VTMN DRIPS - PRIVACY POLICY

VTMN DRIPS

Last updated: 15 October 2026

1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how VTMN DRIPS Pty Ltd, ABN 74 661 203 023,

trading as VTMN DRIPS and VTMN IV ("VTMN", "we", "us" or "our"), collects,

holds, uses, manages and discloses personal information.

VTMN is a nurse-led wellness and healthcare business operating from Burleigh

Heads on the Gold Coast, Queensland. Our services include intravenous (IV)

infusions, intramuscular (IM) injections, wellness treatments, complementary

therapies, consultations and related services. We may also provide mobile

appointments, group bookings, corporate wellness experiences and other

services where available.

This policy applies to information collected through our website, online booking

platform, clinic, consultations, treatment services, mobile appointments, forms,

communications, social media accounts and marketing activities.

As a provider of health services, we recognise that the information entrusted to

us may be highly personal and sensitive. Protecting patient privacy and

maintaining appropriate clinical confidentiality are fundamental to our

operations.

We handle personal information in accordance with applicable Australian

privacy legislation, including the Privacy Act 1988 (Cth), the Australian Privacy

Principles and other relevant healthcare, professional and record keeping

obligations.

This Privacy Policy should be read alongside our applicable booking terms,

treatment consent documentation and other patient information.

2. WHAT IS PERSONAL AND HEALTH INFORMATION?

Personal information is information or an opinion about an identified individual,

or an individual who is reasonably identifiable.

This may include your name, contact details, date of birth, address,

photographs, communications, appointment history and other identifying

information.

Health information is a category of sensitive personal information. It includes

information about your physical or mental health, medical history, medications,

allergies, treatment, prescriptions, clinical assessments and healthcare services

provided to you.

Health information receives additional protection under Australian privacy law.

We collect health information only where reasonably necessary for providing

our services, where you have provided the required consent, or where

collection is otherwise authorised or required by law.

3. INFORMATION WE COLLECT

The information we collect depends on the services you request, your medical

circumstances and how you interact with VTMN.

Personal and contact information

We may collect your full name, date of birth, telephone number, email address,

residential address, emergency contact details and other identifying

information reasonably necessary to manage your care.

Medical history and health information

To assess your suitability for treatment, we may collect information about your

medical history, current and previous health conditions, medications,

supplements, allergies, previous treatments, pregnancy or breastfeeding

status, relevant symptoms, lifestyle factors and other matters that may affect

treatment safety.

We may also collect information about previous adverse reactions, relevant

investigations, pathology results and advice received from other healthcare

practitioners.

Clinical assessments and treatment records

We may record information about consultations, clinical observations,

assessments, treatment recommendations, prescriptions, administered

treatments, dosages, treatment dates, clinical notes, consent, adverse

reactions, aftercare advice and follow-up communications.

These records form part of your clinical history with VTMN.

Prescribing and medical consultations

Certain treatments require assessment and authorisation by an appropriately

qualified prescribing practitioner.

For these services, we may collect and share relevant medical information with

the prescribing practitioner to enable an appropriate clinical assessment and

prescribing decision.

This may include medical screening information, current medications, relevant

health conditions, treatment history, consultation notes and other information

necessary for safe and lawful prescribing.

A prescription or treatment recommendation is made according to the

prescribing practitioner's independent clinical judgement.

Booking and appointment information

When you make an appointment, we may collect your preferred treatment or

service, booking date and time, contact details, appointment history,

cancellation information, deposits, payment status and related booking

communications.

We use Timely as an external appointment booking platform.

Information provided through Timely may be processed and stored in

accordance with its applicable privacy and security arrangements.

Payment information

We may collect billing information, transaction records, receipts, deposits,

payment status and purchase history.

Payment card details are processed through the applicable payment or booking

provider. We do not intentionally retain complete payment card numbers or

card security codes in our own clinical records.

Photographs and other media

In some circumstances, photographs or other images may be collected where

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

clinically relevant, necessary to document a treatment, or otherwise

appropriate for the service being provided.

Clinical photographs are treated as confidential patient information.

We will not use identifiable patient photographs, videos, testimonials or

treatment information for public marketing without appropriate separate

permission.

