Surgical Partners Privacy Policy

About our Privacy Policy
- This privacy policy was last modified on 06 October 2023. This policy may be updated from time to time and the most up to date version will be published on our Website. The revised version shall take effect immediately upon publication.
Our commitment
- Surgical Partners recognises the importance of protecting the privacy of all Personal Information that we may collect or come into possession of as part of our business, particularly given the level of trust that is placed in us as an organisation by our health service professional customers who use and access our Application and Website and related services.
- We respect the rights of all individuals under the Privacy Legislation and we are committed to complying with the requirements of the Privacy Legislation in the collection and handling of all Personal Information.
- This policy explains how we collect and handle Personal Information and describes the kinds of Personal Information we collect, use, disclose and our purposes for doing so.
- Generally, Personal Information is information which may be used to reasonably identify an individual. For example, the name, address, date of birth, gender, email address and telephone number of an individual is generally considered to be Personal Information. Personal Information may also include information we collect about the individual preferences of an individual.
- Where Personal Information is provided to us, the provider of that Personal Information consents to our collection, use and disclosure of that Personal Information in accordance with this Privacy Policy and any other agreement or arrangement incidental to the provision, collection, use or disclosure of that Personal Information.
- This policy applies to the use of our Applications and our Website and related services and sets out how and why we collect Personal Information. For the avoidance of doubt, unless stated otherwise, this policy will govern our collection of Personal Information irrespective of the forum.

TAKE NOTICE THAT CONTINUED USAGE OF OUR APPLICATIONS, WEBSITE AND/OR SERVICES WILL BE TAKEN TO INDICATE ACCEPTANCE OF THE TERMS OF THIS PRIVACY POLICY INSOFAR AS IT RELATES TO OUR APPLICATIONS, WEBSITE AND/OR RELATED SERVICES.

This policy is not intended to cover categories of information that are not contemplated by the Privacy Legislation.

