Privacy policy

PatientOS is a practice management platform for Australian clinics, operated by JSA Healthcare Pty Ltd (ABN 79 140 499 976), trading as PocketDoc (“we”, “us”). We are committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The information we collect

• Account and staff information — names, work email addresses, roles and authentication details for the people who use PatientOS at a clinic.
• Clinic and patient information — when a clinic uses PatientOS, it enters information about its patients and operations, which may include personal information and health information (a sensitive type of personal information). We process this on behalf of the clinic.
• Enquiry information — if you register interest in our beta, we collect your name, email, clinic name and any message you send.
• Technical information — basic logs (such as IP address and browser type) needed to operate and secure the service.

How we collect it

We collect information directly from you — when you register interest, create an account, or use the platform. Clinic and patient information is entered into PatientOS by clinic staff in the course of running the clinic.

Why we collect and use it

We use personal information to provide, secure and improve PatientOS, to support clinics, to respond to enquiries, and to meet our legal obligations. We do not sell personal information, and we do not use patient health information for our own purposes — we hold it only to provide the service to the clinic.

Health information

Where PatientOS holds health information, the clinic is the entity responsible for that information under the APPs, and we act under the clinic's instructions as its service provider. Clinics are responsible for obtaining any patient consents required for their use of the platform.

Where your information is stored (data residency)

Personal information and health information held in PatientOS is stored in Australia. Consistent with APP 8, we do not disclose patient health information to overseas recipients. We use reputable infrastructure providers operating in Australian data centres.

Disclosure and third parties

We disclose personal information only as needed to operate the service — for example to infrastructure and email providers acting on our behalf — or where required or authorised by law. These providers are bound to protect the information and use it only for the purposes we specify.

How we protect it

We use technical and organisational measures appropriate to the sensitivity of the information, including encryption in transit, access controls scoped to each clinic, and the principle of least privilege. No system is perfectly secure, but we take our responsibilities seriously and review our controls.

Accessing and correcting your information

You can ask us to access or correct the personal information we hold about you. For information held within a clinic's PatientOS account (including patient records), please contact the relevant clinic, as it controls that information.

Cookies

We use essential cookies to keep you signed in and to operate the service. We do not use cookies to build advertising profiles.

Retention

We keep personal information only for as long as needed for the purposes described here or as required by law, and then delete or de-identify it.

Complaints

If you have a privacy concern, please contact us first (details below) and we'll work to resolve it. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the current version.

Contact us

JSA Healthcare Pty Ltd (trading as PocketDoc)
ABN 79 140 499 976
79 Ivo Whitton Circuit, Kambah ACT 2902, Australia
Email: james@pocketdoc.com.au
Phone: +61 423 601 259