Privacy policy

This privacy policy applies to the telehealth general practice of Dr Jonathan Wee (“the practice”, “we”, “us”), operating at drjonathanwee.com from Suite No 64, Level 23, Collins Square, Tower Five, 727 Collins Street, Melbourne VIC 3008. We are committed to protecting your privacy and handling your personal information openly and transparently.

We are bound by the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and — because we handle health information — the additional protections that apply to health service providers, including the Health Records Act 2001 (Vic) where applicable.

We collect personal information reasonably necessary to provide you with safe care:

• Identity and contact details — name, date of birth, address, email address and mobile number (used to verify your identity and send appointment communications).
• Medicare details — where you provide them, to support Medicare rebates.
• Health information— the clinical history, symptoms, assessments, management plans, prescriptions, referrals and test results generated in the course of your care. Health information is “sensitive information” under the Privacy Act and receives a higher level of protection.
• Payment records — payments are processed by our payment provider; we do not store your full card number.
• Technical data — basic logs needed to run the service securely.

We collect, hold, use and disclose your information to:

• provide telehealth consultations and continuity of care;
• manage bookings, payments, rebates, reminders and follow-up;
• maintain your medical record in our clinical record system (MediRecords);
• communicate with other treating providers when you ask us to (e.g. referrals);
• meet our legal and professional obligations as a medical practice.

We do not sell your personal information, and we do not use health information for marketing.

Consultations are delivered by secure video. Video consultations are not recorded. Written materials generated during a consult — such as your management plan, request forms and referrals — are stored in your record so you and Dr Wee can refer back to them.

Communications sent to you (email and SMS) are kept free of sensitive clinical detail wherever possible — we send secure links rather than attaching clinical documents.

Your information is stored on infrastructure located in Sydney, Australia (database and file storage in the Australian AWS region, ap-southeast-2). Patient files are encrypted, access is role-restricted and logged, and clinical and payment records carry an audit trail.

Your clinical record is also held in MediRecords, an Australian clinical record platform. Where a supporting service processes limited data overseas (for example, email delivery), we take reasonable steps to ensure it is handled consistently with the APPs.

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us at hello@drjonathanwee.com or on (03) 9103 1467. We will respond within a reasonable period; a fee may apply to cover the cost of providing copies of records, but never for making the request itself.

If you believe we have breached the APPs, please contact us first at hello@drjonathanwee.com — we take complaints seriously and will investigate and respond. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

We may update this policy from time to time. The current version will always be published on this page with its last-updated date.