DOCTOR SHAMMI PRIVACY POLICY

INTRODUCTION

This document sets out the privacy policy of DOCTOR SHAMMI PTY LTD (referred to in this privacy policy as ‘we’, ‘us’, or ‘our’).

The Privacy Act 1988 (Cth) (Privacy Act) requires entities bound by the Australian Privacy Principles to have a privacy policy. We take our privacy obligations seriously and have created this privacy policy to explain how we collect, hold, use and disclose personal information.

By providing personal information, including sensitive information, to us, you consent to our collection, storage, use and disclosure of your personal information in accordance with this privacy policy and applicable privacy laws.

We may change this privacy policy from time to time by posting an updated copy on our website. We encourage you to check our website regularly to ensure that you are aware of our most current privacy policy.

2 TYPES OF PERSONAL INFORMATION WE COLLECT

The personal information we collect may include the following:

(a) name;

(b) mailing or street address;

(c) email address;

(d) social media information;

(e) telephone number and other contact details;

(f) age;

(g) date of birth;

(h) credit card or other payment information;

(i) sensitive information, including health information, medication and other information that may affect whether our services or treatments are suitable for you;

(j) information about your personal circumstances;

(k) information provided in connection with client surveys, questionnaires and promotions;

(l) your device identity and type, IP address, geo-location information, page-view statistics, advertising data and standard web log information;

(m) information about third parties; and

(n) any other information provided by you to us via our website, online presence, platforms or otherwise required by us or provided by you.

3 HOW PERSONAL INFORMATION IS COLLECTED

We will collect your personal information by lawful and fair means. We will only collect personal information where permitted or required by law and, where required, with your consent.

How we collect information from you

We may collect personal information where you:

(a) contact us through our website;

(b) receive goods or services from us;

(c) submit any of our online enquiry forms;

(d) communicate with us via email, telephone, SMS, social applications or otherwise;

(e) interact with our website, social applications, services, content or advertising; or

(f) enquire about or engage with our services.

How we collect information from third parties

Where possible, we collect your personal information directly from you. However, there may be occasions when we collect personal information, including sensitive information, about you from someone else.

For example, we may receive a referral from another healthcare provider or require information from another person involved in your care in order to provide our services.

How you provide information for someone else

If you provide personal and/or sensitive information on behalf of someone else, you must have the authority or consent of that person to provide their information to us for collection, use and disclosure in accordance with this privacy policy and applicable law.

How we collect information from cookies

We may also collect personal information when you use or access our website or social media pages. This may occur through web analytics tools, cookies or similar tracking technologies that allow us to track and analyse website usage.

Cookies are small files that store information on your computer, mobile phone or other device. If you do not wish information to be stored as a cookie, you may disable cookies through your web browser.

4 USE OF YOUR PERSONAL INFORMATION

We collect and use personal information for purposes including:

(a) providing goods, services or information to you;

(b) record-keeping and administrative purposes;

(c) providing information to our contractors, employees, consultants, agents or other third parties where reasonably necessary to provide goods or services to you;

(d) improving and optimising our services and client experience;

(e) complying with our legal obligations, resolving disputes or enforcing our agreements;

(f) sending administrative messages, reminders, notices, updates, security alerts and other information requested by you; and

(g) considering an application for employment from you.

We may also use your personal information for:

(h) secondary purposes closely related to the primary purpose where you would reasonably expect us to do so;

(i) purposes permitted under applicable privacy laws where necessary to lessen or prevent a serious threat to the life, health or safety of an individual or to public health or safety;

(j) any other purpose for which we have obtained your consent; or

(k) any other purpose permitted or required under applicable privacy laws.

5 HOW WE DISCLOSE YOUR PERSONAL INFORMATION

We respect your privacy and take reasonable steps to keep your personal information confidential and protected.

We may disclose your personal information to:

(a) healthcare providers we refer you to or from whom we receive a referral;

(b) healthcare providers or emergency services where necessary in an emergency;

(c) professional advisers, such as lawyers, accountants and auditors;

(d) related entities; or

(e) other third parties where you have consented to the disclosure or where disclosure is otherwise permitted or required by law.

We may also disclose personal information to third-party contractors where reasonably necessary to provide our goods and services, such as cloud-service providers, IT professionals, marketing agencies and debt collection agencies.

We take reasonable steps to work with third parties that maintain appropriate standards of data security and require them to use your personal information only for the purposes for which we have engaged them, subject to applicable law.

