Privacy Policy

Last updated: 09 June 2025

Introduction

This Privacy Policy sets out how Nanda Medical Services Trust (ABN 68 798 496 694), trading as ScriptsAtHome ("ScriptsAtHome", "we", "us", or "our") manages personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We are committed to protecting your privacy and ensuring that your personal and health information is handled in a safe and responsible way.

Who We Are

ScriptsAtHome is an online telehealth provider that offers prescription services for Australian patients. We operate as Nanda Medical Services Trust, and may engage doctors, pharmacies, and other partners to deliver our services.
If you have any questions or concerns about this policy, please contact our Privacy Officer at:
Email: contactus@scriptsathome.com.au
Phone: 0432 117 433
Postal address: PO Box 606, Wentworthville NSW 2145

What This Policy Covers

This Privacy Policy explains:

• What kinds of personal and health information we collect
• How we collect and use that information
• Who we may disclose information to
• How we store and secure your information
• Your rights and choices
• How you can contact us to access or correct your information, or make a complaint

Types of Personal Information We Collect

The personal information we collect includes:

• Full name, contact details, and date of birth
• Identification documents (e.g. Medicare card)
• Health information, including medical history, current medications, symptoms, and conditions
• Consultation records, prescriptions, and pathology results
• Payment details and transaction history
• Website usage data (e.g. IP address, browser type, and access times)

How We Collect Your Information

We collect your information directly from you when:

• You complete a consultation form or request a service
• You interact with our platform (website)
• You contact our support team or provide feedback
• You make a payment or request prescription

We may also receive information from:

• Your treating doctor
• Identity verification services
• Payment processors

Legal Basis for Collecting Health Information

As a provider of health services, we are permitted to collect your health information under the Health Records and Information Privacy Act and APPs where:

• It is necessary to provide health services to you
• You have consented
• It is required or authorised by law

Use of Your Personal Information

We use your information to:

• Provide prescriptions
• Verify your identity and eligibility
• Improve and analyse our services
• Meet our legal and regulatory obligations

We do not sell your personal information

Disclosure of Your Information

We may disclose your information to:

• Registered Australian healthcare practitioners who provide medical consultations through ScriptsAtHome
• Third-party service providers (e.g., IT hosting, payment processing) who assist in delivering our services
• Regulatory or law enforcement bodies where required or authorised by law

All third-party service providers are subject to confidentiality and data protection obligations.

Overseas Disclosure

Some of our service providers may store or process personal information overseas (e.g., cloud hosting services). We take reasonable steps to ensure that your data is protected and handled in accordance with the APPs even when stored overseas.

Cookies and Analytics

Our website uses cookies, pixels, and analytics tools (such as Google Analytics) to enhance user experience and improve our services.

You can manage cookies via your browser settings. However, disabling cookies may affect website functionality.

For more information, please visit www.aboutcookies.org.

Data Security

We implement appropriate technical and organisational measures to protect your information, including:

• Encryption of health and payment data
• Secure servers and password protection
• Access controls and regular audits

Please note: no system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

Accessing and Correcting Your Information

You have the right to:

• Access your personal information
• Request corrections if you believe it is inaccurate, incomplete, or outdated

To request access or correction, contact our Privacy Officer using the details provided above. We may require verification of your identity.

Marketing and Communications

We may send you service-related messages and (with your consent) marketing communications.

You may opt out at any time by clicking the "unsubscribe" link or contacting us.

Your Privacy Rights

Under the Privacy Act, you have rights to:

• Know why your information is being collected and how it will be used
• Request access to your information
• Request correction or deletion
• Make a complaint if you believe your privacy has been breached

Making a Complaint

If you believe we have breached your privacy rights, please contact us in writing.

We will respond to your complaint within 30 days. If you are not satisfied, you may escalate your complaint to:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992

Updates to This Policy

We may update this Privacy Policy to reflect changes to our practices or legal obligations. The latest version will always be available on our website.

We encourage you to check back regularly to stay informed.