Privacy

All personal information we collect is reasonably necessary for the purposes directly related to providing AdhereOn products and services to our customers and conducting general business activities.

Healthcare providers

AdhereOn collects and holds the following kinds of personal information about Australian healthcare providers who use our products and services:

• Full name

• Mobile phone number

• Work email address

• Qualifications

• Date of birth

• Sex

• Clinic name, address, telephone number

• Prescriber number

• Occupation

• Healthcare Provider Identifier-Individual (HPI-I) number and status

• Username

• Password

Our preference is to engage with you using your business contact details only.

Employees and delegates of healthcare providers

When a healthcare provider nominates an employee or delegate to use AdhereOn products and services on their behalf, AdhereOn collects and holds the following kinds of personal information about you:

• Full name

• Mobile phone number

• Work email address

• Qualifications

• Date of birth

• Sex

• Clinic name, address, telephone number

• Occupation

• Username

• Password

Our preference is to engage with you using your business contact details only.

Patients

When a healthcare provider uses our products and services, AdhereOn collects and holds the following kinds of personal information about their patients, which includes personal information and sensitive health information required for a prescriber to generate a prescription or to request Pharmaceutical Benefits Scheme or Repatriation Pharmaceutical Benefits Scheme authority approval for Authority Required prescription medicines. This includes:

• Full name

• Mobile phone number

• Email address

• Sex

• Date of birth

• Address

• Department of Veteran Affairs (DVA) card number and colour

• Medicare card number, Individual Reference Number (IRN) and validity date

• Concession number

• Closing the Gap (CTG) benefits eligibility flag

• Individual Healthcare Identifier (IHI) number, record status and status

• Prescriber details

• Prescription details: item, dose, form, strength, quantity, instructions for use, date and maximum number of repeats

• For Pharmaceutical Benefits Scheme or Repatriation Pharmaceutical Benefits Scheme medicines: PBS code and approval number

Where you voluntarily provide us with your personal information, we will take this as your implied consent for us to collect your personal information. However, we will only handle your personal information in a manner that is directly related to the purpose for which your personal information was provided or for a purpose that you would reasonably expect.

Healthcare providers

AdhereOn typically collects personal information about Australian healthcare providers who use our products and services directly from you, when you sign up and register with us as a ScriptWoRx user.

We may also collect personal information about you from a colleague or clinic employee, when they register you as a user of ScriptWoRx, on your behalf.

If you provide us with personal information about others, please ensure you have their consent to do so, tell them you are disclosing their personal information to us, and direct them to this privacy policy.

Other ways we may collect your personal information include:

• When you express an interest in becoming a customer of AdhereOn, including by completing an online form, emailing us or telephoning us with an inquiry that can only be answered in a manner that requires us to collect your personal information.

• When you contact us for technical support.

• When you send mail correspondence, emails and communications by other electronic means.

• Via publicly available sources of information.

Employees and delegates of healthcare providers

AdhereOn typically collects personal information about employees or delegates of Australian healthcare providers who use our products and services, when they sign up and register with us as a ScriptWoRx user and nominate you as a registered user on their behalf.

If you provide us with personal information about others, please ensure you have their consent to do so, tell them you are disclosing their personal information to us, and direct them to this privacy policy.

Other ways in which we may collect your personal information include:

• When you contact us for technical support.

• When you send mail correspondence, emails and communications by other electronic means.

• Via publicly available sources of information.

Patients

AdhereOn collect personal information about patients from healthcare providers or their nominated employees or delegates, when they use one of our products and services, and input your information into ScriptWoRx.

All personal information collected by AdhereOn is stored onshore. We implement reasonable technical and organisational measures to protect your information from misuse, loss, and unauthorised access, modification, or disclosure.

Where practicable, we give you the option of not identifying yourself or of using a pseudonym when you interact with us. Otherwise , we need to collect personal information that we reasonably require to provision our products and services to you. If we are unable to collect your personal information where reasonably required, we may not be able to provide our products and services to you (or otherwise interact with you while carrying out our business activities).

AdhereOn only collects, holds, uses or discloses personal information that is reasonably necessary for the provision of our products and services to you. If we hold personal information about you that was collected for a particular purpose, then we will not use or disclose that information for secondary purpose without your consent, unless:

• where required or authorised by or under an Australian law or a court/tribunal order; or

• the use of disclosure is otherwise permitted under an Australian law.

