Privacy policy
DRIP HAUS PTY LTD — PRIVACY POLICY
ABN 68 665 152 205 | driphaus.com.au | admin@driphaus.com.au
Version 3.0 — July 2026 | Privacy Act 1988 (Cth) | Australian Privacy Principles (APPs 1–13)
Drip Haus Pty Ltd ('Drip Haus', 'we', 'us', 'our') is committed to protecting your privacy and handling your personal information with transparency, respect, and care. This Privacy Policy explains how we collect, hold, use, and disclose personal and health information in compliance with the Privacy Act 1988 (Cth) and all thirteen Australian Privacy Principles (APPs).
By using our website, booking a service, or providing information to Drip Haus, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. A more detailed version of our Privacy Policy is available at driphaus.com.au/pages/privacy-policy.
Last updated: July 2026.
1. ABOUT THIS POLICY (APP 1)
We are committed to managing personal information openly and transparently. This Policy sets out our practices in plain language. Drip Haus is a provider of health services and therefore handles health information classified as 'sensitive information' under the Privacy Act 1988 — the highest category of protected information. The small-business exemption does not apply to our business.
2. WHAT INFORMATION WE COLLECT (APP 3)
We collect personal and health information necessary to provide our services safely and effectively, including:
- Full name, date of birth, gender, and contact details (address, phone, email)
- Medical history, current medications, allergies, and health-related information
- Appointment and treatment records, clinical notes, and consent documentation
- Payment and billing information
- Communications with our team (emails, SMS, and phone records)
- Website usage data (browser type, pages visited, time on site)
We collect health information only with your consent, where required by law, or where reasonably necessary to provide our clinical services.
We collect information directly from you through: health and medical history intake forms, in-person or phone consultations, our booking system, email and SMS, our CRM system (Go High Level), and our client portal.
3. NOTIFICATION OF COLLECTION (APP 5)
At or before the time of collection, we will notify you of: who we are, the purposes for collection, how you may access and correct your information, and any overseas recipients. This notification is provided through this Privacy Policy, our intake forms, and our Terms & Conditions.
4. HOW WE USE YOUR INFORMATION (APP 6)
We use your information to: assess your suitability for treatment and deliver safe clinical care; manage bookings and service delivery; process payments; comply with legal and AHPRA obligations; send appointment reminders and aftercare information; and send marketing communications (with your consent). We will not use or disclose your information for purposes other than the primary purpose of collection, except with your consent or as required by law.
5. DISCLOSURE OF YOUR INFORMATION (APPs 6 & 8)
We do not disclose your personal or health information to third parties except:
- With your express consent
- Where required or authorised by law (including mandatory reporting obligations)
- To AHPRA-registered healthcare providers directly involved in your care
- To our compounding pharmacy, for the purpose of filling a prescription issued to you
- To our technology service providers (listed below)
Third-party processors and overseas disclosure (APP 8): We use Go High Level (CRM and marketing automation), with servers that may be located in the United States. We take reasonable contractual steps to ensure any overseas recipient handles your information consistently with the Australian Privacy Principles. By using our services, you consent to the possible transfer of your information to overseas recipients.
6. DIRECT MARKETING OPT-OUT (APP 7)
We may send you marketing communications about our services where you have consented. All marketing communications include a clear unsubscribe mechanism and identify Drip Haus as the sender, in compliance with the Spam Act 2003. You may opt out at any time by: clicking 'Unsubscribe' in any marketing email; replying STOP to any marketing SMS; or contacting admin@driphaus.com.au. Opting out of marketing does not affect your access to clinical services.
7. GOVERNMENT-RELATED IDENTIFIERS (APP 9)
We do not collect, use, or disclose government-related identifiers (Medicare numbers, Tax File Numbers, driver's licences, passports) as a means of identifying clients, except where required by law or expressly authorised.
8. SECURITY OF YOUR INFORMATION (APP 11)
We take reasonable steps to protect your personal and health information from misuse, loss, unauthorised access, modification, and disclosure. Our measures include: encrypted electronic records management; role-based access controls; multi-factor authentication; staff privacy training; and secure disposal of physical records. In the event of a data breach likely to result in serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme and notify affected individuals and the OAIC as required.
9. ACCESS & CORRECTION (APPs 12 & 13)
You have the right to request access to your personal and health information and to request correction of any inaccurate, incomplete, or out-of-date information. To make a request, contact us at admin@driphaus.com.au or +61 440 139 440. We will respond within 30 days. Access may be refused in limited circumstances permitted by law, in which case we will provide written reasons.
10. HEALTH RECORDS RETENTION
Client health records are retained for a minimum of 7 years from the date of last service for adult clients, and a minimum of 25 years from the date of birth where the client was a minor at the time records were created. Records are held in encrypted, access-controlled electronic systems and disposed of by confidential destruction when no longer required.
11. COOKIES & TRACKING TECHNOLOGIES
Our website uses cookies and similar tracking technologies for website performance, analytics, marketing, and booking system functionality. On your first visit, you will be presented with a cookie consent banner. You may accept, decline, or customise cookie categories. Essential cookies required for website functionality cannot be disabled. You may manage your preferences at any time via the cookie settings in the website footer.
12. PRIVACY COMPLAINTS (APP 1)
If you have a concern about how we have handled your personal or health information, contact us at: admin@driphaus.com.au | +61 440 139 440. We will acknowledge your complaint within 2 business days and respond within 30 days. If not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): oaic.gov.au | 1300 363 992 | GPO Box 5218, Sydney NSW 2001.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. The updated policy will be published on our website with a revised 'last updated' date. We encourage you to review this policy periodically. Full Privacy Policy: driphaus.com.au/pages/privacy-policy
CONTACT US
Drip Haus Pty Ltd | ABN 68 665 152 205
Email: admin@driphaus.com.au | Phone: +61 440 139 440
Website: driphaus.com.au | Perth | Broome | South West WA