Alevia Medical Weight Loss - Privacy Policy
About this policy
Alevie Medical Weight Loss Pty Ltd ACN 729 916 159 (“us”, “we”, or “our”) recognises the importance of your privacy and respects your right to control how your personal information is collected and used.
We are an APP Entity as defined in the Privacy Act 1988 (Cth) (the “Act”). This privacy policy is aligned with the Australian Privacy Principles as set out in the Privacy Act 1988 (Cth) (Privacy Act) and describes the way that we may collect, hold and disclose personal information. This Privacy Policy applies to our website, www.alevia.com.au (the “Site”) which is operated by us, and to the products and services provided by us.
In this policy “Personal Information” means any information that may identify you, or by which your identity might be reasonably determined. The information you provide us may include, amongst other things, your name, address, email address, and phone number.
“Sensitive Information” means any information about an individual’s racial or ethnic origin, political opinions, memberships of a political organisation, religious belief or affiliation, philosophical belief, membership of a professional or trade association, membership of a trade union, sexual preference or practices, criminal record or health information.
Collection
To provide our services to you, we may collect Personal Information, such as your contact details, including your name, email address and contact phone number, your business or company name; your payment and billing information, which we use to bill you for the Services and to process your payments, including credit card details. We may also collect details of conversations we have had without or any other information relevant to us.
We also collect Sensitive Information about you, such as medical reports, referrals, medication, health history and other important health information where you consent, and such information is reasonably necessary to provide our services to you.
We automatically collect through our Site and Services, information that is often not personally identifiable, such as the website from which visitors came to our Site, IP address, browser type and other information relating to the device through which they access the Site. We may combine this information with the Personal Information we have collected about Customers.
Use & Disclosure
We are committed to protecting your privacy. The information you provide will be used only for purposes directly related to your care, the safe and efficient operation of this practice, and legal compliance. Specifically, we may use your information for the following purposes:
1. Administrative and Financial Purposes
1. To manage appointments, reminders, recalls, and service delivery (via SMS, secure email, phone, or letter)
2. To comply with billing and reimbursement requirements, including Medicare and Health Insurance Commission regulations
3. To fulfill our administrative obligations such as accreditation, insurance, and audit processes
2. Delivery of Healthcare Services
1. Your treating doctor(s) will have access to your full medical file
2. Delegated healthcare providers (e.g., nurses, physiotherapists) will access only those parts of the record strictly necessary for their role (e.g., medication lists, relevant history, or care instructions)
3. Administrative staff will access only contact details, appointment schedules, and billing information
3. Information Sharing with Other Healthcare Providers
1. Information may be shared with external specialists, diagnostic services, and allied health professionals for the purpose of continuity of care (e.g. through referral letters or receiving test results)
2. This sharing is limited to what is necessary for your treatment
4. Training and Supervision
1. In certain cases, your information may be accessed by supervised medical students, registrars, or locums involved in your care and training
2. If you do not wish for your records to be accessed for teaching purposes, please inform us and we will record your preference
5. Research and Quality Assurance
1. Your medical data may be used in de-identified (anonymous) form for research, audit, and quality improvement activities that aim to enhance individual and community healthcare. These activities are conducted in accordance with privacy legislation and ethical standards, ensuring that no personally identifiable information is disclosed.
You have the right to opt out of any use of your data for these secondary purposes. If you wish to opt out, please let us know, and your preference will be recorded in your file without any impact on your care.
6. Your Right to Restrict Use or Disclosure
1. If you do not wish certain parts of your medical information to be shared or used for specific purposes, you may request this at any time. A clinician will discuss any possible impact on your care with you
2. Removal of certain information (e.g., allergies, medication history) from your record may affect your treatment; this will be explained prior to approval of any restriction
Overseas Disclosure of Personal Information
We may disclose your personal health information to administrative support services located in the Philippines for the purpose of practice management, appointment scheduling, billing, and other administrative functions necessary for your healthcare delivery.
This disclosure is made in accordance with Australian Privacy Principle 8.1, as we reasonably believe that the overseas recipient is subject to a law or binding scheme that provides substantially similar protection for personal information, or you have expressly consented to the disclosure after being informed of the risks.
We have implemented appropriate safeguards including:
- Contractual agreements requiring our overseas service providers to protect your information in accordance with Australian privacy standards
- Security measures to protect data during transmission and storage including a static IP address, 2 factor authentication
- Regular auditing of our overseas service providers’ privacy and security practices
- Staff training on Australian privacy requirements
You have the right to request that your personal information not be disclosed overseas, though this may affect our ability to provide certain administrative services efficiently. If you have concerns about overseas disclosure of your information, please contact our Privacy Officer.
