We are Health Agent. We are an Australian company that connects patients, prescribers, pharmacists and pharmaceutical companies seamlessly. Our mission is to empower patients and facilitate collaboration across the healthcare ecosystem.

A lot of the work we do and a lot of the services we provide involves Health Agent contracted to another organisation. When we do, we act as a Processor, a contracted service provider, to a Controller, a contracting organisation. In our role as Processor, we process your personal information on behalf of a Controller. The services we provide, the personal information we collect, what we can and can’t do with your personal information, and how we store your personal information is covered under a binding contract between us and the Controller.

As a Processor, we abide by our contractual obligations when we process your personal information. And we always process your personal information lawfully.

When we act as a Processor, the privacy policy of the Controller applies and describes how your personal information is managed. Where it is relevant to the services we perform, we add links to both the Controller’s privacy policy and to ours.

When we are not a Processor, we are the Controller. As the Controller, we collect and process personal information about you and manage your personal information in our own capacity. And when we are a Controller, this privacy policy applies.

In our capacity as Controller, we collect your information if you are an Australian based healthcare providers with an active AHPRA registration who wants to register with us to use our services.

We collect your name, your contact details, your AHRPA number and prescriber number, and the name and address of the practices you wish to register.

Our preference is to only collect your personal information that pertains to your work context as a health care provider. This means that we prefer to engage with you using your work contact details.

We collect your personal information directly from you, when you complete our online registration form or when you contact us directly.

Purposes for which we collect, hold, use and disclose your personal information

We collect, hold and use your personal information:

• To offer you our services.

• To allow you to register via our online portal.

• To allow you to order medication via the online portal.

• To respond to your questions.

We disclose your personal information:

• To our service providers, and then only where necessary, sharing the least about of personal information with them as needed, and under binding contractual arrangements.

• To pharmaceutical companies, to authorise the request for medication.

We don’t routinely disclose your personal information overseas, except where we are required or authorised by law, or where another legal exception compels us to do so.

You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. In very limited circumstances, we may refuse you access to your personal information, but only where a lawful exception compels us to do so.

You have the right to ask us to correct personal information you think is inaccurate or incomplete. We encourage you to let us know when your personal information changes, so we can continue to offer you our service via your correct contact details.

You can access and correct your personal information by logging into your portal and making the changes yourself. Alternately, you can email us at privacy@healthagent.com.au to access or correct the personal information we hold about you. When you email us, we may need to request additional information from you. For example, we may ask you to confirm your identity, before we give you access to or correct your personal information. If you make a request on behalf of somebody else, we may need to confirm that you have the authority to act on behalf of the person whose personal information the access or correction request is about. We will review your request and respond to you within 30 days.

You have a right to complain about the way we process your personal information. Email us at privacy@healthagent.com.au to make a privacy complaint.

In some cases, we may need to request additional information from you, to respond to your complaint. For example, we may ask you to confirm your identity before we respond to your complaint. If you make a privacy complaint on behalf of somebody else, we may need to confirm that you have the authority to act on behalf of the person whose personal information the complaint is about.

We take our responsibility as a Controller seriously. We will review your complaint, investigate where needed, and keep you informed along the way. We will respond to you within 30 days.

If you remain unhappy with how we’ve used your personal information after raising a complaint with us, you can also escalate your complaint to the privacy regulator, the Office of the Australian Information Commissioner (OAIC). The OAIC’s https://www.oaic.gov.au/contact-us web page lists the most up-to-date contact details for you to use.