kept while you remain on the list and for 24 months after your last interaction with us, then deleted.
Practice and user records:
kept for the life of the account and for 7years afterwards.
Patient health records:
retained in line with the record keeping obligations that apply to the treating practice. In New South Wales, adult health records must generally be kept for at least 7 years from the last entry, and records for a person under 18 until they turn 25.
14. Anonymity
You can deal with us anonymously or under a pseudonym where it is lawful and practicable. It is generally not practicable when you are registering a practice, using the platform, or where we need to verify your identity.
15. Changes to this policy
We may update this policy. The current version is always available at medihealthcare.com/privacy-policy. Where a change is significant we will take reasonable steps to tell you.
Terms of Use
1. About these terms
These terms govern your use of medihealthcare.com and any registration, waitlist or enquiry page we operate (“the website”). By using the website you agree to them. If you do not agree, do not use the website.
The website is operated by MediHealthcare Global Pty Ltd (ACN 672 439 691), registered office ‘309’ 20A Lexington Drive, Bella Vista NSW 2153, Australia.
These terms cover the website only. Use of the MediHealthcare platform is governed by a separate agreement between us and your practice or organisation.
2. The website is information only
The website describes MediHealthcare and lets you register interest. It does not provide the platform, and registering does not create any contract, account or entitlement.
We may change, suspend or withdraw any part of the website at any time.
3. No medical advice
The website does not provide medical advice, diagnosis or treatment, and nothing on it should be relied on as a substitute for advice from a qualified health practitioner.
If you have a health concern, speak to your doctor. If you need urgent help, call 000 or contact your local emergency service.
Do not send us health or clinical information through any website form. Our forms tell you not to, and we will delete health information sent to us this way unless we are required to keep it.
4. Registering interest
When you register through a waitlist, clinician or investor form:
you must give accurate information, and you must be entitled to give any information you provide about an organisation
registering does not guarantee access, participation in any program, or any commercial terms
we may contact you about the program you registered for, and you can opt out at any time
we may decline or withdraw any registration at our discretion
nothing is charged, and no service activates, unless and until you enter a separate written agreement with us
5. Investor enquiries
Investor information on this website is general and is provided for information only. It is not an offer of securities, an invitation to apply for securities, or financial product advice. Section 3 of our Investor Important Notice sets out the full position, and it applies to any investor page or investor enquiry form on this website.
6. Forward looking statements
Parts of the website describe what we intend to build, when we expect to launch, and how we expect the market to develop. These are statements about the future. They are based on our current expectations and involve risks and uncertainties, including regulatory approvals that are not yet complete. Actual outcomes may differ. We are not obliged to update them.
7. Intellectual property
All content on the website, including text, graphics, logos, the MHC wordmark and marks, layout and software, is owned by or licensed to MediHealthcare and is protected by law.
You may view and print pages for your own information. You must not copy, reproduce, republish, adapt or commercially exploit any part of the website without our written permission. You must not use our name, logo or marks without permission.
8. Acceptable use
You must not:
use the website unlawfully, or for any fraudulent or misleading purpose
submit false information, or information about another person without their authority
attempt to gain unauthorised access to the website or any connected system
interfere with the operation or security of the website
use automated means to scrape, harvest or bulk collect content or contact details
transmit malware or any harmful code
9. Third party links and services
The website may link to third party sites and uses third party services, including our forms and customer relationship management provider. We are not responsible for the content, practices or availability of third party sites. A link is not an endorsement.
10. Disclaimers and liability
We take reasonable care with the website, but we do not warrant that it will be uninterrupted, error free or free of harmful components, or that the information on it is complete or current.
Nothing in these terms excludes, restricts or modifies any right or remedy you have under the Australian Consumer Law that cannot lawfully be excluded. Where we are permitted to limit liability, our liability is limited, at our option, to resupplying the relevant information or paying the cost of having it resupplied.
To the extent permitted by law, we are not liable for any indirect or consequential loss arising from your use of the website.
11. Privacy
Our Privacy Policy explains how we handle personal information, and forms part of these terms.
12. Changes to these terms
We may update these terms. The current version is always at medihealthcare.com/terms. Continuing to use the website after a change means you accept the updated terms.
13. Governing law
These terms are governed by the laws of New South Wales, Australia. You submit to the non exclusive jurisdiction of the courts of New South Wales.
14. Contact
MediHealthcare Global Pty Ltd (ACN 672 439 691)
‘309’ 20A Lexington Drive, Bella Vista NSW 2153, Australia
© 2026 MediHealthcare Global Pty Ltd. All rights reserved.
This page is provided for information only. It is not an offer of securities, an
invitation to apply for securities, or financial product advice, and it does not take
account of your objectives, financial situation or needs. Investment information is
made available only to persons who qualify as wholesale or sophisticated
investors under the Corporations Act 2001 (Cth), following verification.