Collection Notice

Who we are

Phoenix Health Co (ABN 28 685 097 044) (“Phoenix Health”, “we”, “us”) operates a healthcare coordination platform. We are bound by the Privacy Act 1988 (Cth) including the Australian Privacy Principles (APPs), and the Health Records and Information Privacy Act 2002 (NSW) including the Health Privacy Principles (HPPs).

What we collect and why

We collect and use your health information for:

• Treatment coordination — sharing information with your treating clinicians for the provision, coordination, or management of your healthcare (HPP 10(1)(a)).
• Billing — processing payments and verifying health fund or Medicare eligibility.
• Quality and safety — quality assessment, clinical audits, and training of our workforce.
• As required or authorised by law — court orders, mandatory notifications, public-health reporting (APP 6.2(b)).
• With your express consent — for any other purpose, including AI-assisted health-data extraction. We do not sell your health information.

Your rights

Under the Privacy Act and HRIP Act, you may:

1. Access your health information held by us (APP 12 / HPP 7).
2. Request correction of information you believe is inaccurate (APP 13 / HPP 8).
3. Request that we stop using or disclosing your information in certain ways.
4. Withdraw consent for AI processing at any time.
5. Request deletion of your account and associated data.
6. Lodge a complaint with us or with a regulator without any adverse consequence to your care.

To exercise any of these rights, email privacy@phoenixhealthco.com or use the Privacy Hub in your account settings.

Our obligations

We are required by law to:

• Take reasonable steps to protect your health information from misuse, interference, and loss (APP 11).
• Collect only the information reasonably necessary for our functions (APP 3).
• Notify you and the OAIC of eligible data breaches likely to cause serious harm (NDB scheme, Part IIIC).
• Abide by the terms of this Notice and our Privacy Policy.

Overseas disclosure

Some of our service providers are located outside Australia (United States). Before disclosing your information overseas, we take reasonable steps to ensure the recipient complies with the APPs or is subject to substantially similar protections (APP 8). Details are set out in our Privacy Policy.

Contact and complaints

• Privacy Officer: privacy@phoenixhealthco.com
• Office of the Australian Information Commissioner (OAIC): oaic.gov.au/privacy/privacy-complaints
• NSW Information and Privacy Commission (IPC): ipc.nsw.gov.au

Changes to this Notice

We may revise this Notice from time to time. Material changes will be posted at https://phoenixhealthco.com/privacy/notice and notified to active users by email.