We keep paper and electronic records securely and take reasonable steps to protect them from misuse, interference, loss, and unauthorised access, change or disclosure. Access is limited to people who need it to do their job.
Some of our providers store or process information outside Australia:
- Calendly, Google, Meta, our email delivery service (Resend) and our website host (Vercel) operate mainly from the United States
- referral details and files sent through our website are stored with Supabase, in a data centre in South Korea
- the manufacturers of aligners and other appliances may process your scans and records overseas
We take reasonable steps to make sure these providers protect your information in a way that is consistent with Australian privacy law.
We keep health records for as long as the law requires, including under the Health Records (Privacy and Access) Act 1997 (ACT), and then destroy them or remove identifying details securely.
If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.