Healthcare providers and their nominated employees and delegates

AdhereOn collects, holds, uses and discloses personal information about Australian healthcare providers, and their nominated employees and delegates, for the following purposes:

• To provision our products and services to you.

• To administer your ScriptWoRx account.

• To administer our relationship with you.

• To communicate with you.

• To respond to you queries or complaints.

• To AdhereOn’s partners, suppliers, contractors and consultants, such as website hosting and cloud service providers, who provide services on our behalf, and then only to the extent necessary for them to administer services on our behalf.

• Prescriber details to eRx script exchange, the Australian national prescription delivery service, for the purpose of generating an electronic prescription.

• Prescriber details to Australian Government Services Australia Health Professional Online Services, for the purpose pf applying for a Pharmaceutical Benefits Scheme or Repatriation Pharmaceutical Benefits Scheme authority approval for Authority Required prescription medicines.

• To Australian Digital Health Agency, when requested by a patient to upload a prescription to their Active Script List.

Patients

AdhereOn collects, holds, uses and discloses personal information about patients of healthcare providers who use our products and services for the following purposes:

• To provision our products and services to your healthcare provider.

• To send you an electronic copy of your prescriptions and approval number for Authority Required prescription medicines.

• To respond to you queries or complaints.

• To AdhereOn’s partners, suppliers, contractors and consultants, such as website hosting and cloud service providers, who provide services on our behalf, and then only to the extent necessary for them to administer services on our behalf.

• To eRx script exchange, the Australian national prescription delivery service, for the purpose of generating electronic prescriptions.

• To Australian Government Services Australia Health Professional Online Services, to apply for a Pharmaceutical Benefits Scheme or Repatriation Pharmaceutical Benefits Scheme authority approval for Authority Required prescription medicines.

• To Australian Digital Health Agency, when requested by a patient to upload a prescription to their Active Script List.

In addition to the above personal information, where your healthcare provider opts in to this service, we collate de-identified patient prescribing data and share it with opted in healthcare providers for the purposes of identifying prescription-related healthcare trends at a state level.

Overseas disclosures

AdhereOn does not routinely disclose personal information that we hold about you to third parties located outside of Australia, expect where required or authorised by or under an Australian law or a court/tribunal order.

Automated decision making

AdhereOn products do not use automated decision making, where a computer program is used to make a decision, to replace a human decision-maker.

You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. If very limited circumstances, we may refuse you access to your personal information, but only where a lawful exception compels us to do so.

You have the right to ask us to correct personal information you think is inaccurate or incomplete.

Healthcare providers and their nominated employees and delegates

We encourage you to let us know when your personal information changes, so we can continue to offer you our services via your correct contact details.

You can access and correct your personal information by logging into your ScriptWoRx account and making the changes yourself.

Alternately, you can email us at enquiry@adhereon.com.au to seek access to or correct the personal information we hold about you. When you email us, we may need to request additional information from you. For example, we may ask you to confirm your identity, before we give you access to or correct your personal information. If you make a request on behalf of somebody else, we may need to confirm that you have the authority to act on behalf of the person whose personal information the access or correction request is about. We will review your request and respond to you within 30 days.

Patients

To seek access to and correct your personal information, you should contact your healthcare provider in the first instance. We also encourage you to read the privacy policy of your healthcare provider, for specific access and correction instructions you should follow.

You have a right to complain about the way we process your personal information. Email us at enquiry@adhereon.com.au to make a privacy complaint.

In some cases, we may need to request additional information from you, to respond to your complaint. For example, we may ask you to confirm your identity before we respond to your complaint. If you make a privacy complaint on behalf of somebody else, we may need to confirm that you have the authority to act on behalf of the person whose personal information the complaint is about.

We will review your complaint, investigate where needed, and keep you informed along the way. We will respond to you within 30 days.

If you remain unhappy with how we process your personal information, you can escalate your complaint to the Office of the Australian Information Commissioner, via the contact details listed on their https://www.oaic.gov.au/contact-us web page.

Email us enquiry@adhereon.com.au if you have any questions or require further information about this privacy policy or our privacy handling practices.

This privacy policy may change from time to time, and you should check regularly for updates. This privacy policy was last updated on 19 January 2025.