Communications

We may retain information provided through email, telephone, text messages,

website enquiries, booking forms, Instagram, other social media platforms and

communications with our team.

Website and marketing information

When you use our website or subscribe to communications, we may collect

your email address, subscription preferences, website activity, device

information, IP address and information collected through cookies or analytics

technologies.

4. HOW WE COLLECT INFORMATION

We generally collect personal and health information directly from you.

This may occur when you book an appointment, complete a medical

questionnaire, attend a consultation, provide consent, receive treatment,

contact our clinic or communicate with our healthcare team.

We may also receive information from an authorised prescribing practitioner,

another healthcare provider, a pathology service, an emergency contact or

another person where you have authorised the disclosure or where permitted

by law.

Information may be collected electronically, verbally, in writing or through our

clinical and booking systems.

Where practicable, we will explain why particular health information is required

and how it will be used.

You may make a general enquiry without providing detailed medical

information. However, we generally cannot provide a clinical treatment without

obtaining sufficient information to assess your identity, health circumstances

and treatment suitability.

5. WHY WE COLLECT AND USE YOUR INFORMATION

We collect and use personal and health information primarily to provide safe,

appropriate and professionally managed healthcare services.

This includes:

responding to enquiries and managing appointments;

confirming identity and maintaining accurate patient records;

reviewing medical history and assessing treatment suitability;

arranging consultations with prescribing practitioners;

obtaining and documenting treatment consent;

determining whether a treatment can safely proceed;

preparing, administering and documenting treatments;

monitoring and responding to adverse reactions;

providing aftercare instructions and follow-up support;

communicating relevant information to healthcare practitioners

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

â—Ź

involved in your care;

managing prescriptions, clinical documentation and treatment records;

processing payments and administering bookings;

responding to complaints or clinical concerns;

maintaining professional, clinical and business records;

meeting legal, regulatory and professional obligations; and

improving the safety, quality and administration of our services.

We may also use information for another related purpose where permitted by

law, or where you have provided the required consent.

We do not sell patient information.

6. PRESCRIBING PRACTITIONERS AND SHARED CLINICAL CARE

VTMN works with appropriately authorised prescribing practitioners where

medical assessment or prescribing is required.

To arrange and support these services, relevant personal and health

information may be disclosed to the prescribing practitioner.

The information shared will be limited to what is reasonably necessary for

clinical assessment, prescribing, treatment planning, patient safety, continuity

of care or another lawful purpose.

The prescribing practitioner may maintain separate clinical records and may be

independently responsible for handling information under their own

professional and privacy obligations.

Where relevant, VTMN may receive information about the prescribing decision,

treatment authorisation, contraindications, clinical recommendations or other

matters necessary to provide the service safely.

We do not use prescribing consultations as an opportunity to obtain unrelated

marketing consent.

Clinical decisions remain the responsibility of the appropriately qualified

healthcare practitioner making them.

7. WHO WE MAY SHARE YOUR INFORMATION WITH

We may disclose personal or health information where reasonably necessary to

provide healthcare services, where you have consented, or where permitted or

required by law.

Depending on the circumstances, recipients may include:

Prescribing practitioners: For consultations, medical assessments,

prescriptions and related clinical decisions.

Nurses and other treating practitioners: Where they are directly involved in

your care.

Pathology laboratories and diagnostic providers: Where relevant

investigations or test results are required.

Timely and other booking or practice management providers: To manage

appointments, patient communications and relevant administrative information.

Payment service providers: To process transactions, deposits and refunds.

Information technology and secure storage providers: To support

authorised clinical recordkeeping, communications and business systems.

Professional advisers and insurers: Where information is reasonably

necessary for legal, professional, insurance or regulatory matters.

Emergency services or other healthcare providers: Where disclosure is

necessary to respond to an emergency, protect patient safety or provide

appropriate continuity of care.

Regulators, courts and other authorities: Where disclosure is authorised or

required by law.

We do not disclose patient health information to unrelated third parties for their

own marketing purposes.

Access to clinical information is limited to those who have an appropriate

professional or operational reason to access it.

8. CLINICAL RECORDS AND CONFIDENTIALITY

VTMN maintains clinical records to document consultations, assessments,

treatment decisions, consent, prescriptions, treatment delivery and relevant

follow-up care.

