Privacy Policy

Last updated: 2 October 2026

Who we are

Opse Health is operated by Hatch Medical Pty Ltd as trustee for Hatch Medical Trust, ABN 50 154 332 244 (Opse, we, us). Our practice is at 95 Robertson Street, Fortitude Valley, Queensland 4006, Australia.

Our website is an informational and marketing website. It explains our services, provides educational material and helps people enquire or proceed to a separate application form. The website is not a patient portal and does not provide an on-site medical-history or clinical-record submission facility.

This policy explains information handling for website visits, guide requests, enquiries and related administration under the Privacy Act 1988 (Cth) and Australian Privacy Principles. Separate collection notices and consent arrangements apply when you enter an application or participate in a service. This policy does not replace clinical consent.

For privacy questions, complaints or requests about personal information, contact [email protected], addressed to the Privacy Officer. You can also write to the address above. Program enquiries can be sent to [email protected].

Information collected through the website

Depending on how you use the website, we may collect:

Your email address when you request a guide, and your optional marketing choice.
Contact details and the information you choose to include in an enquiry or correspondence.
Your organisation’s name and program requirements if you enquire about corporate care.
A record of your cookie and tracking preferences stored in your browser.
Technical information processed by hosting and security systems, such as IP address, browser information, request time and logs.
With your permission, website usage information and general enquiry events through the tracking services described below.

We use this information to provide requested material, respond to enquiries, administer our website, protect its security, understand website performance with permission, and meet legal obligations. We only send optional marketing when you have agreed to receive it.

Please do not put medical histories, test results, identification documents or another person’s private information into a general enquiry. If such information is needed later, we will explain an appropriate way to provide it. Information volunteered in correspondence will still be handled according to its sensitivity and the law.

You may browse or make a general enquiry without identifying yourself where practicable. An email address is needed to email a guide or response. If you withhold information needed to fulfil a request, we may be unable to fulfil it.

Optional cookies and conversion tracking

We ask before loading optional tracking. You can reject all optional tracking, choose individual categories or accept the available categories. Refusing does not prevent access to website information, guide requests or applications. Use Cookie settings in the footer to change your choice at any time.

The available categories are:

Google Analytics: measures visits and general funnel events on selected pages, such as an application-link click, email-enquiry click or successfully submitted guide request. The website’s custom events do not include form contents, email addresses, medical details, email subject text or URL query strings. Google advertising signals and advertising personalisation are disabled in this integration.
Microsoft Clarity: records website interactions on selected general pages to help us understand usability. Text and form fields are masked. Application, clinical-topic and condition-specific pages are excluded from session recording.
Meta Pixel, when configured: measures general visits and enquiry clicks on selected general pages after separate advertising consent. Meta may associate browsing information with your Facebook or Instagram account. We do not send medical details, application answers or contact details through custom pixel events, and automatic event configuration is disabled in the website integration.

Visiting a health-related website can itself suggest an interest in health services, even when no medical information is entered. Optional tracking may share that browsing information and technical identifiers with the provider you choose. Our integrations restrict the pages and event information sent; consent does not authorise us to send unnecessary sensitive information.

Google Analytics can measure general enquiry actions, but an application-link click does not establish that an application was completed or that the person became a patient. Website advertising consent is separate from consent to receive emails.

We store your tracking preference locally for up to 180 days. Providers may set their own cookies if you opt in. Changing a choice stops future optional tracking under that category; it does not automatically delete information already processed by a provider. Our website clears the relevant accessible first-party tracking cookies when a category is withdrawn. You can also use browser controls and providers’ privacy tools.

Provider information is available in Google’s privacy policy, Microsoft’s privacy statement and Meta’s privacy policy.

Guide requests and optional email marketing

The guide form uses Netlify Forms to process your email address and any selected marketing preference. Requesting a guide allows us to fulfil that request; the separate, optional checkbox controls whether you also receive news and marketing emails. You do not need to select it to receive the guide.

