Privacy policy

Last updated: August 2026

At Pure Path Medical Pty Ltd (ABN 91 686 109 071), your privacy is important to us. We are committed to protecting your personal and sensitive health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as relevant state and territory health privacy laws and our professional codes of conduct.

This policy explains what personal and health information we collect, why we collect it, how we store and disclose it, and how you can access and correct it.

1. Scope

This policy applies to all patients, suppliers, practitioners, pharmacies and third-party providers using or supporting Pure Path's services.

2. What information we collect

Personal information

• Full name, date of birth and gender.
• Contact details — address, phone number, email.
• Medicare number, DVA number and private health insurance details.
• Emergency contact details.

Sensitive and health information

• Medical history and conditions.
• Treatment plans and consultation notes.
• Test results, referrals, radiology and pathology reports.
• Prescriptions, medicines and allergies.
• Immunisation records.
• Family medical history.
• Social or lifestyle information relevant to your care.

We may also collect information from:

• Referring doctors, specialists and allied health providers.
• Hospitals and other healthcare providers.
• Pharmacies.
• Government health systems, such as My Health Record.

3. How we collect information

Whenever reasonable and practical, we collect information directly from you:

• In person, over the phone, through forms, by email or through this website.
• Through online booking and intake systems.
• From third parties, with your consent.
• Via secure systems such as My Health Record, where authorised.

4. Why we collect and use your information

We collect your information to provide safe, effective and personalised medical care. Specific purposes include:

• Diagnosing and treating your medical condition or conditions.
• Communicating with you and other healthcare professionals involved in your care.
• Processing Medicare, DVA and private health fund claims.
• Managing appointments, recalls and reminders.
• Maintaining accurate clinical records.
• Meeting our legal and regulatory obligations.
• Quality assurance, training and administrative purposes.
• Participating in research or public health programs, only with your consent or where permitted by law.

We only collect, use or disclose your information for these purposes, or where otherwise permitted or required by law.

5. Who we disclose your information to

We may disclose your information to:

• Other treating healthcare professionals.
• Pathology and radiology service providers.
• Pharmacists involved in your care.
• Medicare, DVA, or your private health insurer.
• Government agencies, for public health or mandatory reporting purposes.
• IT or administrative service providers, who are bound by confidentiality obligations.
• Your authorised representative, legal guardian or carer.
• Your family members, with your prior consent.

We do not disclose your information overseas unless necessary, and only with your consent or where required by law — see section 12.

6. Data security, storage and retention

We store your information in:

• Secure electronic medical record (EMR) systems.
• Cloud-based or locally hosted secure servers.
• Physical files, where applicable.

Security measures include:

• Password-protected and encrypted systems.
• Role-based access controls for staff.
• Regular data backups and software updates.
• Staff training and confidentiality agreements.

We retain medical records in accordance with Australian law — typically for seven years after your last consultation, or until a child turns 25 years of age, whichever is longer. Data is securely destroyed or de-identified once it is no longer required to be retained.

7. Access and correction

You have the right to:

• Request access to your personal information.
• Request correction of your information if it is inaccurate, out of date or incomplete.

Requests must be submitted in writing, by email to support@purepathmedical.com.au or by post to the clinic. We aim to respond within 30 days. A reasonable fee may apply for large or complex requests.

Access may be denied in limited circumstances — for example, where it would pose a risk of serious harm, or where a legal restriction applies. If this occurs, we will give you written reasons.

8. This website and online communications

When you visit this website, we may collect non-identifiable information, such as browser type and IP address, and we may use cookies and analytics tools to understand how the site is used.

Our "Start Your Free Pre-Screen" form collects your name, contact details and state, and a short set of health screening questions — whether you have an ongoing medical condition and what treatments you've tried for it, and whether you are pregnant, breastfeeding or trying to conceive, have a history of drug dependence or substance abuse, or have a history of psychosis, schizophrenia or bipolar disorder. These are standard screening questions we ask before a first consultation, not a diagnosis or a decision about your care.

Our Quit Smoking pre-screen is a separate form and collects your name and contact details along with your current smoking or vaping status, whether you are over 18, whether you are pregnant or breastfeeding, which methods you have previously tried to quit, how you responded to any prescription medication and any side effects you experienced, your reasons for quitting, and whether you are seeking to reduce or manage your use for harm minimisation reasons.

Both forms collect sensitive health information under the Australian Privacy Principles, and we handle it accordingly: it is used only to assess your enquiry and have a member of our team contact you about it, is seen only by staff and practitioners involved in that process, and is not published or shared other than as described in this policy.

We recommend avoiding sending sensitive information by email unless it is encrypted. We are not responsible for the privacy practices of third-party websites linked from this site. Booking is handled by a third-party scheduling provider, whose widget loads only once you choose to open the booking calendar.

9. My Health Record

If you use My Health Record, we may access and upload health information with your consent. You can control access and permissions at any time through your myGov account.

10. Direct marketing

We do not use your personal or health information for direct marketing purposes. You may receive appointment reminders, preventive health alerts or recalls, and information relevant to your treatment. You can opt out of these communications at any time by contacting the clinic.

11. Overseas disclosure

We do not routinely disclose personal or health information overseas. If such a disclosure is required — for example, for IT support — we will seek your consent and ensure equivalent privacy protections are in place.

12. Cookies and tracking

This site uses cookies for functionality, analytics and security. You can disable cookies in your browser, though some features may not work correctly as a result.

13. Data breach notification

If a data breach occurs that is likely to result in serious harm, we will act in accordance with the Notifiable Data Breaches (NDB) scheme — notifying affected individuals and the Office of the Australian Information Commissioner, and taking steps to mitigate harm and prevent recurrence.

14. Privacy complaints and contact

If you have a concern or complaint about your privacy, please contact our Privacy Officer:

Pure Path Medical Pty Ltd
(07) 5632 8124
support@purepathmedical.com.au

We aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) on 1300 363 992, or at oaic.gov.au. Our complaints and feedback page has more detail on the process, including other external bodies you can contact.

15. Policy updates

We may update this policy from time to time. The latest version is always available on this website, or at reception on request.

16. Acknowledgement

By using our services, you confirm that you have read and understood this policy and consent to the collection, use and disclosure of your personal and health information as described in it.