ClickCease
top of page

MIDOC PRIVACY POLICY

Effective Date: May 2026

1. Introduction

MIDOC respects your privacy and is committed to protecting your personal information and health information in accordance with:

  • the Privacy Act 1988 (Cth);

  • the Australian Privacy Principles (APPs);

  • applicable State and Territory health privacy laws;

  • and other applicable Australian laws.

This Privacy Policy explains how MIDOC collects, uses, stores, discloses, transfers, retains, manages, and protects personal information and sensitive information through:

  • the MIDOC Platform;

  • websites;

  • applications;

  • telehealth systems;

  • customer support systems;

  • affiliate and referral systems;

  • communications systems;

  • and associated services.

This Privacy Policy forms part of the MIDOC Terms and Conditions.

By accessing or using the Platform, users expressly consent to MIDOC collecting, using, disclosing, storing, retaining, transferring, deleting, handling, and processing personal information and sensitive information in accordance with this Privacy Policy and applicable law.

2. Who We Are

“MIDOC” includes:

  • MIDOC;

  • Insomniak Pty Ltd;

  • Rothschild Health;

  • Manic Trust;

  • associated entities;

  • contractors;

  • affiliates;

  • technology providers;

  • service providers;

  • affiliate platform providers;

  • and related parties.

MIDOC operates strictly as a technology, communications, booking, facilitation, and administrative platform connecting users with independent Practitioners and Medical Team Members.

3. Information We Collect

We may collect personal information and sensitive information including:

Identity and Contact Information

  • full name;

  • residential address;

  • date of birth;

  • gender;

  • phone number;

  • email address;

  • emergency contact details;

  • Medicare details (for identification and service facilitation purposes only);

  • healthcare identifiers;

  • payment details;

  • and government-issued identifiers where reasonably necessary.

Health and Sensitive Information

  • symptoms;

  • medical history;

  • medications;

  • prescriptions;

  • pathology requests;

  • imaging requests;

  • consultation notes;

  • healthcare records;

  • referrals;

  • weight-loss information;

  • treatment information;

  • recordings;

  • questionnaires;

  • and other health-related information submitted through the Platform.

Technical and Usage Information

  • IP addresses;

  • browser information;

  • device identifiers;

  • operating systems;

  • cookies;

  • analytics information;

  • login activity;

  • metadata;

  • referral tracking data;

  • affiliate tracking data;

  • approximate location data;

  • and Platform usage information.

Communications

We may collect:

  • emails;

  • SMS messages;

  • support communications;

  • recordings;

  • chat messages;

  • uploaded files;

  • consultation communications;

  • and call recordings.

4. How Information Is Collected

Information may be collected:

  • directly from users;

  • through online forms;

  • telehealth consultations;

  • support communications;

  • affiliate and referral systems;

  • cookies and analytics technologies;

  • third-party login systems;

  • Practitioners and Medical Team Members;

  • pharmacies;

  • pathology providers;

  • imaging providers;

  • and automated systems connected to the Platform.

Where unsolicited information is received that is not reasonably necessary, MIDOC may destroy or de-identify the information where lawful and practicable.

5. Purpose of Collection and Use

MIDOC collects, uses, stores, retains, processes, and discloses information for purposes including:

  • operating the Platform;

  • facilitating telehealth services;

  • enabling communications between users and Practitioners;

  • identity verification;

  • payment processing;

  • customer support;

  • fraud prevention;

  • risk management;

  • quality assurance;

  • training;

  • cybersecurity;

  • dispute resolution;

  • legal and regulatory compliance;

  • operational administration;

  • affiliate and referral tracking;

  • analytics;

  • research;

  • service improvement;

  • and marketing activities where permitted by law.

Health information is used only:

  • to facilitate healthcare-related services;

  • to support Practitioners and Medical Team Members;

  • to facilitate prescriptions, referrals, pathology requests, imaging requests, and certificates;

  • and as otherwise permitted or required by law.

MIDOC does not use health information for direct marketing without appropriate consent.

6. Sensitive Information and Consent

MIDOC only collects sensitive information, including health information, with user consent or where otherwise permitted by law.

