Last updated: 16 August 2026
My ADHD GP (myadhdgp.com.au) is operated by Salubris Health Pty Ltd, which also operates Rosedale Medical Practice in West Pennant Hills, NSW. This policy explains what personal and health information we collect, why we collect it, who we share it with, and what you can do about it.
It covers two different things, and the difference matters:
- This website. Anyone who reads myadhdgp.com.au, whether or not they ever become a patient.
- Clinical care. Information collected when you book, attend a consultation, or receive treatment from our clinicians.
Our Privacy Officer is Dr Jaspreet Saini, contactable at reception@rosedalemedicalpractice.com.au or on (02) 9680 9644.
The law we work under
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, because we are a health service provider in New South Wales, by the Health Records and Information Privacy Act 2002 (NSW) and its Health Privacy Principles. Our participation in the My Health Record system is governed by the My Health Records Act 2012 (Cth).
Health information is treated as sensitive information under the Privacy Act. It carries stricter handling obligations than ordinary personal information, and we treat it accordingly. Health information is broader than your medical file: it includes information about a health service you have received, or have asked to receive.
Information we collect
Health information
If you become a patient, we collect the information needed to provide safe clinical care. For ADHD care this typically includes your ADHD diagnosis report and specialist letters, your medical and developmental history, current and past medications, relevant physical observations such as blood pressure and heart rate, questionnaire and assessment results, and notes from your consultations.
We also collect your Medicare number, any concession or DVA details, and your MyMedicare registration status where relevant, because these determine what rebates you are eligible for.
Booking and payment
Appointments are booked through HotDoc, a third-party booking platform. When you book, HotDoc collects your name, contact details, date of birth, appointment reason and payment details, and passes the booking information to us. Payment card details are handled by HotDoc and its payment providers; we do not receive or store your full card number. HotDoc handles your information under its own privacy policy, which we recommend you read before booking.
Enquiries and correspondence
If you contact us with an enquiry, we collect your name, contact details and whatever you choose to tell us, so that we can respond and keep a record of the conversation. Please do not send detailed health information by email, because email is not a secure channel. If you need to send clinical documents, ask us and we will tell you the safest way.
Website visitors
You can read this website without telling us who you are. We do not ask website readers for health information.
Like most websites, ours collects some technical information automatically. The services currently operating on this site are:
- Google Analytics, which records pages viewed, approximate location, device and browser type, and how you arrived at the site. This is used to understand which information people find useful.
- Jetpack and WordPress.com (Automattic), which host the site and provide traffic statistics and security protection. Standard server logs, including IP addresses, are generated as part of hosting.
- Akismet, which screens submitted comments for spam.
- Crowdsignal, where a form or survey is used on a page.
- HotDoc, whose booking widget is embedded on our booking page and may set its own cookies when displayed.
We do not sell your information to anyone.
Our ADHD assessment waitlist
Before our adult ADHD assessments opened for booking, you could join a waitlist to be told when appointments became available. If you joined, we hold your name, your contact details, and the fact that you asked to be contacted about an ADHD assessment.
That last part matters. Because it records a health service you asked to receive, it is health information under the Privacy Act, not merely a mailing list entry, and we handle it with the same care as any other health information we hold.
We collected it with your consent, when you asked to be notified, and we use it only to tell you about assessment availability and related practice communications. It is held separately from your clinical record.
You can ask to be taken off the waitlist at any time, and we will remove your details. Reply to any message you receive from us, or contact our Privacy Officer.
We will not use your health information to send you marketing without your express consent. Every marketing message includes a way to unsubscribe. Opting out of marketing does not affect messages about your own care, such as appointment reminders, recalls and results notifications.
My Health Record
We participate in the My Health Record system. Where it is relevant to your care and you have not restricted access, we may view information that other healthcare providers have uploaded, and upload information from your care with us, such as shared health summaries, event summaries and prescription records.
You remain in control of your My Health Record. You can set access controls on who can see it, review who has accessed it, remove documents, or cancel the record entirely. Tell your clinician if you would prefer we did not upload information from a particular consultation. To manage your record, visit myhealthrecord.gov.au or call the My Health Record helpline on 1800 723 471.
Who we share your information with
We disclose health information only where it is necessary for your care, where you have consented, or where the law requires it. In practice this means:
- Your usual GP. We write back to your regular GP after your consultation so your care stays joined up. If you do not want this, tell your clinician before your appointment.
- Your specialist. Where a psychiatrist or paediatrician is involved in your ADHD care, we correspond with them about your treatment.
- NSW Health. Prescribing Schedule 8 medication requires an authority from NSW Health Pharmaceutical Services, and applying for it involves providing your clinical details.
- Pathology and imaging providers, where tests are clinically indicated.
- Pharmacies, for dispensing prescriptions.
- Medicare and health funds, for claiming and rebate purposes.
- My Health Record, as described above.
- Others you authorise, such as a family member, carer, employer or insurer, where you have given consent.
We may also disclose information where we are legally compelled to, or where there is a serious and imminent threat to someone’s life, health or safety.
Information held or processed overseas
Your clinical records are held in Australia, in Australian-hosted practice management software.
Some of the other services we use are operated by companies based outside Australia, principally in the United States. This includes our website analytics and hosting. As a result, information about how you use this website may be stored or processed overseas.
Where we disclose personal or health information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
Cookies and opting out
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google’s browser add-on. The site will still work. Blocking cookies does not affect your ability to book an appointment by phone.
How we keep it safe
Clinical records are held in access-controlled, Australian-hosted practice management software, and access is limited to staff who need it to do their job. Staff are bound by confidentiality obligations, and clinicians by their professional obligations under the National Law.
If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme. Breaches involving My Health Record are also notifiable to the Australian Digital Health Agency.
How long we keep it
We are required to retain health records for a minimum period set by law. For an adult, that is at least seven years from the date of the last entry in the record. For a patient who was under 18 at the time of the last entry, the record must be kept until they turn 25.
Information we no longer need, and are not required to keep, is destroyed or de-identified. Waitlist details are kept only while the waitlist serves a purpose, and are removed on request at any time.
Accessing and correcting your information
You have the right to ask for a copy of the health information we hold about you, and to ask us to correct it if it is wrong, out of date or incomplete. Write to our Privacy Officer at reception@rosedalemedicalpractice.com.au, and we will normally respond within 30 days.
There are limited circumstances in which access can be refused, for example where providing it would pose a serious threat to someone’s life or health, or would unreasonably affect another person’s privacy. If we refuse, we will tell you why in writing and explain how to have that decision reviewed. An administrative fee may apply to retrieving and copying records.
Complaints
If you think we have mishandled your personal or health information, please raise it with our Privacy Officer, Dr Jaspreet Saini, at reception@rosedalemedicalpractice.com.au. We take privacy complaints seriously and will investigate and respond to you.
If you are not satisfied with our response, you can escalate to:
- Office of the Australian Information Commissioner (OAIC) — 1300 363 992, oaic.gov.au
- NSW Information and Privacy Commission — 1800 472 679, ipc.nsw.gov.au
- NSW Health Care Complaints Commission (HCCC) — 1800 043 159, hccc.nsw.gov.au, for complaints about clinical care
Changes to this policy
We review this policy periodically and may update it as our services, systems or legal obligations change. The version published here is the current one and supersedes all earlier versions.
Contact
Privacy Officer: Dr Jaspreet Saini
reception@rosedalemedicalpractice.com.au
Phone: (02) 9680 9644
Rosedale Medical Practice, West Pennant Hills NSW
This privacy policy was last reviewed on 16 August 2026 and is subject to change.