We will not otherwise disclose your personal information unless:

(f) you have consented to the disclosure;

(g) disclosure is necessary in an emergency or for the investigation of suspected criminal activity;

(h) we are required to disclose the information under a subpoena, court order or other legal or mandatory reporting requirement;

(i) disclosure is reasonably necessary to lessen or prevent a serious threat to the life, health or safety of an individual or to public health or safety, where permitted by law;

(j) disclosure is reasonably necessary for the establishment, exercise or defence of a legal claim; or

(k) disclosure is otherwise authorised or required by law.

6 STORAGE OF YOUR PERSONAL INFORMATION

We hold personal information relating to the services we provide to you through our third-party practice management platform, Shexie.

[Insert link to Shexie terms and conditions.]

Personal information we collect may be stored on servers located in Australia. However, some of our third-party service providers may operate overseas, including through overseas disaster-recovery facilities or personnel who may access information from outside Australia.

We may also use Google Analytics to collect website traffic information. Google operates its services across multiple countries and information may therefore be processed or stored outside Australia.

Where personal information is likely to be disclosed to overseas recipients, we will take reasonable steps to ensure that such disclosures are handled in accordance with applicable privacy laws.

7 SENSITIVE INFORMATION

Collection of sensitive information

We may collect sensitive information about you in the course of providing our services. This may include health information and other information classified as sensitive information under the Privacy Act 1988 (Cth).

We will collect sensitive information only where permitted or required by law and, where required, with your consent.

Types of sensitive information we collect

Sensitive information may include:

(a) health information, medical history and reports, including mental health information;

(b) referring healthcare provider information and referral letters;

(c) private health fund and private health insurance details;

(d) Medicare numbers, healthcare identifiers, concession card or other entitlement details; and

(e) other sensitive information provided by you or a third party to us through our website, platforms or otherwise.

How we use your sensitive information

Your sensitive information may be used for purposes including:

(f) providing healthcare services to you;

(g) complying with our legal obligations, resolving disputes or enforcing our agreements with you;

(h) sending messages, reminders, notices, updates, security alerts and other information requested by you; or

(i) any other purpose permitted or required under applicable privacy laws.

How we disclose your sensitive information

Your sensitive information may be disclosed:

(j) to healthcare providers or emergency services where necessary in an emergency; or

(k) for any other purpose permitted or required under applicable privacy laws.

How you can withdraw consent

Where our collection, use or disclosure of your sensitive information is based on your consent, you may withdraw that consent by contacting us using the details set out below.

Please note that withdrawing consent may affect our ability to provide certain services where the information is reasonably necessary to provide those services or where we are otherwise authorised or required by law to collect, use or disclose it.

8 CONSEQUENCES OF NOT PROVIDING PERSONAL INFORMATION

If you do not wish to provide your personal information, or do not consent to its collection, use, storage or disclosure where consent is required, we may be unable to provide some or all of our services to you.

9 MARKETING

We may send you marketing communications in accordance with the Spam Act 2003 (Cth) (Spam Act) and applicable privacy laws.

We may use email, SMS, social media, telephone or mail to send direct marketing communications.

Where consent is required, we will obtain your consent before sending marketing communications.

You may opt out of receiving marketing communications from us at any time by using the opt-out facility provided, such as an unsubscribe link, or by contacting us using the details provided at the end of this privacy policy.

We will process your request within a reasonable timeframe.

10 SECURITY

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Our information technology systems are protected through a range of administrative and technical measures. However, no method of electronic storage or transmission can be guaranteed to be completely secure.

11 LINKS

Our website may contain links to other websites. These links are provided for convenience and may not remain current.

We are not responsible for the privacy practices of linked websites and recommend that you review the privacy policies of those websites before using them.

12 REQUESTING ACCESS OR CORRECTING YOUR PERSONAL INFORMATION

If you wish to request access to personal information we hold about you, please contact us using the details below.

We may need to verify your identity before providing access to your information.

In some circumstances, we may be unable to provide access to all or part of your personal information. Where this occurs, we will explain why, unless we are prevented from doing so by law.

If you believe personal information we hold about you is inaccurate, incomplete or out of date, please contact us. We will take reasonable steps to correct the information where appropriate.

13 COMPLAINTS

If you wish to make a complaint about how we handle your personal information, please contact us using the details below.

We will investigate your complaint and respond within a reasonable timeframe.

If you are not satisfied with our response, you may have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC).

14 CONTACT US

For further information about this privacy policy or our privacy practices, to request access to or correction of your personal information, or to make a privacy complaint, please contact us:

Company: DOCTOR SHAMMI PTY LTD

Trading as: DOCTOR SHAMMI

Name: DOCTOR SHAMMI

Email: concierge@odedermatology.com.au

Privacy Policy last updated: 8 September 2026