Privacy Policy

PROLOGUE

We at MIDOC Pty Ltd honour your right to privacy and are keenly aware of the requirements of the Privacy Act 1988 (Cth) (Privacy Act). The Australian Privacy Principles (APPs) within this Act govern the gathering, usage, disclosure, quality, and safeguarding of personal data, and we diligently abide by them. We also respect the health privacy principles under State and Territory legislation.

Our enterprise, which includes the MIDOC platform (Platform), as well as our websites and app (Websites), ensures secure access to digital health services. These include online medical certificates, telehealth and video consultations with registered medical professionals (Partner Doctors) and other registered health providers like pharmacists, pathology providers, and nurses (Partner Providers); and when clinically suitable, the opportunity to request an online prescription, a referral for a pathology test, or a referral to a specialist doctor, following a telehealth or video consultation.

We appreciate your concerns regarding your privacy and recognize that the safeguarding of your personal data is of paramount importance to you. This privacy policy will elaborate on what information we gather about you, how we may use and disclose it, and the measures we take to ensure its security.

Personal data refers to any information or opinion about an identified individual, or one who can reasonably be identified, irrespective of the truth of the information or opinion, and whether it is recorded in a material form or not. Certain provisions are in place for the collection, usage, and disclosure of sensitive personal data, which includes health data and information about a person's race, ethnic origin, political beliefs, membership in political, professional, or trade associations, religious or philosophical beliefs, sexual preferences, and criminal history.

In this privacy policy, all references to personal information include sensitive information unless stated otherwise.

Our privacy officer can be reached at the following contact details: Contact Person: Quality Control Phone Number: 1300788166 Email: info@midoc.com.au Online: www.midoc.com.au Postal Address: 22/42 Cordelia Street South Brisbane

Please note that our Websites may contain links to third-party websites. These are provided for your convenience and may not be up-to-date or maintained. We can only ensure the privacy practices and security of our Websites, and we advise you to review the privacy and security policies and procedures of any other websites you visit.

2. INFORMATION WE COLLECT

We gather your personal data through various interactions, including via our Websites, Platform, telephone calls, emails, chat, and written and verbal communications. The personal information we collect depends on the nature of our interaction and may include:

Identity and contact information, like your name, address, phone number, and email.
Health information, including past, present, or future health data, provision of telehealth services, and pharmacy scripts and referrals. This information might be provided by you through the Platform or Websites or by a Partner Doctor or Partner Provider while providing services to you.
Other sensitive information, such as your birth gender and if you are of Aboriginal or Torres Strait Islander descent.
Government identifiers, such as Medicare numbers and individual healthcare identifiers.

We might also collect de-identified data via cookies on the Websites, including browser type, operating systems, and other visited websites. This data does not include personal information and will not be used to identify you individually.

We may gather personal data about patients, your next of kin or carer (Representative), healthcare providers including Partner Doctors and Partner Providers, job applicants, employees, contractors of Midoc, and third parties providing a service to Midoc.

We primarily collect personal information about you as a patient from your usage of the Platform and/or the Websites, your communication with us, any person who provides information about you with your consent, and any Partner Doctor or Partner Provider from whom you receive services through the Platform.

For Partner Doctors or Partner Providers, we may also collect personal information about your skills, qualifications, and experience. Further details will be outlined in the Contractor Agreement or other agreements upon registration.

Personal data may also be collected from third parties such as Google, Facebook, and Apple if you use these platforms to log in to the Platform.

3. USAGE AND DISCLOSURE OF YOUR PERSONAL DATA

We collect, retain, use, and disclose personal data for various reasons, including communication, record-keeping, providing the functionality of the Websites and the Platform, enabling Partner Doctors or Partner Providers to provide healthcare services, and complying with laws and assisting government or law enforcement agencies, among others.

If you provide your email address, telephone and/or mobile phone number, you also give your consent for us to contact you for any of the mentioned purposes.

As a patient, your health data collected by us will only be used or disclosed for providing services, operating our Platform and Websites, complying with laws, and assisting government or law enforcement agencies, among other purposes.

Failure to provide us with the requested personal data may affect our ability to provide you with the requested products or services. We may de-identify, use, and retain your personal data (excluding any eScript data) to analyze usage of the Platform, Websites, and services and to enhance them.

4. DISSEMINATION OF INFORMATION

To execute our operations and facilitate our services, including the MIDOC Platform, websites, and other services, we share your personal data with our associated corporations (as outlined in the Corporations Act 2001 (Cth)). This also extends to third parties such as:

Entities we engage to aid in accomplishing our objectives, including data storage providers, IT support providers, operators of payment systems, providers of targeted online advertising, and delivery partners.
Partner Doctors and Partner Providers delivering services to you via the Platform, enabling them to provide the products and services you request.

We do not disseminate your personal information to healthcare providers or pharmacists unrelated to the Platform without your express permission. To meet our financial audit requirements, we need to disclose a limited amount of your personal information to our financial auditors. For this purpose, we anonymise personal data as much as possible.

Please see section 3.2 of this privacy policy for more details about to whom we might disclose your health information if you are a patient.

We expect Partner Doctors and Partner Providers who offer services through the Platform to take reasonable precautions to guard personal information against unauthorized loss, access, or use. They may also be required to take additional measures under their respective professional regulations.

In the event of a sale, merger, or any change in the control of our business, our company, the Platform, or the Websites to a third party, we are allowed to disclose your personal data to the third party without notice or obtaining prior consent. We may also assign our agreements with you to the third party.

De-identified data may be disclosed to third parties to review service quality and conduct clinical research.

5. PERSONAL DATA STORAGE

To prevent unauthorized access, usage, or disclosure, we've implemented reasonable physical, electronic, and managerial procedures to safeguard the personal data we collect. We use Transport Layer Security (TSL) to ensure user data is secure and private. We currently plan to store data on servers located in Australia, making it unlikely that your personal data will be disclosed overseas. By using the Platform, you consent to us storing your personal data in this way.

6. COOKIES AND OTHER TRACKING TECHNOLOGIES

Like many website operators, we use 'cookies', which are small pieces of data stored on your computer by your web browser, to record how you navigate our Websites during each visit. These cookies are used strictly for internal management and do not collect personally identifiable information.

7. MARKETING AND ADVERTISING

On signing up to use the Platform, unless you choose to opt out, you're consenting to us using your personal information for marketing and promotional purposes. We may send information about products, services, or offers we think might interest you. We contact you via your preferred method of communication specified through the Platform.

8. YOUR PRIVACY RIGHTS

You have the following rights concerning the personal data we hold about you:

Access: You can ask for a copy of your information, and request it in a format that is easily reusable or transferable to another person or trusted healthcare provider.
Correction: You can ask us to correct or update your information.
Complaint: You can express your concerns or complaints about your privacy or how we handle your personal data. We will consider or investigate your complaint and aim to respond within 14 days.
9.POLICY UPDATES

This privacy policy is effective from June 2023. As we update this policy periodically, we recommend visiting our Websites for the latest version. Your continued use of the Websites and the Platform after changes are published constitutes your acceptance of the modified terms of this privacy policy. Last updated: June 2023