Staff Collection Notice

Who we are

Phoenix Health Co (ABN 28 685 097 044) (“Phoenix Health”, “we”, “us”) operates a healthcare coordination platform. We are bound by the Privacy Act 1988 (Cth) including the Australian Privacy Principles (APPs), and the Health Records and Information Privacy Act 2002 (NSW).

What we collect and why

We collect and use your personal information as a staff member for:

• Employment and engagement — managing your account, scheduling, and access to our platform.
• Authentication and security — verifying your identity, enforcing multi-factor authentication, and maintaining audit logs.
• Communications — sending system notifications, invitations, and operational emails.
• Legal obligations — complying with workplace laws, tax requirements, and regulatory obligations.
• Quality and safety — reviewing activity for clinical governance, incident management, and staff training.

If you do not provide your information

Providing this information is necessary for your engagement with Phoenix Health. If it is not provided, we may be unable to set up or verify your access or continue your engagement.

Your rights

Under the Privacy Act and HRIP Act, you may:

1. Access the personal information we hold about you (APP 12).
2. Request correction of information you believe is inaccurate (APP 13).
3. Request deletion of your account and associated data (subject to legal retention obligations).
4. Lodge a complaint with us or with a regulator without adverse consequence.

To exercise any of these rights, email privacy@phoenixhealthco.com.au.

Overseas disclosure

Some of our service providers are located outside Australia. In particular, staff authentication, email and collaboration are provided through Google Workspace (United States), and parts of our platform are delivered via Cloudflare and Vercel (United States). Before disclosing your information overseas, we take reasonable steps to ensure the recipient complies with the APPs or is subject to substantially similar protections (APP 8). Details are set out in our Privacy Policy.

Contact and complaints

• Privacy Officer: privacy@phoenixhealthco.com.au
• Office of the Australian Information Commissioner (OAIC): oaic.gov.au/privacy/privacy-complaints
• NSW Information and Privacy Commission (IPC): ipc.nsw.gov.au