(Legal)
Privacy Policy
Last updated: May 2026
The Testo Clinic Pty Ltd (The Testo Clinic Pty Ltd) is committed to protecting your privacy. This policy explains how we collect, use, store, disclose and protect your personal and health information, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Health Records and Information Privacy Act 2002 (NSW).
Our details. The Testo Clinic Pty Ltd, 119 Willoughby Road, Crows Nest NSW 2065. ABN: [REQUIRES CLIENT INPUT: registered ABN]. Contact: [email protected] or 1300 983 126.
The information we collect
We collect personal information such as your name, contact details, postcode and date of birth, and health information, which is sensitive information under the Privacy Act. Health information we may collect includes your symptoms, medical history, diagnoses, clinical notes, pathology and test results, medications, referrals, care plans, consultation records and metadata, and Medicare or private health fund claim details. It is not limited to your name and email.
Identifying yourself
Due to the nature of the health services we provide, it is generally impracticable for us to deal with individuals who have not identified themselves. Accurate identification is required to ensure the safety and continuity of clinical care, to comply with our legal and professional obligations under applicable health legislation, and to meet the requirements of Medicare and private health insurance billing.
Unsolicited information
From time to time, we may receive personal or health information that we did not solicit. Where we receive unsolicited personal information, we will promptly assess whether that information is of a kind we could have collected under our standard collection practices. If it is not, and the law allows, we will de-identify or securely destroy it.
How we use your information
We use your information to assess your suitability for a consultation, to provide and coordinate clinical care, to communicate with you, to meet our legal, professional and billing obligations, and to improve our services. We only use your health information for the purposes for which it was collected, a directly related purpose you would reasonably expect, or where you have consented.
Disclosure of your information
We may disclose your information to the treating doctors and clinicians involved in your care, to pathology providers and pharmacies as part of your care, and to third parties where required or authorised by law. Where your care is coordinated with another provider (such as your GP), we do so with your consent. We do not sell your information.
Overseas disclosure
Some of the third-party technology services we use to operate the clinic (for example, secure communication, scheduling or analytics tools) may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure overseas recipients handle your information consistently with the APPs, and we will seek your consent where required before transferring your information overseas. We will tell you the categories of recipient and, where practicable, the countries involved on request.
Direct marketing
We will only send you marketing communications where you have given express consent, and you can opt out at any time using the unsubscribe link in any message or by contacting us. We do not use your sensitive health information for direct marketing, and we do not target marketing based on health conditions.
Cookies and online tracking
Our website uses cookies and similar technologies to understand how the site is used and to improve it. Because health-related browsing can reveal sensitive interests, we limit tracking to what is necessary and you can control cookies through your browser settings or our cookie banner. Analytics data is handled in line with this policy.
Government and healthcare identifiers
We handle government-related identifiers such as your Medicare number and Individual Healthcare Identifier (IHI) only as permitted by law, and we do not adopt them as our own identifier for you.
My Health Record
Where relevant to your care and with your consent, information may be uploaded to or accessed from My Health Record in accordance with the My Health Records Act 2012. You control your My Health Record and can set your own access controls.
Automated tools and clinical decisions
We may use online forms and software tools to help collect and organise information. These tools do not make clinical decisions. A registered practitioner reviews relevant information, and no prescription or treatment decision is made without practitioner review. Any symptoms assessment on this site is not a diagnosis.
Telehealth privacy
Telehealth consultations involve verifying your identity and confirming who is present during the consultation. Consultations are conducted in a private setting and recorded only where you are informed and consent. If telehealth is not suitable for your circumstances, your practitioner may recommend in-person assessment, GP review, specialist referral, further investigation, or no treatment.
Storage and security
We store your information securely and take reasonable steps to protect it from misuse, interference, loss, and unauthorised access or disclosure. Clinical records are retained as required by law, generally for a minimum of seven years from the date of the last entry for adult patients under NSW health records legislation, and longer where the law requires.
Data breaches
We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act. If a data breach is likely to result in serious harm, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.
Accessing and correcting your information
You can request access to the personal and health information we hold about you, and ask us to correct it if it is inaccurate. Contact us using the details above and we will respond within a reasonable period.
Complaints
If you have a privacy concern, contact us first and we will work to resolve it. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this policy from time to time. The current version is always available on this page.