Privacy policy

Current as of: 8 October 2026

About this policy

This policy explains how Click Clinic (ABN 70 893 640 097) (“we”, “us”) collects, uses, stores and shares your personal information, including your health information. It covers our certificate assessment service and our website, www.clickclinic.com.au.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What personal information we collect

When you request a certificate, we collect:

• your name, date of birth, email address, mobile number and address
• if you’re requesting a carer’s certificate, the name of the person you care for and details of their condition
• your symptoms or circumstances, and the dates you need the certificate to cover
• confirmation of your payment (we don’t see or store your full card number)
• any messages you send us, and notes made by the practitioner who assesses your request

When you visit our website, we and our service providers also collect technical information automatically. This is explained in Our website, cookies and advertising.

How we collect it

We collect most information directly from you, through our online request form, by email or by phone. If you request a certificate as a carer, you give us information about the person you care for, and you should let them know.

We may also collect information from a practitioner involved in your care, or where the law requires or allows it.

Why we collect, use and share it

We use your personal information to:

• assess your request and, where clinically appropriate, issue your certificate
• contact you about your request
• process your payment
• keep the records health practitioners are required to keep
• handle complaints, audits and accreditation
• improve our service, including understanding how people use our website

We will not use your health information for marketing, and we will never sell your personal information.

When we share it

We share personal information only:

• with the practitioner who assesses your request, and with staff who need it to provide the service
• with the service providers listed below, which help us run the service
• with other health care providers involved in your care, with your consent
• when the law requires or allows it, for example a court order, a mandatory notification, or to lessen or prevent a serious threat to someone’s life, health or safety
• to establish, exercise or defend a legal or equitable claim, or for a confidential dispute resolution process

We will not give your health information to an employer, education provider or anyone else without your consent, unless the law requires or allows it.

Service providers we use

Our website, cookies and advertising

When you use our website, we and the providers above use cookies and similar technologies to collect information such as the pages you view, how you found us (including which ad you clicked), your device and browser, your IP address and approximate location, and how you interact with each page.

We use this to:

• understand how our website is used and fix problems
• measure whether our advertising works
• show our ads to people who have visited our website (remarketing)
• detect and block invalid ad clicks

Session recordings. We use Microsoft Clarity to record how visitors move through our pages, so we can find and fix problems. Our certificate request form is masked, so Clarity does not record what you type into it.

When you submit a request. Our confirmation page tells Google, Meta and Microsoft that a request was completed, along with the price and a reference number, so we can measure our ads. We do not send them your name, contact details, symptoms or any other answers from the form. Because this comes from our confirmation page, these providers can tell that a browser completed a request on our website.

Google, Microsoft and Meta handle this information under their own privacy policies and may combine it with other information they hold about you.

Your choices

• Cookies: you can block or delete cookies in your browser settings. Our website and request form still work without advertising cookies.
• Google: manage ad personalisation at adssettings.google.com, or install the Google Analytics opt-out add-on.
• Microsoft: manage ad personalisation at account.microsoft.com/privacy/ad-settings.
• Meta: manage ad preferences in your Facebook or Instagram settings.
• Anonymity: you can browse our website and ask us general questions without identifying yourself. We need to know who you are to assess a certificate request.

Sending information outside Australia

Several of the providers above, including Jotform, Square, Cloudflare, Google, Microsoft, Meta and Fraud Blocker, are based overseas or operate globally, and may store or process your information outside Australia, mainly in the United States. We take reasonable steps, including through our agreements with these providers, to make sure they handle your information consistently with the Australian Privacy Principles.

How we store and protect your information

We store your information electronically, with the providers above and in our practice systems. Only staff and practitioners who need your information can access it, and access is protected by passwords and other security controls. We do not keep paper records.

Health practitioners must keep health records for a minimum period set by law, so we keep your request and certificate records for at least that long.

Accessing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it. Email [email protected] and we will respond within 30 days. We may need to confirm your identity first. If we refuse a request, we will tell you why in writing.

Complaints

If you have a concern about how we have handled your personal information, email [email protected]. We will acknowledge your complaint and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We review this policy at least once a year, and whenever our services or website change. The current version is always on this page.

Most recent review: October 2026
Next review due: October 2027