This Privacy Policy applies to all personal information collected by CannaAid Medical (ACN 664 477 454) via the website located at Https://www.cannaaidmedical.com.au (Website).

Last Updated: Jan 2025

1. Purpose of policy

This is the official Privacy Policy of CannaAid Medical (“CannaAid Medical”, “we”, “our”, “us”). This policy explains how we collect, store, use and disclose personal information and also explains your right to access or to make a complaint about our handling of personal information.

1. Collection

CannaAid Medical collects personal information from you in a number of different ways. We may collect personal information directly from you or in the course of dealings with you, for example when you:

• Provide personal information to us;
• Apply for a position of employment with us;
• Use our website or services (including via cookies); and
• Contact and correspond with us, for example to ask for information.

1. What is “personal information”?

Privacy Act 1988 (Cth) (Privacy Act).

The Privacy Act currently defines “personal information” as meaning information or an opinion about an identified individual or an individual who is reasonably identifiable:

• whether the information or opinion is true or not; and
• whether the information or opinion is recorded in a material form or not.
• If information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as “personal information” and will not be subject to this privacy policy.

If we are not able to collect information about you, we may not be able to provide you with products services and assistance to the extent that they require us to collect, use of disclosed personal information.

1. Use and disclosure

CannaAid Medical may use or disclose your personal information for the purpose for which it was collected. We will also use and disclose your personal information for a secondary purpose that is related to a purpose for which we collected it, where you would reasonably expect us to use or disclose your personal information for that secondary purpose.

Other instances when we may use and disclose your personal information include:

• Where you have expressly or impliedly consented to the use or disclosure;
• In confidence, to our advisers;
• In confidence, to third parties to improve our services and obtain feedback; and
• Where the use or disclosure if authorised or required by or under an Australian law or court/tribunal order.

We may also disclose your personal information to third parties, including:

• Share your personal information amongst other CannaAid Medical group entities.
• Share your personal information with our advisors and consultants; and
• With third party service providers we use in conducting our business, subject to confidentiality provisions, as we deem appropriate.
• Some third parties to whom we disclose your information may be located outside Australia.

You also consent to:

• Digital script sharing via email and SMS
• CannaAid Medical using email services to communicate with you about your medical information. (CannaAid Medicaltakes no responsibility for cases where incorrect emails have been supplied or where emails being supplied are not registered to the patient)

1. Information about events, the Website and our services

We may contact you via email, SMS or other means in order to provide you with updated information about the Website, in relation to events or to provide you with other information about our services. If you do not wish to receive any such information, please contact us as set out below.

1. Security of Personal Information

CannaAid Medical will take reasonable steps to keep any personal information we hold about you secure. However, except to the extent liability cannot be excluded due to the operation of the statute. CannaAid Medical excludes all liability (including in negligence) for the consequences of any unauthorised access to your personal information. Please notify us immediately if you become aware of any breach of security.

We may store your files in hard copy or electronically in our ordinary IT systems. These may include Australian-based cloud servers or the servers of third parties within Australia.

When we have disclosed your personal information to third parties and your files may be stored by or transferred to entities located outside of Australia. The storage or transfer of your personal information by these third parties will be subject to confidentiality provisions as we deem appropriate.

We implement a range of physical and electronic safety measures to protect the personal information that we hold. Including;

• Mandatory password protection on all computers
• Firewall and antivirus/malware software; and

Staff receive periodic training on security issues, to foster a security aware culture. We also have a regular review program to test the security measures in place and identify where changes may be necessary or desirable.

7. Complaints process

If you believe that we have breached the Australian Privacy Principles and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. If you are not satisfied with our care, we would love to hear from you. If you are still unsatisfied after our discussion, you can go to HCCC.

1. Storage and Security of your personal information

We may store your files in hard copy or electronically in our ordinary IT systems. These may include cloud servers overseas.

When we have disclosed your personal information to third parties, your files may be stored by or transferred to entities located outside of Australia. The storage or transfer of your personal information by these third parties will be subject to confidentiality provisions as we deem appropriate.

1. Updates to Privacy Policy

You acknowledge that the Service is subject to technical progress and development and that we may update or modify this Privacy Policy from time to time, and you agree to review the latest version of this Privacy Policy from time to time.

All modifications will be effective immediately upon our posting of the modifications on our Website. Please check back from time to time to review our Privacy Policy.

From time to time we will review our Privacy Policy to keep pace with changes in our service and any data protection and privacy laws applicable to the processing of Personal Data that we are committed to comply with, including the Privacy Act 1988 (Cth, Australia) and the Data Protection Laws.

1. Contact Us

Please direct any privacy issues or queries to info@cannaaidmedical.com.au

1. Cancellation Policy

For the benefit of our Doctors and other patients, we appreciate you notifying us 24 hours before your appointment time if you no longer need or would like to re-schedule your appointment. If a patient fails to attend, in accordance to our “Did Not Attend” policy, DNA fee be will charged to your account.

DNA Fee: $50 for all appointments.

For any enquiries or concerns, please speak to our reception staff.