By submitting personal information or sensitive information through the Platform, users expressly consent to MIDOC:

  • collecting;

  • using;

  • storing;

  • retaining;

  • disclosing;

  • transferring;

  • handling;

  • and processing that information,

in accordance with this Privacy Policy and applicable law.

Users further consent to MIDOC sharing relevant information with:

  • Practitioners;

  • Medical Team Members;

  • pharmacies;

  • pathology providers;

  • imaging providers;

  • specialists;

  • hospitals;

  • and service providers reasonably required for operation of the Platform.

Independent Practitioners and Medical Team Members maintain their own privacy obligations and clinical records in accordance with professional and legal requirements.

7. Telehealth and Consultation Recordings

Telehealth communications involve electronic transmission of sensitive information and carry inherent privacy and cybersecurity risks.

Consultations and communications may be recorded for:

  • clinical purposes;

  • quality assurance;

  • training;

  • fraud prevention;

  • dispute resolution;

  • legal compliance;

  • operational review;

  • and security purposes.

By using the Platform, users consent to such recordings.

Recordings may be retained, reviewed, archived, deleted, disclosed, or used where reasonably necessary for operational, legal, regulatory, quality assurance, or security purposes.

8. Cookies, Analytics and Advertising Technologies

MIDOC may use:

  • cookies;

  • analytics technologies;

  • advertising technologies;

  • affiliate tracking systems;

  • referral tracking links;

  • device identifiers;

  • pixels;

  • session tracking technologies;

  • and similar technologies.

These technologies may collect:

  • browsing activity;

  • advertising interactions;

  • referral sources;

  • device information;

  • commission tracking information;

  • affiliate attribution data;

  • session activity;

  • and usage analytics.

Affiliate and referral systems may use cookies, referral tracking links, device identifiers, and analytics technologies to attribute referrals, commissions, and marketing activity.

Users may disable cookies through browser settings, however some Platform functionality may be affected.

9. Disclosure of Information

MIDOC may disclose information to:

  • independent Practitioners;

  • Medical Team Members;

  • pharmacies;

  • pathology providers;

  • imaging providers;

  • specialists;

  • hospitals;

  • cloud providers;

  • payment processors;

  • IT providers;

  • communications providers;

  • affiliate platform providers;

  • customer support providers;

  • insurers;

  • auditors;

  • legal advisers;

  • regulators;

  • government agencies;

  • law enforcement;

  • and third parties reasonably necessary for operation of the Platform.

Information may also be disclosed:

  • where authorised by users;

  • where reasonably necessary for service delivery;

  • where required by law;

  • where reasonably necessary to investigate fraud, misuse, unlawful conduct, or security incidents;

  • or in connection with mergers, acquisitions, financing transactions, restructuring, or sale of assets.

MIDOC may disclose de-identified or aggregated information for:

  • analytics;

  • operational review;

  • quality assurance;

  • research;

  • service improvement;

  • and marketing analysis.

Independent Practitioners and third-party providers maintain their own privacy obligations and privacy practices.

MIDOC is not responsible for the privacy practices of independent third parties outside MIDOC systems.

10. Overseas Disclosure

Information is primarily stored in Australia.

However, certain:

  • cloud providers;

  • software providers;

  • analytics providers;

  • communications providers;

  • affiliate systems;

  • technology providers;

  • and external service providers,

may process or store information outside Australia.

By using the Platform, users consent to overseas disclosure and storage where reasonably necessary for operation of the Platform.

11. Security

MIDOC takes reasonable steps to protect personal information and sensitive information from:

  • misuse;

  • interference;

  • loss;

  • unauthorised access;

  • modification;

  • and disclosure.

MIDOC may use:

  • encryption;

  • secure servers;

  • access controls;

  • monitoring systems;

  • authentication systems;

  • cybersecurity protections;

  • and other reasonable safeguards.

However, users acknowledge that:

  • no internet-based system is completely secure;

  • electronic communications may be intercepted;

  • information may be corrupted, delayed, or lost;

  • cybersecurity incidents may occur;

  • and unauthorised access may occur despite reasonable safeguards.

To the fullest extent permitted by law, MIDOC excludes liability arising from:

  • hacking;

  • malware;

  • ransomware;

  • phishing;

  • data breaches;

  • transmission failures;

  • unauthorised access;

  • communication failures;

  • system outages;

  • and cybersecurity incidents beyond MIDOC’s reasonable control.

