PRIVACY POLICY Alpha Health Clinic Effective Date: 29 April 2026

Alpha Health Clinic (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store, disclose and protect your personal and health information.

By using our services, visiting our website at alphahealthclinic.com.au, or contacting our clinic, you agree to the collection and use of information in accordance with this policy.

1. About Us

Alpha Health Clinic is a private dental practice providing general, cosmetic, and emergency dental services to patients in Alexandria, Sydney, and surrounding suburbs including Waterloo, Newtown, Mascot, Randwick, Marrickville, Erskineville, Zetland, and beyond.

Website: alphahealthclinic.com.au Phone: (02) 96932212 Location: Alexandria, NSW, Australia

2. Information We Collect

2.1 Personal Information

We may collect the following personal information from you:

• Full name, date of birth, and gender
• Contact details including phone number, email address, and home address
• Medicare number and private health fund details
• Emergency contact details
• Payment and billing information
• Communication records including emails, phone calls, and messages

2.2 Health Information

As a dental practice, we collect sensitive health information necessary to provide dental care, including:

• Medical and dental history
• Current medications and allergies
• Dental X-rays, scans, and clinical photographs
• Treatment plans, clinical notes, and records of procedures performed
• Referral letters and correspondence with other healthcare providers

2.3 Website and Digital Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on our website
• Referring URLs and search terms used to find our website
• Device type and operating system
• Cookies and similar tracking technologies (see Section 9)

3. How We Collect Information

We collect your information through the following means:

• Directly from you when you complete patient registration forms
• When you contact us by phone, email, or through our website contact or booking forms
• Through our online booking system when scheduling appointments
• During dental consultations and treatment
• From other healthcare providers with your consent (e.g. referrals, specialist reports)
• Through our website using cookies and analytics tools including Google Analytics
• When you interact with our Google Ads or other online advertising

4. How We Use Your Information

We use your personal and health information to:

• Provide, manage, and improve your dental care and treatment
• Schedule and manage appointments and send appointment reminders
• Process payments and manage billing including health fund claims via HICAPS
• Communicate with you about your treatment, results, and follow-up care
• Maintain accurate and up-to-date clinical records
• Comply with legal and regulatory obligations, including mandatory reporting
• Improve our services, website, and patient experience
• Send relevant health information or reminders (with your consent)
• Respond to enquiries and complaints
• Conduct internal administration and quality assurance activities

Marketing: We may use your contact details to send you appointment reminders, recall notices, or relevant dental health information. You may opt out of marketing communications at any time by contacting us or using the unsubscribe link in emails.

5. Disclosure of Your Information

We do not sell, rent, or trade your personal information. We may disclose your information to third parties only in the following circumstances:

5.1 Healthcare Providers

• Referring dentists, specialist practitioners, or other healthcare providers involved in your care
• Pathology laboratories or imaging providers for diagnostic purposes
• Dental prosthetists or dental laboratories for the fabrication of prosthetics

5.2 Technology and Service Providers

We use trusted third-party service providers to operate our business, including:

• Centaur Software — our practice management and online booking system
• Google LLC — for website analytics (Google Analytics) and advertising (Google Ads)
• Google Tag Manager — for managing website tracking and analytics tags
• Email and communication service providers
• Payment processors for billing and health fund claims
• Cloud storage and data backup providers

These providers are contractually obligated to handle your information securely and only for the purposes we specify.

5.3 Legal and Regulatory Requirements

• Where required or authorised by law, including mandatory reporting obligations
• To government bodies including AHPRA, Medicare, or health departments
• In response to a valid court order, subpoena, or legal process
• Where necessary to prevent a serious threat to health or safety

5.4 Business Transfers

If our practice is sold, merged, or transferred, your information may be disclosed to the new owner as part of that transaction, subject to equivalent privacy protections.

6. Storage and Security of Your Information

We take the security of your personal and health information seriously. We implement appropriate technical and organisational measures to protect your information, including:

• Secure, password-protected practice management systems
• Encrypted data transmission over the internet (SSL/TLS)
• Restricted staff access on a need-to-know basis
• Regular staff training on privacy obligations and data security
• Physical security measures at our clinic premises
• Regular software updates and security patches

Despite our best efforts, no method of electronic storage or internet transmission is 100% secure. If you believe your information has been compromised, please contact us immediately.

7. Retention of Your Information

We retain your health and personal information for as long as required by law and professional obligations. Under Australian dental regulations, adult patient records are generally retained for a minimum of 7 years from the date of last entry. Records for patients who were minors are retained until they reach 25 years of age, or for 7 years from the date of last entry, whichever is later.

When records are no longer required, they are destroyed securely in accordance with applicable laws and professional standards.

8. Your Rights

Under the Australian Privacy Principles, you have the following rights:

• Access: You may request access to the personal information we hold about you. We will respond within 30 days.
• Correction: If your information is inaccurate, incomplete, or out of date, you may request that we correct it.
• Anonymity: Where lawful and practicable, you may interact with us anonymously or using a pseudonym.
• Opt-out: You may opt out of receiving marketing communications at any time.
• Complaints: You have the right to make a complaint about how we handle your personal information.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before processing your request.

9. Cookies and Website Analytics

9.1 Google Analytics We use Google Analytics to collect anonymised data about website traffic and usage. You can opt out by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

9.2 Google Ads and Conversion Tracking We use Google Ads to promote our services online. Google Ads uses cookies to track conversions such as form submissions, appointment bookings, and phone call clicks. You can manage your ad preferences at adssettings.google.com.

9.3 Google Tag Manager We use Google Tag Manager to manage tracking tags on our website. This tool itself does not collect personal data but enables the analytics and advertising tools described above.

9.4 Managing Cookies You can control and manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

10. Overseas Disclosure

Some of our third-party service providers may be located overseas, including Google LLC (United States). We take reasonable steps to ensure that overseas recipients comply with privacy protections comparable to the Australian Privacy Principles.

11. Children’s Privacy

Where we provide dental services to patients under 18 years of age, we obtain consent from a parent or legal guardian. Health information relating to minors is handled with the utmost care and in accordance with applicable laws.

12. Contact Us and Complaints

If you have questions, concerns, or complaints about this Privacy Policy, please contact us:

Alpha Health Clinic Website: alphahealthclinic.com.au Phone: (02) 96932212 Location: Alexandria, NSW, Australia

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this document and notify you where appropriate. We encourage you to review this policy periodically.

This Privacy Policy was last updated on 29 April 2026.

Alpha Health Clinic | alphahealthclinic.com.au | (02) 96932212 | Alexandria NSW | Privacy Policy Version 1.0