Privacy Policy

Last updated: 26 August 2026

Who we are

Practice Managed Pty Ltd (ABN 71 658 897 128) provides compliance and practice management software for Australian general practices. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

You can contact us about anything in this policy at hello@practicemanaged.com.au.

What this policy covers, and what it does not

Practice Managed is used by practice staff to manage policies, compliance records and practice operations. We do not collect or store patient health records. The personal information we handle belongs to the people who work at a practice, not the people it treats.

What we collect

• Account details. Your name, work email address, and your role at your practice.
• Practice details. Practice and site names, addresses, contact details, and operational information entered during setup.
• Compliance records. Policy documents your practice writes, records of who has read and acknowledged them and when, version history, and activity records showing who did what in the product.
• Sign-in and security records. Sign-in events and security-related events, kept so your practice's records can be trusted.
• Technical information. Standard web logs such as IP address and browser type, used to keep the service secure and working.

We collect this information directly from you or from your practice administrator when they invite you.

Why we collect it

• To provide the service: accounts, policies, acknowledgements, dashboards and reports.
• To keep an accurate compliance record for your practice, which is the product's purpose.
• To keep the service secure, including detecting misuse.
• To communicate with you about the service, such as invitations and notifications.

We do not sell personal information, and we do not use it for advertising.

Who can see your information

• Your practice. Practice Managed is a workplace tool. Your practice's administrators can see your account details and your compliance records, such as which policies you have acknowledged.
• Our service providers. We use a small number of providers to run the service, listed below.
• No one else, unless the law requires it.

Where your information is stored and processed

• Storage. Your practice's data is stored in Australia (Sydney), with our database provider Supabase.
• Processing. When you use the app, requests are processed on infrastructure operated by Vercel, which may occur in the United States. Emails such as invitations and notifications are sent through Resend, a provider based in the United States.
• If you sign in with Google or Microsoft, those providers handle that sign-in under their own privacy policies.

Where information is processed overseas, we take reasonable steps to ensure the providers handle it consistently with the Australian Privacy Principles.

How we protect it

• All connections to Practice Managed are encrypted in transit using TLS with 256-bit encryption.
• Access to your practice's data is restricted by role, enforced at the database level.
• Compliance records are tamper-resistant: acknowledgement records and policy versions cannot be silently altered.

Access and correction

You can see and update your own details in the app. For anything you cannot change yourself, contact us at hello@practicemanaged.com.au or your practice administrator, and we will respond within a reasonable time. You may request a copy of the personal information we hold about you.

Retention and deletion

Compliance records exist to evidence your practice's accreditation and are retained while your practice uses the service, including records of people who have left the practice, because a compliance record loses its value if it disappears when a person does. If your practice stops using Practice Managed, we will delete the practice's data within 90 days of a written request. Copies held in encrypted backups are removed as those backups expire.

Data breaches

If a data breach occurs that is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.

Complaints

If you believe we have mishandled your personal information, contact us at hello@practicemanaged.com.au and we will investigate and respond. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If we change this policy, we will update it here with a new date. Material changes will be communicated in the app.