Skip to content

Privacy Policy

Last updated: 2 June 2026

Baseline Medical Pty Ltd is committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your Personal Information.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information.

A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at www.oaic.gov.au.

Who we are

This Privacy Policy is issued by Baseline Medical Pty Ltd (ABN 55 661 568 350), trading as Baseline Medical. Our registered address is PO Box TBC, Sydney NSW 2000, Australia. We provide telehealth recovery monitoring and consultations for people recovering after surgery or injury. Because we provide health services, we handle health information, which is a type of sensitive information under the Privacy Act.

What is Personal Information and why do we collect it?

Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect include your name, address, email address, phone number and date of birth.

This Personal Information is obtained in many ways including by telephone, by email, via our website, via our intake and consultation forms, and from third parties such as your treating doctors where you consent. We do not guarantee the website links or privacy practices of authorised third parties.

We collect your Personal Information for the primary purpose of providing recovery monitoring and consultation services to you, and related purposes such as scheduling, clinical record-keeping, billing and responding to your enquiries. We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure.

When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it.

Health information we collect

Health information is one of the most sensitive types of information we hold. The health information we collect and create can include your medical history, current symptoms and concerns, details of your surgery or injury, clinical notes from your consultations, recovery monitoring records, medications, referrals, care plans, the dates and metadata of your consultations, correspondence with your other treating practitioners, and any Medicare or private health insurance claim details. Health information is not limited to your name and contact details.

Sensitive Information

Sensitive information is defined in the Privacy Act to include information or an opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive information will be used by us only:

  • For the primary purpose for which it was obtained
  • For a secondary purpose that is directly related to the primary purpose
  • With your consent; or where required or authorised by law

Dealing with us anonymously

Due to the nature of the health services we provide, it is generally impracticable for us to deal with individuals who have not identified themselves. Accurate identification is required to ensure the safety and continuity of clinical care, to comply with our legal and professional obligations under applicable health legislation, and to meet the requirements of Medicare and private health insurance billing.

Unsolicited information

From time to time, we may receive personal or health information that we did not solicit. Where we receive unsolicited personal information, we will promptly assess whether that information is of a kind we could have collected under our standard collection practices. If we determine that we could not have collected it, and it is not contained in a Commonwealth record, we will destroy or de-identify it where it is lawful and reasonable to do so.

Third Parties

Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we may be provided with information by third parties, such as a treating doctor or a family member. In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.

Disclosure of Personal Information

Your Personal Information may be disclosed in a number of circumstances including the following:

  • Third parties where you consent to the use or disclosure
  • To your treating practitioners, such as your surgeon, GP, physio or another doctor, where you consent, so that your care can be coordinated
  • To service providers who help us run our practice, such as secure clinical software, scheduling, payment and IT providers, under confidentiality arrangements
  • Where required or authorised by law

Telehealth and your privacy

We provide care by real-time video and phone consultation. Before a consultation, we verify your identity to make sure we are speaking with the right person. At the start of the consultation, your clinician will confirm who else is present with you and who is present with the clinician. Please take your consultation in a private space where you are comfortable to speak. If your clinician decides telehealth is not suitable for your situation, they may recommend an in-person review, a referral to another doctor, or another option.

Automated tools and artificial intelligence

We may use software tools, which can include automated or artificial intelligence features, to help with tasks such as scheduling, transcription or administrative support. These tools support our clinician and do not make clinical decisions on their own. A clinician reviews relevant information, and no prescribing decision is made without review by a registered medical practitioner.

Government and healthcare identifiers

We may collect your Medicare number, your private health insurance details and, where relevant, your Individual Healthcare Identifier (IHI). We use these identifiers only for the purposes permitted by law, such as billing, claiming and identifying you correctly for your care. We do not adopt a government identifier as our own way of identifying you.

My Health Record

We may access or contribute to your My Health Record where you have one and where it is permitted under the My Health Records Act 2012 (Cth). You can control your My Health Record settings, including who can access it, through the My Health Record system. You can ask us not to upload information to your My Health Record.

Where we store your information

Your personal and health information is held in secure systems on servers located in Australia. Some of the providers we use to store or process information may hold data in other locations. Where that happens, we handle it as set out in "Disclosure of information overseas" below.

Disclosure of information overseas

Some of the service providers we use to store or process information, such as cloud or software providers, may hold or process data outside Australia. Where this happens, we take reasonable steps to ensure those providers handle your information consistently with the Australian Privacy Principles. Where we coordinate with a treating practitioner located overseas, for example after surgery overseas, we will only disclose your information to them with your consent. We do not currently transfer personal information outside Australia other than as described above.

Direct marketing

We will only send you marketing communications, such as updates about our services, where you have given us your consent. Every marketing message includes a way to opt out. You can unsubscribe at any time by using the opt-out link or by contacting us. We do not target marketing based on your health information.

Cookies and website tracking

Our website may use cookies and similar tracking technologies to help the site work and to understand how visitors use it. Because browsing a health website can reveal sensitive interests, we treat this data carefully. You can control or block cookies through your browser settings, although some parts of the site may not work as well if you do. Our website is governed by this Privacy Policy.

Notifiable Data Breaches

We take steps to protect your information from a data breach. If a data breach occurs that is likely to result in serious harm to you, we will comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act. This means we will notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, and within the timeframes required by law, and tell you the steps you can take to protect yourself.

Security of Personal Information

Your Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorised access, modification or disclosure.

We are required to keep clinical records for the period set by the law that applies in NSW. Under the Health Records and Information Privacy Act 2002 (NSW), health records for an adult are generally kept for at least 7 years from the date of the last entry in the record. For a person under the age of 18, the record is generally kept until that person turns 25. When information is no longer needed and we are not required to keep it, we will take reasonable steps to destroy or permanently de-identify it.

Access to your Personal Information

You may access the Personal Information we hold about you and to update and/or correct it, subject to certain exceptions. If you wish to access your Personal Information, please contact us in writing.

Baseline Medical Pty Ltd will not charge any fee for your access request, but may charge an administrative fee for providing a copy of your Personal Information.

In order to protect your Personal Information we may require identification from you before releasing the requested information.

Maintaining the Quality of your Personal Information

It is important to us that your Personal Information is up to date. We will take reasonable steps to make sure that your Personal Information is accurate, complete and up-to-date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you.

Policy Updates

This Policy may change from time to time and is available on our website.

Privacy Policy Complaints and Enquiries

If you have any queries or complaints about our Privacy Policy, or how we have handled your information, please contact us at:

We will respond to your complaint within a reasonable time. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC), which oversees privacy in Australia, at www.oaic.gov.au. If your concern relates to the conduct of a registered health practitioner, you can also contact the Australian Health Practitioner Regulation Agency (AHPRA) at www.ahpra.gov.au, or the Health Care Complaints Commission (HCCC) in New South Wales at www.hccc.nsw.gov.au.