Praxera Pty Ltd (ACN 698 878 143)

Effective date: 12 June 2026

1. About this policy

Praxera Pty Ltd (ACN 698 878 143) ("Praxera", "we", "us", "our") provides nurse practitioner clinical services and consulting. This policy explains how we collect, hold, use, disclose, secure and dispose of personal information, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable State health records legislation. As a private sector health service provider, Praxera is bound by the Privacy Act regardless of turnover.

Because of the sensitive nature of the information we handle, we treat all personal information we hold — including health information — to the higher standard that applies to sensitive information under the Privacy Act. We collect only the information reasonably necessary for our functions and activities.

2. The information we collect

The information we collect depends on how you interact with us.

Patients. Your name, date of birth, contact and demographic details, and health information — including medical and family history, symptoms, examination findings, diagnoses, medications, test and pathology results, and referrals. We may also collect payment, Medicare and health fund details, and details of other providers involved in your care.

Consulting and mentoring clients. The contact and business information of individuals at the organisations we work with.

Prospective employees, contractors and partners. Your contact details, demographic information, qualifications and experience, and information from referees.

3. How we collect your information

We collect personal information:

•    directly from you - in person, by phone, by email, through our website contact form, or through our scheduling systems;

•    from third parties where it is unreasonable or impracticable to collect it from you directly, and where lawful - for example, from your GP or other treating practitioners, pathology providers, relatives or carers, Medicare, your health fund, or, where you have agreed, your My Health Record; and from referees where you apply to work with us;

•    through our website (see section 4).

Where reasonable and practicable, we collect directly from you. If we receive information about you that we did not request, we deal with it as the Privacy Act requires.

4. Cookies and our website

Our website may use "cookies" - small files stored by your browser that help us understand how the site is used and improve your experience. They do not extract information from your device. You can set your browser to refuse cookies, though some features may not work as intended.

5. Anonymity and pseudonymity

You may deal with us anonymously or using a pseudonym, except where this is impractical or not permitted by law. If you are receiving a health service, it is generally not practical to remain anonymous, because we must keep an accurate record of your care; we may be able to discuss using a pseudonym linked confidentially to your identity. For general enquiries you may contact us anonymously, though this may limit our ability to assist you.

6. If you do not provide your information

If you do not provide the information we ask for, we may not be able to provide our clinical or consulting services, communicate with you about your care, process billing or claims, or progress an application to work with us.

7. Why we collect, use and disclose your information

We use and disclose your information to: provide nurse practitioner clinical care (including assessment, prescribing, ordering and reviewing tests, and referrals); communicate with you about appointments and follow-up; liaise with other providers involved in your care; process payments and Medicare claims; deliver and administer our consulting and mentoring services; assess applications to work with us; meet our legal, professional, regulatory and insurance obligations; and manage and improve our practice.

We disclose your information only for these purposes, for a directly related purpose you would reasonably expect, where you consent, where necessary to lessen or prevent a serious threat to life, health or safety, or where required or authorised by law.

For patients, disclosures may include to: other treating providers and their staff; pathology and diagnostic services; your nominated GP; your authorised contact or next of kin; Medicare/Services Australia and your health fund for billing; our professional indemnity insurer where necessary; and government or regulatory bodies as required by law. We take reasonable steps to ensure our service providers are bound by appropriate privacy obligations. We do not sell your personal information.

8. Sensitive and health information

Health information is sensitive information. We collect it only with your consent, which may be implied by your seeking care from us, or where otherwise permitted by law, and use and disclose it only as described in section 7.

9. How we store and protect your information

We hold information in Best Practice (Bp) for clinical records and scheduling, in Cal for consulting and mentoring scheduling, and on our website platform (Squarespace), as well as in physical form where relevant. We take reasonable steps to protect it from misuse, interference, loss, and unauthorised access, modification or disclosure, including individual password-protected user accounts, multi-factor authentication where available, encryption of data in transit and at rest by our service providers, regular automated backups, secure disposal of any physical records, and confidentiality obligations for anyone with access. Access is restricted to staff and contractors who need it to perform their duties. Our service providers maintain their own security and privacy practices.

10. Overseas disclosure

Some of our service providers store or process information outside Australia: our website platform (Squarespace) is based in the United States, and our consulting and mentoring scheduling tool (Cal) is hosted in the European Union. Our clinical records and scheduling system (Best Practice) is hosted in Australia. Where we disclose information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

11. Accessing and correcting your information

You may request access to the information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Contact us using the details below; we may require proof of identity and will respond within a reasonable period. In limited circumstances permitted by law we may decline access, and will explain why. We may charge a reasonable administrative fee for providing access, but not for making a request or a correction.

12. Retention and destruction

We retain health records for the period required by law and professional standards, generally at least 7 years from the date of last entry for adults, and until the patient turns 25 for those who were under 18 at the last entry. When information is no longer needed and we are not required to retain it, we securely destroy or de-identify it.

13. Data breaches

We comply with the Notifiable Data Breaches scheme. If we experience a data breach likely to result in serious harm, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required.

14. Complaints

If you have a concern about how we have handled your information, please contact us first using the details below; we will acknowledge it and aim to resolve it promptly. If you are not satisfied with our response, you may complain to the OAIC: oaic.gov.au | 1300 363 992.

15. Changes to this policy

We may update this policy from time to time. The current version, with its effective date, is published on our website.

16. Contact us

Praxera Pty Ltd

c/- Munros

Locked Bag 50, Perth Business Centre WA 6849

Last updated: 12 June 2026. Praxera's services are provided by Praxera Pty Ltd (ACN 698 878 143).