We take reasonable steps to ensure clinical records are accurate, appropriately

secured and accessible only to authorised individuals.

Our team members and treating practitioners are expected to comply with

applicable professional confidentiality and privacy obligations.

Patient information may be discussed between members of the treating team

where reasonably necessary for safe and coordinated care.

We do not publicly identify patients, discuss individual treatment histories or

disclose confidential medical information without appropriate authority.

Where an external platform is used to maintain or process clinical records, we

take reasonable steps to assess its suitability for the information involved.

9. MOBILE APPOINTMENTS AND OFF-SITE SERVICES

Where VTMN provides mobile or off-site services, we may collect additional

information necessary to arrange and safely deliver the appointment.

This may include your home, hotel, workplace or event address, access

instructions, relevant contact information and details about the treatment

environment.

This information may be shared with the treating nurse or other authorised

personnel attending the appointment.

Clinical records created during mobile appointments are handled according to

the same privacy and confidentiality principles that apply to services provided

in our clinic.

Where treatment is provided at a workplace, hotel, event or other third-party

location, we will take reasonable steps to protect patient privacy within the

practical circumstances of that setting.

We do not ordinarily disclose your medical history or treatment details to an

event organiser, employer, hotel or other host merely because the treatment

occurs at their premises.

10. MARKETING, EMAILS AND SOCIAL MEDIA

VTMN may communicate with patients and subscribers about clinic updates,

services, educational information, availability, events and other relevant news.

We maintain an email list and may use email marketing and communications

platforms to manage subscriptions and distribute messages.

We send electronic marketing communications where you have consented or

where otherwise permitted by applicable law, including the Spam Act 2003

(Cth).

You can unsubscribe from marketing emails using the unsubscribe link or by

contacting us directly.

Choosing not to receive marketing will not prevent you from receiving essential

appointment, clinical or service-related communications.

Patient information and marketing

We do not use your medical history, treatment records or other sensitive health

information for unrelated direct marketing without the consent required by law.

Agreeing to receive treatment does not, by itself, constitute consent to receive

marketing.

Social media

VTMN maintains a presence on Instagram and may use other social media

platforms.

If you contact us through social media, we may receive your account name,

messages and information you choose to share.

Social media platforms operate under their own privacy practices.

We recommend that you do not send detailed medical histories, prescriptions

or sensitive clinical information through public comments or unsecured social

media messages.

Where necessary, we may direct you to a more appropriate communication

channel.

Testimonials, photographs and patient stories

We will seek appropriate separate consent before using identifiable patient

photographs, videos, testimonials or personal treatment stories for promotional

purposes.

We recognise that healthcare advertising is subject to professional and

regulatory requirements, and any promotional use of patient information must

comply with applicable law.

11. WEBSITE, COOKIES AND ANALYTICS

Our website may use cookies, analytics services and similar technologies to

support website functionality, understand visitor activity and improve the online

experience.

Information collected may include IP addresses, browser information, device

details, pages visited, referral sources and interactions with website content.

Third-party website, booking and analytics providers may process technical

information in accordance with their own privacy policies.

You may be able to control cookies through your browser settings or available

website preference controls.

Some website features may not function as intended if certain cookies are

disabled.

We will provide additional information or obtain consent for particular tracking

technologies where required by applicable law.

12. STORAGE AND SECURITY

We take reasonable steps to protect personal and health information against

misuse, interference, loss, unauthorised access, modification and disclosure.

These measures may include access restrictions, secure accounts, appropriate

authentication, password-protected systems, confidentiality requirements,

controlled clinical record access and the use of established service providers.

We recognise that health information requires particular care.

Where third-party platforms process or store patient information, we take

reasonable steps appropriate to the circumstances to assess the provider's

privacy and security arrangements.

No electronic system can be guaranteed to be completely secure.

If you believe your personal information has been accessed or disclosed

without authorisation, please contact us promptly.

13. OVERSEAS STORAGE AND DISCLOSURE

Some technology, booking, communication and payment providers may store or

process information outside Australia.

The countries involved depend on the relevant provider and its operational

arrangements.

We distinguish between information processed by a third-party provider and

information disclosed to an overseas recipient for the purposes of Australian

privacy law.

