top of page
Homepage
Check My Eligibility

LEGAL

Privacy Policy

Last updated: 03/04/2026

On this page

Introduction

Definitions

What information we collect

How we collect information

Consent

Anonymity and pseudonymity

Provision of services

How we use your information

Use and disclosure of information

Direct marketing

Analytics, cookies, and tracking pixels

My Health Record

Real-time prescription monitoring

Data security and storage

Data breaches

Overseas disclosure

Access and correction

Payments

Privacy complaints

Changes to this policy

Summary of our privacy practices

This section provides a high-level summary of our privacy practices regarding your personal and health information. For a full understanding of your rights and our obligations, please read the complete policy below.

  • We collect personal information and health information to provide NationalTRT’s assessment, pathology referral, telehealth consultation, and follow-up services.

  • Your health information is primarily used for clinical care, service delivery, billing, support, and related administration.

  • We may share information with doctors, pathology providers, pharmacies, My Health Record, payment providers such as Stripe, and service providers who help us operate the platform.

  • We use cookies, analytics tools, and tracking pixels on our website and platform.

  • We may use personal information for direct marketing where permitted by law, and you can opt out at any time.

  • We may use de-identified or aggregated information to improve our services and systems.

  • We do not sell your personal information or health information.

  • We take reasonable steps to protect your information. 

1. Introduction

NationalTRT (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information, including health information and other sensitive information, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and where applicable the My Health Records Act 2012 (Cth). OAIC’s health privacy guidance explains that health service providers must proactively manage privacy and meet specific obligations when handling health information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, complete an assessment, engage with our telehealth pathway, or otherwise interact with NationalTRT.

2. Definitions

Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable. Sensitive Information includes information that receives additional protection under Australian privacy law, including health information. Health Information includes information about your physical or mental health, symptoms, medical history, consultations, blood tests, prescriptions, referrals, and healthcare provided to you. De-identified Information means information that has been processed so that it can no longer reasonably identify you. NationalTRT, we, us, our means the NationalTRT business entity operating this service.

3. What information we collect

Personal information

We may collect:

  • Name

  • Date of birth

  • Phone number

  • Email address

  • Residential address

  • Identification details where required

  • Medicare details where relevant

Health and sensitive information

We may collect:

  • Symptoms and concerns

  • Medical history

  • Medications and treatment history

  • Fertility-related information where relevant

  • Information provided through pre-assessments, questionnaires, consultations, and follow-up communications

  • Blood test and pathology information

  • Consultation notes

  • Prescription-related information where relevant

  • Information obtained from or uploaded to My Health Record where permitted and appropriate

Technical and usage information

We may collect:

  • IP address

  • Device and browser information

  • Operating system information

  • Log and diagnostic data

  • Website and platform usage information

Communications information

We may collect:

  • Records of emails, SMS, support requests, phone calls, and other communications

  • Communication preferences

  • Responses to surveys, feedback forms, or promotions

Payment information

We may collect:

  • Transaction details

  • Payment status

  • Limited billing-related information from our payment processor


NationalTRT uses Stripe to process payments and card-on-file functionality. Payment card details are handled by Stripe or tokenised through Stripe’s systems rather than stored in full by us.

4. How we collect information

We collect information in different ways depending on how you interact with NationalTRT.

Information you provide directly

We collect information directly from you when you:

  • Create an account

  • Complete a pre-assessment or medical questionnaire

  • Upload documents

  • Provide information during telehealth consultations

  • Complete pathology- or billing-related steps

  • Contact us for support

  • Subscribe to communications

Information collected automatically

We may automatically collect certain information when you use our website or platform through cookies, analytics tools, and other tracking technologies.

Information from third parties

Where relevant to providing our services, we may collect information from third parties, including:

  • Pathology providers and laboratories

  • Doctors and healthcare practitioners involved in your care

  • Pharmacies

  • My Health Record (where relevant and in accordance with applicable laws)

  • Payment providers such as Stripe

  • Identity verification or fraud-prevention providers (where used)

5. Consent

By using NationalTRT, you consent to the collection, use, and disclosure of your personal information, including health information and other sensitive information, as described in this Privacy Policy and any related consents you complete.

You may withdraw your consent at any time, subject to legal, clinical, and operational requirements. Withdrawal of consent may affect our ability to provide some or all services to you.

6. Anonymity and pseudonymity

Because of the nature of the services we provide, it will generally not be practical for you to remain anonymous or to use a pseudonym when engaging with NationalTRT.

7. Provision of services

NationalTRT provides a structured assessment and telehealth pathway that may include:

  • Pre-assessment medical questionnaire

  • Pathology referral where appropriate

  • Real-time telehealth consultation

  • Follow-up consultation and care coordination where applicable


NationalTRT does not provide emergency care.

8. How we use your information

We use your personal information, including health information and other sensitive information, to:

  • Assess your suitability for the NationalTRT pathway

  • Arrange pathology referrals where appropriate

  • Enable doctors to make clinical decisions

  • Provide telehealth consultations and related healthcare services

  • Communicate with you about your care, results, appointments, and follow-up

  • Verify your identity

  • Process payments

  • Provide customer support

  • Improve our platform, services, and user experience

  • Comply with legal and regulatory obligations

  • Access or upload information to My Health Record where permitted and appropriate


We may also use de-identified and aggregated information to:

  • Improve our services, systems, and workflows

  • Analyse usage patterns and performance

  • Develop new features and service improvements


This de-identified information does not identify you personally.

