Privacy Policy

1. Overview

ADHDRapidCare is committed to protecting your privacy while delivering high-quality telehealth services. This Privacy Policy explains how we collect, use, store, and share your information. We comply with the Australian Privacy Principles (APPs), the Privacy Act 1988 and all applicable Health Records and Information Privacy Acts in the jurisdictions in which we operate.

2. Information We Collect

Personal Information:

• Full name, date of birth, contact details
• Address, emergency contact information
• Government identifiers (e.g., Medicare number, healthcare card details)
• Payment and billing information
• Insurance and healthcare provider details

Medical Information:

• ADHD assessment responses
• Medical and psychiatric history
• Current medications and dosages
• Treatment goals and preferences
• Consultation notes and clinical observations
• Prescription records and medication monitoring data
• Relevant family medical history

Ongoing Monitoring Data:

• Weekly SMS check-in responses on symptoms, side effects, and medication use
• Mood, focus, and energy ratings (daily or weekly)
• Sleep patterns and quality indicators
• Side effect reports
• Treatment adherence and functional improvement metrics
• Progress tracking against treatment goals

Technical and Usage Information:

• Website navigation, usage patterns, and analytics
• Device and IP address data
• Communication logs (emails, SMS, platform messages)
• Session recordings (where applicable)
• Login activity and engagement metrics

3. How We Collect Information

Direct Collection:

• Online registration forms and questionnaires
• Video and phone consultations and clinical interactions
• Patient portal submissions
• Phone or email communication with support

Automated Collection:

• Weekly SMS monitoring responses
• Platform usage tracking
• Medication adherence reporting (manual or automated)
• Periodic clinical outcome assessments

Third-Party Sources:

• Referring healthcare providers
• Insurance verification services
• Pharmacy prescription systems

4. How We Use Your Information

For Clinical Care:

• Assessment, diagnosis, treatment, and care planning
• Medication prescribing and monitoring
• Symptom tracking and progress evaluations
• Quality assurance, clinical supervision, and record keeping
• Appointment management, billing, and insurance processing

AI Processing and Analysis:

• Risk scoring and clinical flagging from assessment responses
• Pattern analysis from clinical notes and transcripts
• Machine learning analysis of treatment effectiveness
• Predictive modelling for symptom changes
• Automated clinical report generation (practitioner-reviewed)
• SMS monitoring trend detection and alerts

Business Operations:

• Customer service and technical support
• Platform improvement and feature development
• Regulatory reporting and compliance
• Staff training and operational analytics

5. Commercial Use and Data Sharing

By using our services, you explicitly consent to the following:

Commercial Use of De-identified Data: We may license, sell, or otherwise commercially use de-identified medical and monitoring data, including:

• ADHD assessment results and diagnostic outcomes
• Weekly SMS data and trend patterns
• Treatment progress and effectiveness metrics
• Symptom improvement trajectories
• AI-generated predictive insights and trend models
• Aggregated machine learning outputs from population analysis

Permitted Applications:

• Clinical and pharmaceutical research
• AI/ML model training and development
• Population health analysis
• Academic publication and industry collaboration
• Development of medical software and devices

Recipients May Include:

• Pharmaceutical companies
• Academic institutions
• AI and digital health technology developers
• Government research bodies
• Global health analytics firms

De-identification Process: All personal identifiers (name, contact, Medicare, payment info) are permanently removed. We may retain:

• General demographics (age, gender, region)
• Clinical observations and treatment paths
• AI-generated health trend outputs

We will never sell, rent, or share any personally identifiable information for marketing purposes.

6. Data Security and Storage

Security Measures:

• AES-256 encrypted data storage
• TLS 1.3 encryption in data transmission
• Multi-factor authentication for platform access
• Firewalls, intrusion detection, and third-party penetration testing
• Secure cloud infrastructure with regular backups

Data Retention Periods:

• Clinical records: minimum 7 years per standard medical requirements
• SMS monitoring data: retained indefinitely in de-identified form for research
• Personal data: retained 2 years after service termination unless otherwise required
• Commercial data sets: retained indefinitely in anonymised form

International Data Transfers: Your information may be processed outside Australia. We ensure appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms are in place.

7. Your Privacy Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate or outdated information
• File complaints about privacy handling
• Request a summary of third-party data use (excluding de-identified datasets)

Limitations on Withdrawal of Consent: Once collected, you cannot withdraw consent for data already used or shared for de-identified commercial purposes.

8. Cookies and Tracking

We use cookies and tracking technologies for:

• Website functionality and session management
• User experience enhancement
• Fraud detection and security
• Usage analytics and site improvement
• Limited marketing optimisation (non-personalised)

We use cookies and third-party analytics tools such as Google Analytics and Meta Pixel to improve our website performance, track usage trends, and enhance user experience. These tools may collect non-personalised data such as pages visited, time spent on site, and browser type. You can manage your cookie preferences through your browser settings.

9. Third-Party Services

We may share necessary data with:

• Payment processors and banks
• Referred healthcare professionals
• Technology infrastructure providers (e.g., cloud, comms, email)
• Research partners and data processors under strict contractual terms

10. International Compliance

We aim to align with applicable international data privacy regulations in jurisdictions where we operate, such as the General Data Protection Regulation (GDPR) in the EU and the Health Insurance Portability and Accountability Act (HIPAA) in the United States, where relevant.

11. Contact & Complaints

Privacy Officer

Email: admin@adhdrapidcare.com.au

For external complaints:

Office of the Australian Information Commissioner (OAIC)
https://www.oaic.gov.au/