Access & Accuracy
You can access and/or correct information we hold about you at any time by contacting us at co*****@********om.au. We encourage you to contact us to keep your Personal Information up to date.
We will respond to your request for Personal Information within a reasonable time. We reserve the right to charge an administration fee to cover the costs of responding to your request, for example, where Personal Information is held in security.
If required by law or where the information may relate to existing or anticipated legal proceedings, we may deny your request for access to your information. We will respond to your request, setting out the reasons for our refusal in writing.
Storage & Security
We will take reasonable steps to protect your personal information from misuse, loss, unauthorised access and modification or disclosure. We use commercially reasonable physical, technical and administrative
measures to protect Personal Information that we hold, including, where appropriate, password protection, encryption, and SSL to protect our Site.
Despite taking appropriate measure to protect personal information used and collected by us, please be aware that no data security measures can guarantee 100% security all of the time. We cannot guarantee the security of any information transmitted to us via the internet and such transmission is at your risk.
If we no longer require the use of your personal information, we will take reasonable steps to destroy or permanently de-identify it.
Personal information may be stored electronically through third party data centres, which may be located overseas, or in physical storage at our premises or third party secure storage facilities.
You are solely responsible for the maintaining the secrecy of any passwords and other account information pertaining to our Platform, apps or services.
Data breach notification scheme
If we have reason to suspect a data breach has occurred, we will undertake an assessment in accordance with the Notifiable Data Breach Scheme. If we determine there has been an eligible data breach, we will notify you as soon as reasonably practicable.
If the breach relates to the My Health Records Act, we may disclose your personal information to the My Health Records System Operator under s 73A of that Act.
Identifiers
An identifier is a unique number assigned to an individual to identify them. Identifiers include Medicare Numbers and Tax File numbers. We will not adopt as our own any identifier of you, or use or disclose an identifier of you which has been assigned by a government agency, unless permitted under the Act.
Career Applications
Employment applications and resumes collected by us are safely and securely stored and only used for the purposes for which it was collected.
Cookies, web beacons and analytics
When you interact with our Site, we strive to make your experience easy and meaningful. We, or our third party service providers, may use cookies, web beacons (clear GIFs, web bugs) and similar technologies to track site visitor activity and collect site data. We may combine this data with the Personal Information we have collected from Customers. Examples of information that we may collect include technical information such as your computer’s IP address and your browser type, an information about your visit such as the products you viewed or searched for, the country you are in, what you clicked on and what links you visited to get to or from our site. If we identify you with this information, any use or disclosure of that information will be in accordance with this Privacy Policy.
Third-party websites
At times, our Site may contain links to other, third-party websites. Any access to and use of such linked websites is not governed by this Privacy Policy, but, instead, is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.
Marketing emails
We may send you direct marketing emails and information about products and services that we consider may be of interest to you. These communications will only be sent via email and in accordance with applicable marketing laws, such as the Spam Act 2004 (Cth) as you consented to upon registering for our Services. If, at any time, you would like to stop receiving these promotional emails, you may follow the opt-out instructions contained in any such email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving emails or promotions from us, we still may send you email about your account, your account or any Services you have requested or received from us, or for other customer service purposes. We do not provide your personal information to other organizations for the purposes of direct marketing.
If you receive communications from us that you believe have been sent to you other than in accordance with this Privacy Policy, or in breach of any law, please contact us using the details provided below.
Changes to this policy
We may change this Privacy Policy from time to time. Any updated versions of this Privacy Policy will be posted on our Site – you should check periodically to review our current Privacy Policy, which is effective as of the effective date listed above. Your continued use of any of our Site and Services constitutes your acceptance and understanding of the Privacy Policy as in effect at the time of your use. If we make any changes to this Privacy Policy that materially affect our practices with regard to the Personal Information we have previously collected from you, we will endeavour to provide you with notice in advance of such change by highlighting the change on the Site, or where practical, by emailing Customers. This policy current as of 2nd June 2025.
Complaints and Enquiries
If you have any questions or complaints regarding privacy, or if at any time you believe we may have wrongfully disclosed your Personal Information or breached our privacy policy, please contact us on 03 9344 1322 or lodge your complaint in writing to:
Dr Catherine Bacus
Alevia Medical Weight Loss
374 Mountain Hwy
Wantirna 3152
If you are not satisfied with our response you are entitled to contact the Federal Privacy Commissioner, by phoning 1300 363 992 or writing to the Director of Complaints, Office of the Federal Privacy Commissions, GPO Box 5218, Sydney NSW 1042.