Where personal information is disclosed overseas, we will comply with

applicable Australian privacy obligations, including requirements concerning

overseas recipients where relevant.

We take particular care when considering whether a platform is appropriate for

sensitive health information.

We do not assume that a general-purpose marketing, analytics or AI platform is

suitable for storing or processing identifiable clinical records.

14. ARTIFICIAL INTELLIGENCE AND AUTOMATED SYSTEMS

VTMN may use digital systems and automated technologies for routine

business administration, appointment communications and other operational

functions.

Identifiable patient medical records and sensitive clinical information will not be

entered into general-purpose AI systems for unrelated business, content

creation or marketing purposes.

Any use of AI or automated technology involving identifiable health information

must be assessed for privacy, security, clinical appropriateness and applicable

legal requirements before use.

AI-generated content does not replace the independent professional

judgement of a qualified treating or prescribing practitioner.

Clinical decisions concerning treatment suitability, prescribing and patient care

remain subject to appropriate professional assessment.

15. RETENTION OF CLINICAL AND BUSINESS RECORDS

We retain personal and health information for the periods required by

applicable healthcare, professional, privacy and recordkeeping laws.

Clinical records may be subject to minimum retention requirements that differ

from those applying to general business or marketing information.

We do not delete clinical records merely because a patient requests deletion

where we are legally required or otherwise authorised to retain them.

Where personal information is no longer required and retention is not required

or permitted by law, we take reasonable steps to destroy or de-identify it.

Financial, taxation and other business records may be retained for the periods

required by applicable law.

Records held in third-party systems or backups may be subject to additional

technical retention arrangements.

16. ACCESS TO AND CORRECTION OF YOUR INFORMATION

You may request access to personal or health information we hold about you.

You may also ask us to correct information that is inaccurate, out of date,

incomplete, irrelevant or misleading.

Requests can be made by contacting VTMN using the details below.

We may need to verify your identity before providing access, particularly where

clinical records or sensitive information are involved.

We will respond within a reasonable timeframe and in accordance with

applicable legal requirements.

Where permitted by law, a reasonable fee may apply to providing access to

records. We will advise you of any applicable fee before proceeding.

In limited circumstances, access may be refused or restricted where permitted

by law. Where required, we will explain the decision and available complaint

options.

17. REQUESTS TO DELETE INFORMATION

You may contact us to request deletion of personal information.

We will consider requests in accordance with applicable privacy, healthcare and

recordkeeping obligations.

Clinical records, prescriptions, treatment notes and related information may

need to be retained for legally prescribed periods.

Where information is no longer required and can lawfully be deleted, we will

take reasonable steps to destroy or de-identify it.

Unsubscribing from marketing communications does not result in deletion of

clinical records or information required to manage your healthcare.

18. DATA BREACHES

If we become aware of a suspected or actual data breach involving personal or

health information, we will take appropriate steps to investigate, contain,

assess and respond to the incident.

Where notification is required under the Privacy Act 1988 (Cth) or another

applicable law, we will notify affected individuals and the relevant regulator as

required.

We take the potential impact of unauthorised disclosure of health information

seriously.

19. PRIVACY COMPLAINTS

If you have concerns about how VTMN has handled your personal or health

information, please contact us.

We will investigate privacy complaints and aim to respond within 30 days.

If you are dissatisfied with our response, you may be able to complain to the

Office of the Australian Information Commissioner or another relevant

healthcare or privacy regulator.

Office of the Australian Information Commissioner

Website: www.oaic.gov.au

Telephone: 1300 363 992

20. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes to our services, systems,

legal obligations or information handling practices.

The current version will be made available through our website and will identify

the date of its most recent update.

Where a material change requires additional notice or consent, we will take

appropriate steps in accordance with applicable law.

21. CONTACT US

VTMN DRIPS

Operated by VTMN DRIPS Pty Ltd

ABN 74 661 203 023

Suite 3, 19–21 Park Avenue

Burleigh Heads QLD 4220

Australia

Website: www.vtmndrips.com.au

Email: hello@vtmndrips.com.au

Telephone: 0413 511 550

For privacy enquiries, requests relating to clinical records or complaints about

personal information, please contact us using the details above.