top of page

Patient Privacy Policy

This patient privacy policy applies to ADHD & Beyond Medical (ADHD N Beyond Medical Pty Ltd)
Last updated: October 2026

1. What we collect

We collect the personal and health information we need to care for you. This includes your name, contact details, Medicare details, medical history, assessment results and details of your treatment.

2. How we collect it

We collect most information from you directly, at appointments, by phone or through forms. With your consent, we may also get information from other health providers, such as a previous doctor or psychiatrist.

3. How we use it

We use your information to assess, diagnose and treat you, to manage your prescriptions, to claim Medicare rebates, and to run our clinics. We do not use your health information for marketing.

4. Who we share it with

We share your information only with people involved in your care or as the law allows. This may include other doctors or psychiatrists we share your care with, your pharmacist, Medicare or your health fund when we claim for services, and NSW Health or other regulators where the law requires it, including for ADHD prescribing.

5. AI scribe

Some of our clinicians use an AI scribe tool called Heidi to help with note-taking during consultations. Heidi listens to your consultation and creates a draft clinical note, which your clinician reviews, edits and approves before it is saved to your record. Heidi does not store the audio recording once your note has been created, keeps Australian patient data within Australia, and encrypts data in transit and at rest. Because Heidi listens to your consultation, its use involves recording part of your conversation, which requires your separate consent under the Surveillance Devices Act 2007 (NSW). We obtain this through our AI Scribe Consent form. You can opt out at any time without affecting your care.

6. Storage and security

Your information is held electronically in Halaxy, our secure practice management and clinical records software, which is password-protected and accessible only to authorised staff. Where paper records are used, they are kept in a secured, access-controlled area. All staff and contractors are bound by confidentiality obligations. CCTV operates in our reception area for security purposes. Consultation rooms are not monitored.

7. Our website and online enquiries

If you send an enquiry through our website, we collect the details you enter. Please do not include detailed health information in the form. Our website and email may use service providers whose servers are outside Australia. Our website may use cookies and analytics tools to understand how people use it and to measure our advertising.

8. How long we keep records

We keep medical records for as long as the law requires. In NSW this is generally at least seven years from your last visit, or until a child turns 25. After that, records are securely destroyed or de-identified.

9. Access and correction

Requests for access to, or copies of, your medical records must be made by you, the patient, directly, and we will confirm your identity before releasing anything. For patients under 18, a parent or guardian may make the request. We may also accept a request from someone you have authorised in writing, such as a formally appointed guardian or enduring power of attorney. Contact our reception team on 1800 69 2343 to make a request. In line with the NSW Health Records and Information Privacy Act, we respond within 45 calendar days, and sooner where we can. A fee applies to requests to access, copy or transfer records, so please contact reception for current pricing. We will take reasonable steps to correct information that is inaccurate or out of date.

10. Questions and complaints about our patient privacy policy

Please raise any privacy concern with us directly on 1800 69 2343. We aim to acknowledge your complaint within a few business days and resolve it within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner or the NSW Information and Privacy Commission.

bottom of page