In the event of an eligible data breach under applicable law, MIDOC may notify affected individuals and regulators where legally required.

12. Data Retention and Deletion

MIDOC may retain, archive, anonymise, monitor, review, delete, destroy, or remove:

  • records;

  • communications;

  • certificates;

  • prescriptions;

  • referrals;

  • pathology requests;

  • imaging requests;

  • recordings;

  • logs;

  • metadata;

  • and Platform records,

in accordance with:

  • operational requirements;

  • legal obligations;

  • regulatory obligations;

  • cybersecurity requirements;

  • storage limitations;

  • and internal policies.

MIDOC does not guarantee indefinite retention or availability of records.

Users may request deletion of certain information where legally permitted, however MIDOC may retain information where reasonably necessary for:

  • legal compliance;

  • dispute resolution;

  • fraud prevention;

  • operational integrity;

  • regulatory obligations;

  • or legitimate business purposes.

13. Marketing Communications

Users may receive:

  • operational communications;

  • transactional communications;

  • security notifications;

  • legal notices;

  • healthcare-related communications;

  • fraud prevention communications;

  • marketing communications;

  • reminders;

  • promotional offers;

  • affiliate-related communications;

  • and operational updates.

Users may opt out of direct marketing communications where legally required.

Users cannot opt out of operational, transactional, healthcare-related, legal, fraud-prevention, compliance, or security communications reasonably required for operation of the Platform.

14. User Rights

Subject to applicable law, users may request:

  • access to personal information;

  • correction of inaccurate information;

  • updates to information;

  • or lodging of privacy complaints.

Requests may require identity verification.

MIDOC may refuse requests where permitted by law including where:

  • legal obligations apply;

  • requests are unreasonable;

  • privacy of others may be impacted;

  • or operational or security concerns arise.

15. Complaints

Privacy complaints may be directed to:

Privacy Officer
MIDOC
Phone: 1300 788 166
Email: info@midoc.com.au
Website: www.midoc.com.au

MIDOC will attempt to investigate and respond within a reasonable timeframe.

Users may also contact the Office of the Australian Information Commissioner (OAIC).

16. Third-Party Websites and Services

The Platform may contain links to:

  • third-party websites;

  • pharmacies;

  • pathology providers;

  • imaging providers;

  • affiliate systems;

  • external applications;

  • and third-party service providers.

MIDOC is not responsible for:

  • external privacy practices;

  • third-party systems;

  • affiliate conduct;

  • or third-party security practices.

Users access third-party systems entirely at their own risk.

17. Business Transfers and Corporate Restructuring

MIDOC may disclose, transfer, assign, licence, or otherwise deal with personal information in connection with:

  • mergers;

  • acquisitions;

  • financing transactions;

  • restructuring;

  • sale of assets;

  • insolvency events;

  • changes in corporate control;

  • or business transfers.

Users consent to such transfers.

18. No Warranty

To the fullest extent permitted by law, the Platform and associated systems are provided on an “as is” and “as available” basis without warranties, guarantees, or representations of any kind whether express, implied, statutory, or otherwise.

MIDOC does not guarantee:

  • uninterrupted operation;

  • secure transmission;

  • permanent storage;

  • successful communication delivery;

  • or error-free operation.

19. Limitation of Liability

To the fullest extent permitted by law, MIDOC, Insomniak Pty Ltd, Rothschild Health, Manic Trust, associated entities, directors, officers, shareholders, employees, contractors, affiliates, technology providers, successors, and related parties exclude liability arising from:

  • privacy incidents;

  • cybersecurity incidents;

  • data breaches;

  • unauthorised access;

  • transmission failures;

  • communication failures;

  • system outages;

  • data loss;

  • affiliate conduct;

  • third-party systems;

  • and operational interruptions.

Where liability cannot lawfully be excluded, liability is limited to the maximum extent permitted by law.

20. Changes to This Policy

MIDOC may update this Privacy Policy at any time.

Updated versions may be published on the Platform without individual notice.

Continued use of the Platform constitutes acceptance of revised versions.

21. Governing Law

This Privacy Policy is governed by the laws of Victoria, Australia.

Users submit to the non-exclusive jurisdiction of the courts of Queensland, Australia.

bottom of page