Privacy Policy

1. Introduction

CastHealth ("we," "us," or "our") is committed to protecting the privacy of personal and health information. This Privacy Policy explains how we collect, use, and disclose information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect information necessary to facilitate the "referral pulse" between General Practices and patients. This includes:

• For Clinics: Practice name, staff contact details, and system usage data.
• For Patients: Name, mobile number, and referral status (e.g., "Referral Sent").
• Note: We do not store clinical notes or full medical histories. We only process the minimum data required to trigger automated follow-up SMS.

3. How We Use Information

Information is used strictly for:

• Automating patient follow-up notifications via SMS.
• Providing clinics with a dashboard to track referral completion.
• Ensuring compliance with Australian healthcare standards.

4. Data Sovereignty & Security

• Australian Hosting: All personal and health-related data is stored on secure servers located physically within Australia.
• Encryption: Data is encrypted using AES-256 at rest and TLS 1.2+ in transit.
• Access Control: We implement strict role-based access to ensure only authorised personnel can interact with the system.

5. Disclosure of Information

CastHealth does not sell or rent personal information. We only disclose information to:

• The patient’s designated GP clinic.
• Our secure SMS gateway provider (strictly for the purpose of sending the notification).
• Regulatory bodies if required by Australian law.

6. Access and Correction

Under the APPs, individuals have the right to access and correct the personal information we hold. Requests can be made by contacting our Privacy Officer at hello@casthealth.com.au.

7. Complaints

If you have a concern about how your privacy has been handled, please contact us. If we cannot resolve your complaint, you may contact the Office of the Australian Information Commissioner (OAIC).

‍

‍