• Personal Information: Any information that can identify you, directly or indirectly.

• Health Information: A category of sensitive information that includes your health history, medications, clinical notes, and healthcare services provided.

• Platform: Any website, mobile application, or digital interface we operate or use to deliver our services.

• Services: Includes health consultations (telehealth or in-person), dispensary services, delivery, and ongoing care.

• PHI: Protected Health Information (interchangeable with “health information” under Australian law).

• Third Parties: Pharmacies, healthcare providers, delivery services, analytics tools, cloud providers, and legal or regulatory authorities.

• Cookies: Small data files used to track and improve digital experience.

We may collect the following types of information:

• Full name, contact details, date of birth, Medicare/IHI numbers

• Health history, symptoms, treatment plans, and prescriptions

• Correspondence with practitioners or support staff

• Data generated from your use of our digital platforms (IP address, location, usage behaviour)

• Payment and transaction data (via secure third-party processors)

We collect information:

• Directly from you (via forms, telehealth, consultations, email, SMS)

• From third-party healthcare providers (with your consent)

• Automatically via cookies, session tracking, and usage logs

• Via secure integrations with pharmacy, delivery, or health data systems

We use your data to:

• Provide healthcare services and treatment

• Issue prescriptions and support care continuity

• Coordinate delivery of products

• Comply with legal and clinical obligations

• Understand service use and improve patient experience

• Conduct secure payment processing

• Identify eligibility for services (e.g. alternate health suitability)

We may share your information with:

• Registered healthcare professionals

• Pharmacists and dispensary staff

• Regulatory agencies (e.g. TGA or state health bodies)

• Delivery and logistics partners

• Cloud storage or IT service providers

• Law enforcement, where legally required

All third parties are bound by strict privacy, confidentiality, and data security obligations.

We use cookies and similar technologies to:

• Monitor site performance

• Improve user experience

• Measure patient journeys

• Track advertising effectiveness

You may disable cookies via your browser settings, although some features may not function

optimally.

We may use AI technologies to:

• Support triage and recommendations

• Optimise service delivery

• Enhance user interactions

All AI use is audited and data used in AI systems is de-identified where possible.

We may use de-identified information for:

• Research

• Marketing insights

• Regulatory reporting

• Internal analysis

No individual can be identified from this data.

Your personal and health information is:

• Stored securely in an encrypted cloud environments

• Access-controlled to authorised team members only

• Retained for a minimum of 7 years in line with the Health Records and Information Privacy

Act 2002 (NSW) and related healthcare legislation

Some data may be stored or processed overseas (e.g. secure cloud servers). Where this occurs, we ensure data is handled in compliance with the APPs and industry-standard security protocols.

You may receive service updates, clinical follow-ups, or marketing communications from High Street. You can opt out of non-clinical messaging at any time via unsubscribe links or by contacting our Privacy Officer.

You have the right to:

• Access the personal or health information we hold about you

• Request corrections or updates to any inaccurate information

All requests will be handled within 30 days and may require proof of identity.

We may disclose personal information:

• To comply with subpoenas or court orders

• To respond to TGA reporting or regulatory obligations

• If we believe there is a serious risk to health, safety, or life

We treat all health-related information as sensitive. We:

• Limit access to clinicians and authorised staff

• Encrypt records in storage and transmission

• Regularly review security protocols

We only collect and use this information for clinical care or as required by law.

You have the right to:

• Know why your information is being collected

• Understand how it will be used

• Access, correct or request deletion of your information

• Make a complaint if you believe your privacy has been breached

To raise a concern or complaint about privacy, please contact our Privacy Officer. If you are not satisfied with our response, you can lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Privacy Officer

High Street Health Pty Ltd
Address: 72 Enmore Rd, Enmore NSW 2042
Email: hi@high-st.com.au
Phone Number: +61 2 8260 2955

This policy may be updated occasionally to reflect changes in law or our services. The latest version will always be available at www.high-st.com.au/privacy.