Client Information
- Due to the nature of the businesses we deal with, and the services we provide, we may from time to time require access to databases that store Personal Information about the clients of our health service professional customers, including Sensitive Information and Health Information (Client Information).
- We do not, and our Application and Website does not, record or collect any Client Information, and only access the databases of our customers (where Client Information may be stored) as the agent of our customers, and to the extent necessary to ensure the proper provision to our customers of the Applications, Website and related services.
- Any access to any database a customer maintains will be undertaken in consultation with the customer and under the supervision of the customer where necessary to ensure the integrity of any Client Information in the database.
- To the extent that any Client Information is inadvertently accessed, recorded or collected, we undertake to return or destroy that information, or otherwise deal with such Client Information as the customer directs.
- If a customer does provide us with Personal Information about an individual, they must ensure that they are authorised to disclose that information to us and that, without us taking any further steps required by applicable data protection or privacy laws, we may collect, use and disclose such information for the purposes described in this policy.
- This means that our customers must take reasonable steps to ensure that the individual concerned is aware of and/or consents to the various matters detailed in this policy, including the fact that their Personal Information is being collected, the purposes for which that information is being collected, the intended recipients of that information, the individual’s right to obtain access to that information, and our identity and how to contact us.
Why we collect Personal Information about our customers
- We collect Personal Information about our customers so that we can provide our customers with access and use of our Applications, Website and related services. We only collect Personal Information if it is reasonably necessary for us to carry out our functions and activities.
- The purposes for which we collect and hold Personal Information include:
- to verify the identity of a customer;
- to administer the Applications, Website and related services;
- to carry out marketing or training relating to the Applications, Website and related services;
- to manage our relationship with your customers, evaluate our business performance and build our customer database;
- to process transactions relating to the Applications, Website and related services;
- to assist with the resolution of technical support issues or other issues relating to the Applications, Website and related services;
- to provide our customers with aftermarket services, such as seeking feedback, addressing any further requests relating to the Applications, Website and related services;
- to conduct research, compile or analyse statistics relevant to the operations of our business;
- to facilitate our internal business operations, including fulfilment of any legal and regulatory requirements;
- to create backups of our business records;
- to maintain a customer database or similar record; and
- to manage our Applications operated in conjunction with our business, including analysing data collected from our Applications concerning usage and activities of users of our Applications. This helps us run our Applications more efficiently and give our customers a better experience.
- We may also use your Personal Information for other purposes not listed above but this will be made clear to you at the time we collect your Personal Information.
- If you choose not to provide us with Personal Information, we may be unable to assist you.
The kinds of Personal Information we collect about our customers
- The kinds of Personal Information we collect will depend on the type of interaction our customers have with us. Generally, the kinds of Personal Information we collect about our customers include:
- name, address (postal and residential), place of employment, occupation, email address, telephone number(s), date of birth and gender;
- individual preferences in respect of the services we provide you;
- details of the device used to access or use our Applications;
- demographic information;
- details as to whether a customer has taken up any products or offerings we have made;
- whether the customer has a connection with others whose personal information we may collect or hold;
- what, how and when a customer has dealt with us or expressed an interest in buying from us;
- any stated preferences for our products or services a customer has provided to us; and
- credit card and direct debit details for a customer’s bank account should the customer elect to pay us via this method.
- In the course providing our customers with professional services, we may also have a need to collect additional Personal Information (for instance, of financial details or credit information).
How we disclose Personal Information
- We may disclose Personal Information collected from our customers:
- to our related entities, third party suppliers, consultants, employees, agents, contractors, sponsors, government agencies or other third parties to satisfy the purposes for which the information was collected (as outlined in clause 4 of this policy) or for another purpose if that other purpose is closely related to the primary purpose of collection and an individual would reasonably expect us to disclose the information for that secondary purpose;
- when a customer’s authorised representative, such as an accountant or lawyer, contact us in connection with providing the customer with services;
- if the disclosure is requested by a government agency or the courts and we are obliged to comply;
- to any other person, with the customer’s consent (express or implied); and
- to any person to whom our assets or business (or any part thereof) is transferred to.
- In addition to the above, we will disclose a customer’s Personal Information if we are required to do so under law or if the disclosure is made in connection with either the normal operation of our business in a way that the customer might reasonably expect, for example to process an insurance claim, or if such disclosure is incidental to IT services being provided to our business, or in connection with any insurance or warranty claim or for the resolution of any dispute that arises between us and the customer. This disclosure may involve the customer’s Personal Information being transmitted overseas.
- We may also disclose a customer’s Personal Information if the customer chooses to participate in online or “app” based service offerings whereby the customer’s Personal Information may be disclosed to and stored in software which is operated by a third party intermediary as part of your dealings with us. Personal Information disclosed in this way may be transmitted offshore, including to the United States of America. When a customer provides Personal Information to us, the customer consents to the disclosure of the Personal Information outside of Australia and acknowledges that we are not required to ensure that the overseas recipients treat that personal information in compliance with Privacy Legislation. We will, however, take reasonable steps to ensure any overseas recipient we deal with looks after the customer’s Personal Information in a manner consistent with the Australian Privacy Principles.
- In the event of a restructure or sale of our business (or part of our business), we may disclose Personal Information to the buyer without a customer’s consent subject to compliance with the Privacy Legislation. If we sell the business and the sale is structured as a share sale, our customers acknowledge that this will not constitute the ‘transfer’ of Personal Information.
- We will not sell, trade or rent a customer’s Personal Information to any third parties for marketing purposes without the customer’s consent.
How we collect and store data and transmit Personal Information of our customers
- We usually collect and store information when a customer provides us information in person or when the customer communicates with us by telephone, email, web-based form, letter, facsimile or other means, including:
- when we provide a customer with our services via telephone, email or our website;
- when we provide a customer with assistance or support for our products or services;
- when a customer participates in our functions, events, activities or social media pages;
- when a customer requests that we provide the customer with information concerning our products or services; and
- if a customer completes any forms requesting information, completes any survey or provides feedback to us concerning our products or services.
- Where practicable we will only collect information from the customer personally.
- Information is collected and stored in paper, physical and/or electronic form. We use our own and third party computer servers including our website hosts, data backups and payment gateway(s), which may be located overseas and as such Personal Information will likely be stored and transmitted overseas as part of the normal operation of our business.
- We will endeavour to take all reasonable steps to keep secure and protect any Personal Information which we hold about a customer, including:
- securing our physical premises and digital storage media;
- placing password protection and access control over our information technology systems and databases to limit access and protect electronic information from unauthorised interference, access, modification and disclosure; and
- taking regular back-ups of our electronic systems.
- Notwithstanding that we will take all reasonable steps, data transmission over the internet is never guaranteed to be completely secure. In the circumstances, we do not warrant the security of any information transmitted to us or from any online services.
- We also collect information from a customer’s computer automatically when the customer browses our Website. This information may include:
- the date and time of the visit;
- the domain, locality and operating system;
- the server the customer’s computer is using to access our Website;
- the customer’s browser and version number;
- search terms the customer has entered to find our Website or enter on our Website;
- pages and links the customer has accessed both on our Website and on other websites;
- the last website the customer visited;
- the pages of our Website the customer accesses; and
- the customer’s IP Address.
- Please note that it may be possible for us to identify a customer from information collected automatically from the customer’s visit(s) to our Website. If a customer has registered an account with us, we will able to identify the customer through the customer’s user name and password when the customer logs into our Website or any Applications. Further, if a customer accesses our Website via links in an email we have sent, we will be able to identify the customer.
- We may use statistical analytics software tools such as Google Analytics and software known as cookies which transmit data to third party servers located overseas including in the United States of America. To our knowledge Google Analytics does not identify individual users or associate a customer’s IP Address with any other data held by Google.
- If a customer does not wish to grant us the right to use cookies to gather information about the customer while using our Website, then the customer may elect to set their browser settings to disable cookies. However, this may cause parts of our Website to not function properly.
- Please note that our Website may contain links to other websites, and a customer’s use of those websites is not covered by this privacy policy. We encourage our customers to review each website’s privacy policy.
How we use Personal Information of our customers for direct marketing
- We may contact a customer from time to time to inform them about existing and new products and services that we feel they may be interested in.
- We will ensure that any e-mail that a customer is sent by us as direct marketing complies with the Spam Act 2003 (Cth) and contains an ‘unsubscribe’ option so that the customer can remove themselves from any further marketing communications.
- A customer can also call or write to us to request that their details be removed from our direct marketing list. We will endeavour to remove a customer’s details from our direct marketing list within a reasonable time following such a request (ordinarily 5 business days).
- Our direct marketing list may be operated by software and servers located overseas and as such a customer’s Personal Information may be sent overseas as part of our marketing.
Inability to deal with customers on an anonymous basis
- Because of the nature of our business, it is impracticable to deal with any of our customers purely on an anonymous basis or using a pseudonym.
- We may be able to provide a customer with limited information in the absence of the customer identifying themselves but generally we will be unable to provide a customer with services unless they have identified themselves.
How a customer can access or correct Personal Information or make an enquiry or complaint
- If a customer wishes to access or correct the Personal Information we hold about the customer, or make a complaint, they should contact us in writing at the following address and will try to resolve those concerns as soon as possible:

