OpSync Privacy Policy

Last updated: 19 November 2025

Policy scope
1. While providing our products and/or services, and for purposes connected to the provision of those products and/or services (including our platform, OpSync) (together, our activities), Caousou Pty Ltd (ACN 664 413 567) and our related bodies corporate (together, we, us or our) will collect, store, use and disclose personal information.
2. We are committed to the protection of your personal information and to compliance with applicable privacy and health record laws, including the Privacy Act 1988 (Cth) and other applicable State, Territory or Commonwealth legislation.
Personal information, sensitive information and health information
1. Personal information is information or an opinion about an identified or reasonably identifiable individual, whether or not the information or opinion is true and whether or not the information is recorded in a material form.
2. Sensitive information is a specific subset of personal information that includes health information. Health information has the meaning given to that term in section 6 of the Health Records and Information Act 2002 (NSW) and any other equivalent or similar State or Territory legislation.
3. Together, for the purposes of this policy, personal information refers to personal information/personal data, sensitive information and health information as the context requires.
Types of personal information we collect and hold
1. Consistent with our activities, the types of personal information we may collect, and hold includes the following.
  1. Identity and contact details. We may collect individual’s names, dates of birth, genders, addresses, telephone numbers, Medicare details, health insurance details, email addresses, and other identifying and contact information.
  2. Profile data. If you set up an account or profile on our website, we will collect profile information, such as usernames, passwords and preference data, and related information.
  3. Health information. We may collect health information, including details of your specialist referral, your admission to a hospital, day procedure centre or clinic, information about the procedure you are undergoing, and records of your consents (including signed consent forms and associated audit logs). Health information is a type of sensitive information under applicable privacy laws, and accordingly, we will only collect this from you with your express consent.
  4. Other information. We may collect text of written and oral communications gathered in the course of our interaction with you, including where you interact on live-chat, social media and emails, provide feedback and online reviews and other information from your interactions with us online, cookie information, IP address, URLs, search histories and other associated information.
How we collect and hold personal information
1. The ways we may collect your personal information are as follows.
  1. Directly from you. We may collect personal information directly from you while undertaking our activities, from communications via phone, email and text, as well as from our website.
  2. From third party practitioners. Third party practitioners with whom an individual has a relationship may provide us with your personal information for the purposes of engaging with our services and activities. This includes your medical practice or practitioner who has facilitated your access to and use of our products and services.
2. We take reasonable steps to ensure the security and integrity of the personal information we collect, store, use and disclose. Personal information is held securely, is subject to various security protections and is held only for as long as the information remains relevant to the purpose for which it was collected and/or for as long as we’re required to retain it in accordance with applicable laws and regulations.
3. If you don’t provide us with personal information or withdraw your consent, we are unlikely to be able to provide you with our products and services. Any impact this has on the services you receive from your medical practice or practitioner should be raised directly with them.
Purposes for which we hold, use and disclose personal information
1. We will only use or disclose personal information for a secondary purpose if that secondary purpose is directly related to the primary purpose for which we have collected that information, and you would reasonably expect the disclosure in the circumstances. We may also do so if you consent to the secondary use or disclosure or if we’re permitted to do so in accordance with applicable laws.
2. The purposes for which we collect, hold, use and disclose information may include:
  1. conducting our business, which includes undertaking our activities and engaging with you and your specialist medical practitioner in respect of our services and activities;
  2. to communicate information to you about our services and activities; and
  3. to improve and optimise our platforms (including our websites) and services;
  4. for our internal administrative, research, and planning purposes; and
  5. to comply with legal obligations and protect our legal interests and rights (including our intellectual property rights).
3. Subject to any obligations we have under applicable laws, we may also disclose personal information to the following third parties for their use for the same purposes.
  1. Third party medical practices and practitioners with whom you have a relationship with.
  2. Our third party service providers, including services providers who assist us with our activities like PayPal and Stripe.
  3. Third party technology providers who help us with our activities.

Any personal information handled by these third parties will be subject to their own privacy policies and procedures

Changes to this Privacy Policy
1. We will review and update this Privacy Policy from time to time as needed without notice. Therefore, you should review the terms of this policy periodically to make sure that you are aware of how we collect, hold, store, use and disclose personal information. The date listed at the beginning of this page indicates when this Privacy Policy was last updated.
2. If we make a material change to our Privacy Policy and the way in which we handle your personal information, which includes a change that affects your rights, we will inform you by issuing a notice that includes a summary of the change. This notice may be provided through our website, via email or through other appropriate communication channels.
Retention, access and correction
1. We will only keep records of your personal information as long as they are still necessary for the purposes for which we collected such personal information and/or for as long as we are required to do so under applicable laws and regulations.
2. We will take all reasonable steps to ensure any personal information we collect, use or disclose is up to date and accurate. If you believe personal information that we hold about you is not up to date or accurate, you may ask us to correct it.
3. You may ask us to provide you with details of the personal information we hold about you, and copies of that information. We will respond to your request and attempt to provide you with the data within 30 days of receipt of your request.
4. If we provide you with copies of the information you have requested, to the extent permitted by law, we may charge you a reasonable fee to cover the administrative costs of providing you with that information.
5. Please direct all request for access and correction to the contact details set out in item 9 below.
Overseas disclosure
1. We will not disclose personal information about an individual outside Australia without:
  1. obtaining the individual’s consent; or
  2. otherwise complying with applicable privacy laws in respect of such disclosure.
Complaints and contacting us
1. If believe we have breached the Privacy Act 1988 (Cth) or any applicable health records laws, please contact our privacy officer using the details set out below and we will attempt to resolve your complaint.
2. We would appreciate the chance to deal with your concerns before you approach the relevant authority so, please contact us in the first instance. If you do not consider our response satisfactory, you may contact the Australian Privacy Commissioner at its website www.oaic.giv.au or by telephone on 1300 363 992. You may also have the right to make a complaint to the relevant state or territory health privacy regulator, depending on your location.
3. If you have any questions about this policy and would like further information, please contact us at team@opsync.com.au.