Privacy.

1. What we collect

When you join the waitlist, apply to prescribe, or submit a partnership enquiry, we collect only what's needed to act on that request. Typically: your name, your email, an optional postcode, and the answers you give to the question in front of you. For prescriber applications we also collect your AHPRA registration number and practice state.

If you use the quiz, we collect your answers, the generated panel identifier, and (if you provide them) your name, email, and mobile number. If you reach the bloods order page, we record that intent and the panel you were viewing.

2. Why we collect it

• To contact you about your place on the waitlist, your application, or your enquiry.
• To match patient-side activity (quiz, bloods, referrals) to your merit-queue position.
• To verify prescriber registration through the public AHPRA register.
• To meet our legal record-keeping obligations under Australian Privacy Principles (APP 11) and the Health Records Act in each state where it applies.

We do not sell your data. We do not share it with advertisers. We do not pass it to any third party other than service providers required to deliver what you asked for (email delivery, calendar booking, secure storage).

3. Where it lives

Form submissions are stored in Supabase (PostgreSQL) infrastructure hosted in Sydney, Australia. Email is delivered through our transactional email provider. Both providers operate under contractual data-protection obligations and are bound to Australian Privacy Principles.

Clinical records, once you become a patient, are held to clinic-grade encryption standards and Australian Privacy Principles.

4. Your rights

• Access. You can ask for a copy of every record we hold about you.
• Correction. You can ask us to correct any record that is wrong.
• Deletion. You can ask us to delete your records, subject to clinical record-keeping obligations.
• Withdrawal. You can leave the waitlist or withdraw an application at any time.

To exercise any of these rights, email privacy@indexclinic.com.au. We respond within 30 days.

5. Cookies and tracking

The public site sets a small set of first-party identifiers in your browser's local storage: a quiz panel reference, a waitlist token, and the quiz answers you've already given so we don't re-ask. We do not use third-party advertising cookies. We do not run pixel-tracking for ad networks.

6. Children

Index Clinic services are for adults. We do not knowingly collect data from anyone under 18. If you believe we hold such data, email privacy@indexclinic.com.au and we will remove it.

7. Changes to this page

If we change how we handle data, we update this page and note the change date at the top. Material changes are also notified by email to active waitlist members and applicants.

8. Contact

Index Clinic Australia Pty Ltd
Privacy enquiries: privacy@indexclinic.com.au
General enquiries: hello@indexclinic.com.au

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.