Privacy Policy

Last Updated: September 2026

NewTeleDoc Medical ("we", "us", "our") is committed to protecting your privacy and managing your medical and health information with the highest standards of security. This Privacy Policy outlines how your personal and sensitive health data is collected, processed, and stored using our primary practice management system, Halaxy, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable Australian health records legislation.

1. Information We Collect via Halaxy

When you register, schedule a consultation, or complete an intake form with NewTeleDoc Medical, your data is processed and managed within Halaxy. We collect:

  • Personal Identity & Contact Data: Full name, date of birth, biological sex, residential address, email address, and mobile phone number.
  • Government Identifiers: Medicare card number, Individual Healthcare Identifier (IHI), and concession details.
  • Health & Sensitive Clinical Information: Medical history, symptoms, allergies, current medications, clinical notes recorded by consulting AHPRA-registered GPs, pathology/radiology requests, eScript tokens, and uploaded medical records.
  • Payment & Financial Information: Credit/debit card billing details, processed securely via Halaxy’s PCI-DSS compliant payment system (payment details are tokenized and never stored directly on our website servers).

2. How We Collect Your Information

We collect your personal information directly through digital workflows powered by Halaxy:

  • Halaxy Booking & Intake Forms: Information you submit when booking an appointment or filling out online medical intake questionnaires.
  • Telehealth Consultations: Notes, diagnoses, and treatment plans entered into your Halaxy patient file by your consulting doctor during or after your appointment.
  • Connected Care Services: Test results, specialist letters, or eScript transaction confirmations received through integrated clinical systems into Halaxy.

3. Data Storage & Security Standards in Halaxy

Your privacy and medical record security are governed by Halaxy's bank-grade platform infrastructure:

  • Australian Data Centers: All patient records, clinical notes, and payment records held in Halaxy are stored in protected, secure data centers with multiple backups located within Australia.
  • Bank-Grade Encryption: Your data is protected by 256-bit bank-grade security and encryption both in transit and at rest.
  • Strict Access Control & Confidentiality: Halaxy incorporates privacy and confidentiality by design. Access to your medical file is restricted exclusively to authorized clinical personnel involved in your care.
  • No Sale of Data: In strict alignment with Halaxy's privacy commitment, we never sell, rent, or trade identifiable patient data to third parties.
  • Retention Period: As mandated by Australian health law, clinical records held in Halaxy are retained for a minimum of 7 years from the date of the last entry (or until a minor reaches 25 years of age).

4. Disclosure of Personal & Health Information

Your health information stored in Halaxy is disclosed only for legitimate medical and administrative purposes, including:

  • To consulting AHPRA-registered General Practitioners delivering your treatment.
  • To third-party healthcare entities necessary to fulfill your clinical care (e.g., electronic prescription exchange networks, dispensing pharmacies, pathology collection centers, or diagnostic imaging clinics).
  • Where authorized or required under Australian law (e.g., mandatory public health notifications or legal requirements).

5. Analytics & Non-Clinical Website Data

While our public website uses standard web analytics to monitor site performance, no medical notes, clinical history, or health details entered into Halaxy are ever shared with web analytics, Meta Pixel, or advertising platforms.

6. Accessing & Correcting Your Halaxy Health Record

You have the right to request access to the personal and health details held in your Halaxy patient profile, or to request corrections if you believe any information is inaccurate or out of date. To submit a request, please email our practice manager.

7. Privacy Complaints & Contact Details

If you have questions regarding how your data is managed in Halaxy, or if you wish to lodge a formal privacy complaint, please contact us directly:

Privacy Officer – NewTeleDoc Medical
Email: info@newteledocmedical.com.au
Website: www.newteledocmedical.com.au

If you are unsatisfied with our response, you can escalate your concern to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or call 1300 363 992.