We are Medway, part of HLS Healthcare Holdings Pty Ltd ACN 078 954 631 We provide electronic access to pathology results of patients, who have been tested by a Healius Pathology Pty Ltd (Healius Pathology) business, to specialists, hospitals and general practitioners who register and are approved to use our service.

Healius Pathology uses a number of business names around Australia and as follows:

• Laverty Pathology in New South Wales and the Australian Capital Territory;
• Dorevitch Pathology in Victoria;
• QML Pathology in Queensland;
• Abbott Pathology in South Australia;
• Western Diagnostic Pathology in Western Australia;
• TML Pathology in Tasmania;
• Kossard Dermatopathologists;
• Genomics;
• Gastrolab; and
• IQ Pathology.

In conducting our business, we collect, use and disclose personal information. We understand the importance of maintaining privacy in relation to the personal information we hold.

This Privacy Policy sets out how we comply with our obligations under the Privacy Act 1988 (Cth) and other relevant State and Territory legislation in managing your personal information.

Personal information is information or an opinion about an identified person, or someone who is reasonably identifiable, whether or not the information or opinion is true and whether the information or opinion is recorded in a material form or not.

The types of personal information we may collect and hold about you include:

• Name, title and position
• Practice address
• Email address
• Provider number(s)
• Telephone number including mobile
• Other information that we consider necessary for us to provide our services

We collect personal information about you from you directly when you complete our registration form. We also store a history of all the patient files that you have accessed and the time and date you accessed them.

When you visit our websites, a small data file called a “cookie” is stored on your computer or mobile device by our server. We use cookies to maintain user sessions and to generate statistics about the number of people that visit our websites. Generally, this information will not identify you and we do not link it back to your identity or other information that you have provided to us.

We take reasonable steps to protect all personal information we hold including from misuse, loss or unauthorised access, modification or disclosure.

1. Operating our business

   We use, and where necessary disclose, your personal information to provide access to pathology results through MedWay. We also use, and where necessary disclose, your personal information to manage our accounts and obtain payment for the services we provide. This may also extend to disclosure of your personal information to a debt collector or a credit-checking agency. We also use, and where necessary disclose, your personal information for data entry and data analytics purposes.

   If the circumstances require, we may disclose your personal information to our insurers.

   We may use your personal information to:

   • give you important information about our products and services;
   • advertise to you particular products and services that may be of interest to you; and
   • give you reminders in relation to obtaining services from us.
   
   
2. Teaching and research

   We may use your personal information for internal teaching purposes or to monitor, evaluate, plan and improve the services we provide. We will only use de-identified information (information that does not contain any personal details that may reasonably identify you) for these purposes, unless the service we provide is to you.

   University students undertaking clinical placements with us may have access to and use your personal information, but only in accordance with this Privacy Policy.

3. Other disclosures

   We may be required by law to disclose your personal information without your consent.

If you don’t provide us with all the personal information we request, we may not be able to provide our services to you. We aim to only collect as much personal information from you as we need to provide you with services and to allow us to obtain any payment for those services.

We may disclose your personal information to wholly owned subsidiaries of our parent company, Healius Ltd, or to third parties, which are based in India, Malaysia and the Philippines. These companies provide billing, payment and other administrative services, data-entry and data analytics services to us. We take reasonable steps to ensure that these companies do not breach the requirements of the Privacy Act 1988 (Cth) and other State and Territory legislation that may be applicable.

You may request access to the personal information we hold about you. You can also request that corrections be made to it. We will respond to your request within a reasonable time.

There are some circumstances where we are not required to give you access to or correct your personal information. We will normally give you a written notice setting out our reasons for not complying with your request and informing you of how you can complain about our refusal.

There is no fee for requesting access to your personal information or for us to make corrections. However, we may charge a fee for our costs involved in collating and providing you with access to any personal information. If charged, that fee is payable before access is given.

If you have any concerns about how we handle your personal information or you wish to make a complaint on the basis that we have breached the Australian Privacy Principles prescribed by the Privacy Act 1988 (Cth), please contact us. If you would like to make a complaint, you will need to send us a written complaint (see details below).

We will endeavour to respond to your complaint within a reasonable time after it is made.

You can contact our Privacy Officer in the following ways:

Privacy Policy Last Updated: 7 February 2023