Privacy Policy

Experteeth Dental Group Pty Ltd (ABN 00 000 000 000) and its associated entities (collectively, "Experteeth", "we", "us" or "our") are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in Schedule 1 of that Act.

This Privacy Policy explains how we collect, use, disclose, store and handle your personal information, including sensitive information such as health records. It applies to all Experteeth clinics across Australia and to our website at www.experteeth.com.au.

By using our services or providing your personal information to us, you consent to its collection and use as described in this Policy. If you do not agree with this Policy, please do not use our services.

We collect personal information that is reasonably necessary for us to provide dental and healthcare services. The types of information we may collect include:

Identity information: full name, date of birth, gender, Medicare number, private health fund membership details and DVA number (where applicable).

Contact information: home address, phone number, email address and emergency contact details.

Health information: medical and dental history, medications, allergies, clinical notes, treatment records, radiographs (X-rays), photographs, referral letters and pathology results.

Financial information: private health fund details, payment card information (processed securely via third-party payment processors), outstanding account details and information relevant to processing your health fund claim.

Employment and professional information: if you are a job applicant, we may collect your resume, qualifications, registration details and referee contact information.

Website usage data: IP address, browser type, pages visited, time spent on pages and other analytics data collected via cookies and similar tracking technologies.

We collect personal information in a number of ways, including:

Directly from you when you complete a patient registration or medical history form (in clinic or online), book an appointment via our website or by telephone, communicate with our staff in person, by email or by telephone, or submit an enquiry or job application.

From third parties including referring practitioners (dentists, specialists, GPs), your private health insurer, Medicare or the Department of Veterans' Affairs, other treating healthcare providers, or persons acting on your behalf with your authority.

Automatically through your use of our website, including via cookies and analytics tools such as Google Analytics.

Where you provide us with personal information about another individual (for example, an emergency contact or a family member), you confirm that you have obtained their consent to provide that information to us.

Health information is classified as sensitive information under the Privacy Act 1988 (Cth). We collect and handle your health information only where:

You have consented (expressly or implicitly by seeking treatment); it is necessary to provide you with healthcare services; it is required or authorised by or under an Australian law; or another exception under APP 3 applies.

We take additional care with sensitive information and implement appropriate technical, physical and administrative safeguards to protect it from misuse, loss, unauthorised access, modification or disclosure.

We use your personal information for the primary purpose for which it was collected and for directly related secondary purposes, including:

Providing dental and healthcare services to you, including diagnosis, treatment planning and clinical record-keeping.

Communicating with you about your appointments, treatments, account and any recalls or preventive care reminders.

Processing your payments and health fund claims.

Complying with our legal and professional obligations, including obligations under the Health Records legislation of the relevant State or Territory, the Dental Board of Australia's guidelines, and mandatory reporting obligations.

Improving and administering our business operations, including quality assurance, staff training, clinical audits and accreditation.

If you have consented, sending you marketing communications about our services or special offers. You may opt out of marketing communications at any time by contacting us or using the unsubscribe link in our emails.

Processing and assessing your employment application.

We will not use your health information for direct marketing purposes without your express consent.

We may disclose your personal information to:

Other treating practitioners involved in your care, including specialists, GPs and allied health professionals, where this is necessary to provide you with continuity of care.

Private health insurers, Medicare Australia or the Department of Veterans' Affairs to facilitate payment claims.

Third-party service providers who assist us in operating our business, including IT and software providers (including our practice management system providers), cloud storage providers, billing and payment processors, and communication platforms. These providers are required to handle your information only for the purpose of providing services to us and are bound by appropriate confidentiality and data security obligations.

Professional advisors, including lawyers, accountants and insurers, where necessary.

Government and regulatory bodies, including the Dental Board of Australia, AHPRA, public health authorities, courts and law enforcement agencies, where required or authorised by law.

Other entities within the Experteeth group of companies for administrative and operational purposes.

We will not sell, rent or trade your personal information to third parties for their own marketing purposes.

Some of our third-party service providers may be located overseas or may store data on servers located outside Australia, including in the United States, the European Union and Singapore. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information.

By using our services, you consent to the potential disclosure of your information to overseas recipients in connection with the operation of our business systems. We will only transfer your personal information overseas in circumstances where we are satisfied that appropriate data protection measures are in place.

We store personal information in electronic and paper-based records. We take all reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure. Our security measures include:

Restricted access controls and role-based permissions within our practice management systems.

Encryption of data in transit and at rest.

Regular security assessments and software updates.

Staff training on privacy obligations and information security practices.

Physical security measures at our clinical premises.

Your health records are retained for the periods required under applicable State and Territory health records legislation, the Dental Board of Australia's guidelines and any other applicable laws. Records relating to children will be retained until the patient is at least 25 years of age or for 7 years from the date of the last entry, whichever is later.

Under the Privacy Act 1988 (Cth), you have the right to request access to the personal information we hold about you, and to request that we correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

To make an access or correction request, please contact our Privacy Officer using the contact details set out in Section 13 below. We will respond to your request within 30 days. In some circumstances, we may be required or permitted by law to deny access or to impose a reasonable charge for providing access.

If we refuse to provide access or correct the information, we will give you written reasons and information about how to make a complaint.

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse site traffic and support our marketing activities. Cookies are small text files placed on your device that help us recognise you on return visits and tailor content to your interests.

Types of cookies we use include essential cookies (required for the website to function), analytics cookies (including Google Analytics) and marketing cookies (including Google Ads remarketing). You may configure your browser to refuse cookies or to alert you when cookies are being sent. However, disabling cookies may affect the functionality of our website.

Our website does not respond to Do Not Track signals at this time. For information about how Google uses data collected via Google Analytics, visit policies.google.com.

We provide dental services to patients of all ages, including children. Where we collect personal information about a child under 18 years of age, we generally do so with the consent of a parent or guardian. Parents and guardians may request access to and correction of their child's records, subject to the applicable laws governing patient confidentiality and the evolving capacity of the child to make their own healthcare decisions.

Our website is not directed at children under 15 years of age and we do not knowingly collect personal information from children through our website.

If you believe that we have breached the APPs or your other privacy rights, we encourage you to contact our Privacy Officer in the first instance so that we can attempt to resolve your concern promptly.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992. The OAIC may investigate your complaint and make a determination about whether we have breached the Privacy Act.

Depending on your State or Territory, you may also have rights under applicable State health records legislation, and may be able to lodge a complaint with the relevant State health complaints body.

If you have any questions, concerns or requests regarding this Privacy Policy or the way we handle your personal information, please contact our Privacy Officer:

Privacy Officer — Experteeth Dental Group Email: privacy@experteeth.com.au Phone: 1300 660 103 Postal Address: Experteeth Corporate Office, Australia

We will endeavour to respond to all enquiries within 30 days.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable laws. The current version will always be published on our website with the effective date. We encourage you to review this Policy periodically.

Continued use of our services after any update constitutes your acceptance of the revised Policy.