Privacy Policy

This Privacy Policy explains how OMC Health collects, uses, holds, and discloses personal information, including health information, in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Last updated: 21 October 2026

We protect your data

Secure encryption and strict access controls

We respect your privacy

We only collect what we need for your consultation

We are compliant

We follow Australian privacy laws and health privacy principles

1. About This Policy

OMC Health is an Australian medical certificate platform operating at onlinemedicalcertificate.au. We connect patients with AHPRA-registered GPs from our partner practices for real-time telehealth consultations and medical certificate issuance. This policy applies to all personal information and health information collected by OMC Health through our website, booking platform, and communications. It does not govern the privacy practices of our partner medical practices, which maintain their own privacy policies.

2. What Information We Collect

We collect information that is necessary to provide our services and comply with legal obligations.

Personal information

Full name, email address, phone number, date of birth, residential state or territory (for service availability) and payment information (processed via third-party payment providers, we do not store card details).

Health information

Information you provide about your symptoms, condition and medical history relevant to your certificate request.

Technical Information

We may collect technical information, including IP address, browser type, device type, and usage data through cookies and analytics tools for platform performance and security purposes.

Booking and contact records

The times and outcomes of our calls and messages to you about your booking, and any booking credits issued to you or used.

Health information is a sensitive category of information under the Privacy Act. We apply additional protections to health information as required by the Act and relevant health privacy legislation.

3. How We Collect Information

We collect information: 1. Directly from you when you complete a booking, provide clinical information, or contact us. 2. Through your consultation with our partner GP practices. 3. Automatically through our platform (cookies, analytics). 4. From third-party payment processors (transaction confirmation only).

We do not use your personal or health information for marketing without your consent.

4. How We Use Your Information

We use your personal and health information to:

Process

Process your certificate request and facilitate your GP consultation

Deliver

Deliver your certificate to your nominated email address

Operate

Operate our certificate verification service

Refunds

Process payments, issue refunds and booking credits, and confirm whether our doctor was able to reach you for your consultation

Communicate

Communicate with you about your booking, consultation, or certificate

Comply

Comply with legal and regulatory obligations and Improve our platform and services (de-identified data only)

We do not use your health information for marketing purposes. We do not sell personal information to third parties.

5. How We Disclose Your Information

We only share your information with trusted third parties who help us deliver our services, including partner practices and GPs, service providers, and where required by law.

Partner GP Practices

Your booking information and clinical details are shared with our partner GP practices to facilitate your consultation and the issuance of your certificate.

Service Providers

We engage third-party service providers for payment processing, email delivery, and platform hosting. These providers are bound by confidentiality obligations and are not permitted to use your information for their own purposes. If you dispute a payment with your bank, we may share your booking and contact records with our payment provider to assess it.

Legal Obligations

We may disclose information when required by law, a court order, or a regulatory authority.

We Do Not Sell Data

OMC Health does not sell, rent, or trade personal information or health information to any third party.

Partner practices are bound by their own privacy obligations under the Privacy Act and applicable health legislation.

6. Storage and Security

Your information is stored on secure servers located in Australia. We apply technical and organisational measures to protect personal and health information from unauthorised access, disclosure, alteration, and destruction. Payment information is processed by PCI-DSS-compliant third-party payment providers. We do not store credit card or bank account details on our systems. Despite reasonable precautions, no data transmission or storage system is completely secure. We cannot guarantee absolute security.

7. Data Retention

We retain personal information and health information for as long as required to provide our services and comply with legal obligations. Clinical records associated with your consultation are held by our partner GP practices in accordance with their retention obligations under applicable health legislation. OMC Health platform records are retained for a minimum of 7 years.

8. Cookies and Analytics

Our website uses cookies and similar technologies to support website functionality, security, performance and analytics.

We may use analytics services such as Google Analytics and Microsoft Clarity to understand how visitors use our website and to improve website performance and user experience. These services may collect limited technical and usage information, such as cookie or device identifiers, browser and device information, approximate location, pages visited and interactions with our website.

We do not intentionally disclose names, email addresses, phone numbers, health information, symptoms, medical history, consultation information, certificate information or other sensitive information to analytics or advertising providers.

Our analytics and tracking tools are configured to minimise the collection of personal information and to prevent health or other sensitive information from being included in analytics events, URLs, custom parameters or session recordings.

Analytics information is used for website measurement, security, troubleshooting and service improvement. It is not used to make clinical decisions.

You can manage or disable non-essential cookies through the cookie settings available on our website or through your browser settings. Disabling certain cookies may affect some website features.

9. Your Rights

Under the Australian Privacy Act, you have the right to:

Access

Request access to the personal information we hold about you

Correction

Request correction of inaccurate, incomplete, or out-of-date information

Complain

Complain about a breach of the Australian Privacy Principles

10. Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us in the first instance (see Section 12). If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published at our website. Material changes will be notified to registered users by email.

12. Contact us

For privacy enquiries, access requests, or complaints:

support@onlinemedicalcertificate.au

Postal

16 Montrose Avenue, Fairfield East, NSW 2163

Phone

(02) 7258 0570

Australian privacy laws

We comply with the Privacy Act 1988 and the Australian Privacy Principles (APPs) including the Health Privacy Principles.

Your rights

You have the right to access, correct or request deletion of your personal information. Contact us to make a request.

Questions?

If you have any questions about this Privacy Policy or how we handle your information, we're here to help.

OMC Health's privacy policy explains how personal and health information is collected, used, stored, protected and disclosed when you use the service. Health information is treated as sensitive information. The policy also explains your rights to access or correct personal information, make privacy enquiries or complaints, and understand when information may be shared.