Legal
Privacy policy
My Digital Health is committed to protecting the privacy of the people whose health information we hold. This policy explains what we collect, why, and what rights you have.
Last updated: 16 May 2026
About this policy
My Digital Health Pty Ltd ("we", "us", "our") operates four clinical brands: My Telehealth Clinic, Script2u, My Clinic and My Weight Loss Clinic. This policy applies to personal information we collect through our corporate website. Each operating brand also publishes its own privacy notice covering clinical care and prescription services.
The laws we follow
We handle personal and health information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Notifiable Data Breaches scheme, and applicable state and territory health records legislation.
What we collect
Through this corporate website we may collect:
- Contact details you provide (name, email, phone) when you submit an enquiry, apply for a role, or request media engagement.
- Basic site analytics (page views, country, device type) via privacy-friendly Cloudflare Web Analytics. We do not use cookies for tracking.
- Information needed to respond to your enquiry.
Clinical and health information is collected by the relevant operating brand under its own privacy notice when you become a patient.
How we use your information
- To respond to enquiries, partnership requests and media questions.
- To assess applications for employment with the group.
- To meet legal, regulatory and accreditation obligations.
- To improve our website and services in aggregate, non-identifying form.
Where your information is held
All personal information collected through this site is stored in Australia. We do not transfer personal information to overseas recipients for clinical data. Where a service provider supports our infrastructure (for example, our static site hosting), we choose providers with strong data protection and require contractual safeguards.
Who we share information with
We only share personal information where necessary:
- With the relevant operating brand if your enquiry concerns clinical care.
- With service providers under contract who help us run the website and respond to enquiries.
- Where required or permitted by law, including notifying the Office of the Australian Information Commissioner of eligible data breaches.
Your rights
- Access: You can request a copy of the personal information we hold about you.
- Correction: You can ask us to correct information that is inaccurate or out of date.
- Complaint: You can complain to us first, and to the Office of the Australian Information Commissioner (oaic.gov.au (opens in new tab)) if you are dissatisfied with our response.
Data retention
We retain personal information only as long as needed for the purpose it was collected, or as required by law. Enquiry information is retained for up to 24 months. Clinical records are governed by the operating brand's retention schedule and applicable health records legislation.
Security
We use industry-standard security measures including TLS encryption in transit, access controls, and regular audits. No system is perfect; if we become aware of an eligible data breach we will notify affected individuals and the OAIC as required.
Contact us
To exercise your rights or to ask a question about this policy, contact our Privacy Officer at privacy@mydigitalhealth.com.au.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated through this page and, where appropriate, by direct notice.