Privacy Officer

Ehealthme Pty Ltd

Unit 2.106, 477 Pitt Street, Sydney, NSW 2000

or by email to privacy@surgicalpartners.com.au

In order to disclose information to a customer in response to a request for access we may require the customer to provide us with sufficient comfort as to the customer’s identity. There are exceptions under the Privacy Legislation which may affect a customer’s right to access their Personal Information – these exceptions include where (amongst other things):-
access would pose a serious threat to the life, health or safety of any individual;
access would have an unreasonable impact on the privacy of others;
the request for access is frivolous or vexatious;
the information relates to existing or anticipated legal proceedings between us and the customer and the information would not otherwise be accessible by the process of discovery;
giving access would reveal the intentions of the entity in relation to negotiations with the customer;
giving access would be unlawful;
denying access is required or authorised by or under an Australia law or a court/tribunal;
the information relates to commercial sensitive decision-making process; or
giving access would prejudice enforcement related action.
We may (depending on the request) charge a customer a fee to access Personal Information, which we will inform the customer of at the time. All requests for Personal Information will be handled in a reasonable period of time (within 30 days after the request is made).
If a customer wishes to have their Personal Information deleted, they should contact us using the address details above and we will take reasonable steps to delete the information (unless we are obliged to keep it for legal or auditing purposes).
In the event that a customer believes that there has been a breach of the Privacy Legislation, they should contact us as soon as possible using the address details above.
If a customer is not satisfied with our handling of a complaint or the outcome of a complaint the customer may make an application to the Office of the Australian Information Commissioner or the Privacy Commissioner in your State or Territory.

Definitions used in this policy

Application

(a) the software based application developed by Surgical Partners known as SP Hub, including all associated upgrades, revisions or error or bug fixes of the application and any associated media, printed materials and electronic documentation; and

(b) such other software based application including all associated upgrades, revisions or error or bug fixes of the application and any associated media, printed materials and electronic documentation that Surgical Partners makes available to its customers;

Customer

and similar terms means, as the context requires:

a person using or accessing our Applications, Website or related services; and/or
a person dealing with us as a customer; and/or
any agent providing Personal Information to us on behalf of another person; and/or
any agent dealing with us on behalf of another person.

Health Information

has the meaning set out in the Privacy Act.

IP Address

means a number automatically assigned to a customer’s computer and which is required when the customer is using the internet and which may be able to be used to identify the customer.

Personal Information

has the meaning set out in the Privacy Act.

Privacy Act

means the Privacy Act 1988 (Cth) as amended from time to time.

Privacy Legislation

means such laws as may place requirements on the handling of Personal Information under the Privacy Act and the Australian Privacy Principles.

Sensitive Information

has the meaning set out in the Privacy Act.

‘Surgical Partners’, ‘we’ ‘our’, ‘us’

and similar terms means Ehealthme Pty Ltd (ACN 166 979 040).

‘Website’

means www.surgicalpartners.com.au and any other website we may operate from time to time.