Marketing messages identify Opse and include an unsubscribe method. You can also email [email protected]. We action unsubscribe requests within five working days. We may retain minimum suppression information to ensure an opt-out is respected. Necessary replies about an enquiry or requested service are separate from optional marketing.

Separate applications and external websites

Applications are hosted by Jotform, outside this website. Before entering information, read the collection notice, privacy information and consent choices shown there. Jotform processes submissions for the application process. Following a link does not itself give Opse permission to use health information for unrelated purposes or enrol you in marketing.

External platforms may use their own cookies and technologies. Our cookie choices govern the integrations on this website, not the settings on a third-party site. We remain responsible for our own information handling and for meeting applicable obligations when using service providers.

Read the Jotform privacy policy and Netlify privacy statement for their information. Contact us before submitting if you want to discuss another way to enquire.

Who receives information and overseas processing

Relevant information may be handled by authorised staff and providers supporting hosting, forms, email and administration, and by the optional tracking providers you select. It may also be disclosed to advisers, regulators or authorities where permitted or required by law. We do not treat this policy as consent to sell contact lists or share information for unrelated purposes.

Providers may process information outside Australia, including in the United States. Netlify and Jotform are among the providers with United States operations; Jotform’s published policy describes United States storage and regional options. Google, Microsoft and Meta operate international services. Hosting, support and subprocessor locations depend on the service and account arrangements. We do not represent that all website or form information stays in Australia. Contact our Privacy Officer for details relevant to your request.

Where we disclose personal information overseas, we take the steps required by Australian privacy law. Your acceptance of this policy does not waive the protections that apply to overseas disclosures.

Employer enquiries and confidentiality

Initial corporate enquiries should describe the program required and approximate participant numbers, rather than include employee health information. Funding a program does not automatically entitle an employer to participants’ medical records or results. Any later administrative reporting, clinical information sharing and participant consent must be separately addressed in the relevant service arrangements.

Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These obligations include appropriate access controls, account protection, confidentiality and management of service providers. No internet transmission or storage system is completely risk-free.

We retain website enquiries, guide requests, consent records and related correspondence while reasonably needed for their purpose or to meet legal and recordkeeping obligations. When information is no longer needed and no retention obligation applies, we take reasonable steps to destroy or de-identify it. Specific periods can differ by record type; contact us for details.

If you later join a program, program and clinical records may have separate retention obligations. Deleting a website enquiry or withdrawing marketing permission does not automatically require deletion of records that must lawfully be retained.

Access, correction and privacy requests

You can ask to access personal information we hold about you and to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. These rights apply even where an interaction or program is educational.

Contact [email protected], identify the information concerned and explain your request. We may need to verify your identity or a representative’s authority. We respond within a reasonable period, generally aiming for 30 days, and explain any delay.

There is no fee to make a request or have information corrected. A reasonable, non-excessive charge for providing access may apply where permitted; we explain any proposed fee first. If a lawful exception prevents access or correction, we provide reasons where required and explain complaint options. You may ask to have a statement of a disputed correction associated with the record and, where applicable, ask us to notify other recipients of a correction.

Complaints and data breaches

Email [email protected] with the concern and the outcome you seek. We will acknowledge the complaint, investigate and aim to respond within 30 days. If more time is needed, we explain why and provide an update.

If you are not satisfied, or have not received a response within 30 days, you can contact the Office of the Australian Information Commissioner. For concerns about a Queensland health service, the Office of the Health Ombudsman is also available. This policy does not restrict your right to contact a regulator.

We investigate suspected data breaches promptly, take steps to contain harm and notify affected people and the OAIC when the Notifiable Data Breaches scheme requires it.

Changes to this policy

We review the policy when relevant practices or requirements change and show the revision date above. Material changes may require further notice or consent; publishing an update does not authorise unrelated new uses of previously collected information. Contact us if you need a copy in another accessible format.