Capture Care

Privacy Policy



Our Privacy Obligations

CaptureCare Pty Ltd ABN 90 647 696 517 (“CaptureCare” or “We”) is governed by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). The APPs regulate how personal information is handled by CaptureCare. 

‘Personal information’ means information or an opinion about an identified individual, or an individual who is reasonably identifiable. CaptureCare’s Privacy Policy applies to personal information collected and/or held by CaptureCare.

Additionally, as a health service provider or organisation operating in Victoria that collects, holds or uses health information, CaptureCare is also governed by the Health Records Act 2001 (VIC).

The types of personal information we collect and hold

We collect personal information about clients, doctors, and patients, as part of our routine activities. We also collect personal information about our staff, contractors and suppliers, as well as the contact details of individuals who work for contractors and suppliers, and other types of professional associates and personal contacts.

How we collect personal information

Information that you specifically give us

We may ask you to provide us with certain types of personal information if you wish to obtain a particular service or product from us. This might happen over the telephone, through our website, by filling in a paper form, or meeting with us face-to-face. We will give you a Collection Notice at the time, to explain how we will use the personal information we are asking for. The notice may be written or verbal. 

You might also provide your personal information to us, without us directly asking for it, for example if you engage with us on social media.

Information that we collect from others

If you apply for a job or contract with us, we will collect personal information about you from your referees. With your consent we may also use a third-party service to ensure your employment, educational and identity records are valid including by contacting the Australian Health Practitioner Regulation Agency (AHPRA). We may also check some details about our suppliers from publicly available sources, such as the Australian Business Register and ASIC databases.

Information that we generate ourselves

We maintain records of the interactions we have with you, including the products and services we have provided to you, education that has been provided for you and complaints that have been made. We collect limited information about users of our websites, for diagnostic and analytic purposes. We use cookies and gather IP addresses to do so, but we do not trace these back to individual users.

The types of personal information we collect

The types of personal information we collect about you will depend upon the interactions you have with us. You may provide us with basic information such as your name, date of birth, phone number, postal address and email address. 

If you are receiving services as a telehealth patient, we may collect additional details about your healthcare including but not limited to your health condition and reason for referral, diagnosis, reason for prescription, symptoms, side effects and personal experience, either directly from you or from your doctor.

Links to other sites

On our website, we may provide links to third party websites. These linked sites are not under our control, and we cannot accept responsibility for the conduct of companies linked to our website. Before providing your personal information via any other website, we advise you to examine the terms and conditions of using that website and its privacy policy.

How we use personal information

We may use your personal information for the following purposes:

  • to provide the education and support you have requested
  • to answer your enquiry about our services, or to respond to a complaint
  • to manage our employment or business relationship with you
  • to promote our other programs, products or services which may be of interest to you (unless you have opted out from such communications)
  • to comply with legal, contractual and regulatory obligations
  • if otherwise permitted or required by law, or
  • for other purposes with your consent obtained through the provision of a Collection Notice or verbally, unless you withdraw your consent.

If you are a patient participating in a telehealth program, we may also use your personal information:

  • for the purposes of complying with our contractual obligations to pass de-identified health data to our business partners;
  • to contact emergency services in the event of an imminent threat to your health or safety;
  • to provide your doctor with a report containing information about you, or any other nominated doctor in the same clinic
  • to create Case Studies to demonstrate product efficacy, clinical approaches, and patient outcomes; and
  • for the purposes of analysing trends, conducting research and publication of such findings at health care professional education symposiums. In these circumstances we will de-identify your personal information so that it will not identify you individually. 

We will keep personal information about you, to use for the above purposes, for seven years as per the Health Records Regulations 2002.

When we disclose personal information

Our third party service providers

The personal information of doctors, patients, clients, staff, suppliers and other contacts may be held on our behalf outside Australia, including ‘in the cloud’, by our third party service providers. Our third party service providers are bound by contract to only use your personal information on our behalf, under our instructions.

Our third party service providers include Medical Objects (secure health data management program) and SalesForce (CRM).  You can obtain further information about the privacy policies of these providers here:

  • Medical Objects Privacy Policy: https://www.medicalobjects.com/privacy/ 
  • Salesforce Privacy Policy: https://www.salesforce.com/au/company/privacy/ 
  • Cemplicity Data Protection: https://www.cemplicity.com/data-protection-principles/

Other disclosures and transfers

We may also disclose your personal information to third parties for the following purposes:

  • if necessary to provide the service or product you have requested;
  • if otherwise permitted or required by law; or
  • for other purposes with your consent.

Overseas transfers of Personal Information

We may store, process or back up your personal information on servers that are located overseas. Information collected or processed through Salesforce may be stored in USA. If we are required to provide personal information to third parties overseas, we will take such steps that are reasonable to ensure that your information is handled and stored in accordance with the APPs.

Important Notice: By submitting your personal information to us, you expressly consent to the disclosure, transfer, storing or processing of your personal information outside of Australia. In providing this consent, you understand and acknowledge that countries outside of Australia do not always have the same privacy protection obligations as Australia in relation to personal information.

You consent to us providing your personal information to recipients outside of Australia even though that recipient is not bound by the Privacy Act, will not be accountable to you or to us for breaches of the Privacy Act and you will not have the redress options available to you under the Privacy Act.

If you do not agree to the transfer of your personal information outside of Australia, please either do not provide us with your personal information or contact us via the details set out at the end of this document.

Security of your personal information

We will take reasonable security measures to protect personal information from loss, unauthorised access, use, modification or disclosure. We will take reasonable steps to ensure personal information is stored securely not kept longer than necessary, and disposed of appropriately. We use encryption technology to ensure the secure transmission of emails.

Accessing or correcting your personal information

You have the right to request access to the personal information that we hold about you. Unless an exception applies, we must allow you to see the personal information we hold about you, within a reasonable time period and without unreasonable expense.

You also have the right to request the correction of the personal information we hold about you. We will take reasonable steps to make appropriate corrections to personal information so that it is accurate, complete and up-to-date. Unless an exception applies, we must update, correct, amend or delete the personal information we hold about you within a reasonable time period. We do not charge for making corrections.

While we endeavour to resolve complaints quickly and informally, if you wish to proceed to a formal privacy complaint, we request that you make your complaint in writing to our Privacy Officer, by email as above. We will acknowledge your formal complaint within 10 working days.

If we do not resolve your privacy complaint to your satisfaction, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) by calling them on 1300 363 992, making a complaint online at www.oaic.gov.au, or writing to them at OAIC, GPO Box 5218, Sydney NSW 2001.

Last Updated: 25/11/2021

Share by: