Privacy Policy

Purpose

This policy explains how information is handled through this website and the pharmacy service. Personal and health information is handled subject to applicable requirements, including the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Health Records Act 2001 (Vic).

Who handles your information

VERDI Pty Ltd (ABN 57 666 180 936) operates immunisationhub.au and handles website enquiries. It does not provide clinical care. An enquiry can contain personal information and any other information you choose to include.

Priceline Pharmacy Sunshine Marketplace (ABN 46 654 295 843), Shop MM002, 80 Harvester Road, Sunshine VIC 3020, provides the clinical service and manages the clinical record. Business details can be checked on the Australian Business Register. That is separate from professional or premises registration.

Online booking opens the separate Priceline booking portal, powered by Healthengine. Please read the privacy and collection notices shown there, including Healthengine's privacy policy.

Information you provide

The contact form collects your name, email address, optional contact number, general enquiry subject and message. Use it for general enquiries. Do not send Medicare numbers, clinical records or detailed health information through the form; ask the pharmacy for an appropriate way to provide those details.

For clinical care, the pharmacy may need identifying and contact details, relevant health and vaccination history, health-system identifiers where applicable, consent and authority to act, the service provided, dose and batch details, observation notes and follow-up information. The information needed depends on the service. The clinician explains relevant collection and reporting requirements.

Organisation enquiries may also involve venue details, a contact person's business details, agreed service requirements and invoicing information. Patient information is not automatically disclosed to an employer, school or other organiser.

Why information is used or disclosed

Information is used to respond to enquiries, arrange care, assess suitability, record consent and services, manage follow-up, meet reporting obligations and handle payments or complaints where relevant.

Clinical information may be shared for the purpose for which it was collected, a directly related and reasonably expected purpose, with consent, or where another lawful basis applies. This can include treating practitioners, authorised representatives, AIR, SAEFVIC and regulatory authorities when relevant. A general enquiry does not authorise unrelated marketing or disclosure of your clinical record.

Vaccination reporting to AIR follows the applicable requirements. Prescription-monitoring requirements apply to specified monitored medicines, rather than every prescription medicine. Ask the pharmacist if you need the reporting requirements explained for your care.

Website services and overseas processing

Vercel hosts this website and receives connection information needed to deliver and secure it. Web3Forms delivers contact-form messages, and hCaptcha checks submissions for automated abuse. Some stock photographs load from Unsplash. Google Maps loads when you request a map. A translation link opens an external Google translation service.

These services may process information outside Australia. Optional PostHog analytics use the existing United States project, and Vercel performance services also involve overseas processing. The data transparency page links to provider policies. External providers may use subprocessors; this policy does not promise that every copy of information remains in Australia.

Do not enter sensitive information into an external translation service. Automated translation may be inaccurate, particularly for medical information; discuss important details with a clinician and an appropriate interpreter.

Cookies and optional analytics

We save your cookie choice. Optional PostHog analytics and Vercel performance measurement start only after you choose Accept all. PostHog uses a random browser identifier to group visits and actions; this is not fully anonymous data. Consenting browsers may be randomly shown different booking-button wording so we can compare general interactions. This does not establish whether an appointment was booked. We exclude health answers, form text, detailed clinical route names, URL queries and fragments. We do not record your screen or link these analytics with patient or booking records. Use Manage cookies in the footer and choose Essential only to stop future optional capture. Withdrawal does not automatically delete earlier events. Website hosting still requires connection information to deliver and secure pages. We respect Do Not Track and Global Privacy Control.

Storage and security

Reasonable steps are required to protect personal and health information from misuse, loss and unauthorised access, modification or disclosure. Website hosting, form delivery, booking and clinical records use different systems. Contact the pharmacy if you need details about the system holding your record or a secure transfer method. No online service can guarantee absolute security. If a breach is identified, notification and response obligations are assessed under applicable law.

Retention

Clinical records are retained according to the applicable requirements. Victorian Health Privacy Principle 4.2 generally requires retention for at least seven years from the last health service for adult information, and until at least age 25 for information collected while a person was under 18. Other obligations may require longer retention. Website, enquiry and external booking records have different purposes and retention arrangements. Contact us for the current arrangements; withdrawing analytics consent does not automatically erase previous records, and deletion may be limited by legal obligations.

Access and correction

You may request access to, or correction of, information held about you. We may need to verify your identity or an authorised representative's authority. Some legal exceptions can limit access or correction; where applicable, we explain the decision and complaint options. Any permitted access charge is explained before proceeding. There is no fee simply to lodge an access request.

Requests should be handled promptly. Federal privacy guidance generally treats 30 days as a reasonable response period; Victorian health-record access requirements also apply. For AIR history or an incorrect vaccination entry, ask the administering provider or Services Australia about the appropriate access or correction process.

Questions and complaints

For website or clinical privacy questions, call (03) 9364 7133, email smpchemist@gmail.com, or write to the Privacy Officer, care of Priceline Pharmacy Sunshine Marketplace, Shop MM002, 80 Harvester Road, Sunshine VIC 3020. Say whether the matter concerns the website, a booking or clinical care so it can be directed appropriately. Do not include detailed clinical records in an initial email.

You can seek help from the Office of the Australian Information Commissioner on 1300 363 992 or the Victorian Health Complaints Commissioner on 1300 582 113. Each body explains the matters it handles and its complaint process.

Changes to this policy

This page may change when services, systems or requirements change. The date identifies the website copy update, rather than an independent legal audit or clinical endorsement. Contact us if you need a previous version or clarification.