9. Use and disclosure of information

We may use or disclose your personal information for the purposes described in this Privacy Policy or as otherwise permitted or required by law.

Disclosure of personal information

We may disclose personal information where reasonably necessary for our operations, where you have consented, or where permitted by law. This may include disclosure to:

  • Our employees, contractors, and related entities

  • IT service providers, hosting providers, secure data storage providers, and software providers

  • Stripe and other payment-related providers

  • Professional advisers such as lawyers, accountants, auditors, insurers, and brokers

  • Regulators, courts, tribunals, and law enforcement agencies where required or authorised by law

  • A purchaser or prospective purchaser of all or part of our business, subject to confidentiality and legal obligations

Disclosure of health and sensitive information

We will only use or disclose health information:

  • For the primary purpose of providing healthcare and related services

  • With your consent

  • Where required or authorised by law


This may include disclosure to:

  • Doctors and healthcare practitioners involved in your care

  • Pathology providers and laboratories

  • Pharmacies where relevant

  • My Health Record

  • Clinical and administrative staff who require access to provide the service

  • IT and secure data storage providers supporting our systems

  • Regulators, courts, tribunals, and law enforcement agencies where required or authorised by law


We do not sell your personal information or health information.

10. Direct marketing

NationalTRT may use your personal information to send you information about services, offers, updates, promotions, and related communications where permitted by law.

We may communicate by:

  • Email

  • SMS

  • Phone

  • In-platform notifications


The Office of the Australian Information Commissioner (OAIC) states that Australian Privacy Principle (APP) 7 limits when organisations can use or disclose personal information for direct marketing and requires a simple way for individuals to opt out when direct marketing is permitted.

You can opt out of direct marketing at any time by:

  • Using the unsubscribe link where available

  • Following opt-out instructions in the communication

  • Adjusting account settings if available

  • Contacting us directly


We do not disclose identifiable health information to third parties for their direct marketing purposes.

We do not use identifiable health information for direct marketing unless we have a lawful basis to do so.

11. Analytics, cookies, and tracking pixels

NationalTRT uses cookies, analytics tools, and tracking pixels on its website and platform.

These technologies may include:

  • Cookies

  • Analytics tools

  • Web beacons

  • Tracking pixels provided by third-party platforms


We use these technologies to:

  • Operate and improve our website and platform

  • Understand how users interact with our services

  • Measure the performance of marketing campaigns

  • Personalise website content and user experience

  • Support advertising and retargeting where permitted


The Office of the Australian Information Commissioner (OAIC) states that organisations using tracking pixels must comply with privacy obligations, including transparency, consent where needed, and direct marketing obligations when pixels are used for ad targeting.

Some third-party providers may receive data collected through these technologies. We encourage users to review the privacy policies of those third parties.

You can control or disable cookies through your browser settings, but doing so may affect website functionality.

12. My Health Record

NationalTRT uses My Health Record as part of its service delivery where permitted and appropriate.

This may include:

  • Accessing relevant information from your My Health Record to support clinical decision-making

  • Uploading relevant clinical information where appropriate and authorised


The Australian Digital Health Agency states that organisations participating in My Health Record must maintain a written security and access policy and comply with ongoing participation obligations.

Access to My Health Record through NationalTRT is restricted to authorised personnel and practitioners and is subject to security, access, and audit controls.

13. Real-time prescription monitoring

Where required by law, prescribers involved in NationalTRT may participate in real-time prescription monitoring systems relevant to the medicines being prescribed.

This supports safe and appropriate prescribing and may involve recording or disclosing prescription information to authorised government systems or regulators.

14. Data security and storage

We take reasonable steps to protect your personal information, including health information, from misuse, interference, loss, unauthorised access, modification, or disclosure.

Security measures may include:

  • Encryption in transit and at rest

  • Secure hosting environments

  • Role-based access controls

  • Monitoring and audit logging

  • Technical, administrative, and physical safeguards


We retain records in accordance with Australian legal and clinical record-keeping requirements. When information is no longer required, we take reasonable steps to destroy or de-identify it unless we are required or authorised to retain it.

15. Data breaches

If an eligible data breach occurs that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

16. Overseas disclosure

Some of our service providers may store or process data outside Australia.

Where this occurs, we take reasonable steps to ensure that your information is handled in a manner consistent with Australian privacy laws.

17. Access and correction

You may request access to, or correction of, your personal information, including health information, by contacting us.

We will respond within a reasonable timeframe and may require identity verification. We may refuse access where permitted by law and will provide reasons where required.

18. Payments

NationalTRT uses Stripe to process payments and related payment services.

Stripe may collect, process, store, and handle payment-related information in accordance with its own privacy and security practices. NationalTRT receives limited payment-related information, such as payment status, transaction identifiers, and partial billing details, to operate the service.

Where card-on-file functionality is used, payment credentials may be securely tokenised and stored via Stripe for later charging in accordance with the patient’s consent and the service terms.

19. Privacy complaints

If you have a complaint about how your information has been handled, you can contact us at:

NationalTRT
Email: [Insert Contact Email]
Address: [Insert Address]
Phone: [Insert Phone Number]

We will investigate and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

20. Changes to this policy

We may update this Privacy Policy from time to time. The most current version will be available on our website, along with the date it was last updated.

bottom of page