top of page
Picture1.png

AXIOM PRACTICE PARTNERS — PRIVACY POLICY 

Axiom Practice Partners (ABN 69 681 022 971) ("Axiom", "we", "us", "our") provides practice  management services to specialist medical practices in Australia. We are committed to protecting  personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs),  and applicable state health records laws, including the Health Records and Information Privacy Act 2002  (NSW). 

This policy explains how we collect, hold, use and disclose personal information through our website  [https://www.axiompracticepartners.com.au/] (the "Website") and in providing our services. By using the Website or engaging us, you  acknowledge this policy. 

Information we collect 

We collect only the personal information reasonably necessary for our functions and activities. Depending on how you deal with us, this may include:
 

  • Contact details: name, practice or business name, job title, email address, phone number and  postal address.

  • Enquiry and booking information: details you provide in contact forms, discovery call bookings, surveys or correspondence.

  • Client and business information: practice details, provider numbers, billing and banking details, contracts and service records.

  • Recruitment information: resumes, qualifications, references and work history if you apply to work with us.

  • Health information: patient information that our medical practice clients give us access to while we provide practice management services (see section 5).

  • Technical information: IP address, browser and device type, pages visited and referring websites, collected through cookies and analytics tools.

    We do not knowingly collect sensitive information through the Website unless you choose to provide it.

How we collect information

We collect personal information directly from you where reasonable and practicable, for example when you:
 

  • complete a form, book a call or subscribe to updates on the Website;

  • email, phone or meet with us, or follow or message us on social media;

  • enter into a service agreement with us; or

  • apply for a role with us.


We may also collect information from third parties, such as our medical practice clients, practice software and billing platforms we are authorised to access, referees, and publicly available sources such as professional registers. Where we receive unsolicited personal information we do not need, we will destroy or de-identify it where lawful and reasonable.
 

Why we collect, use and disclose information

We use personal information to:
 

  • respond to enquiries and arrange discovery calls and practice audits;

  • provide, manage and improve our practice management services;

  • issue invoices, process payments and administer our agreements;

  • assess job applicants and manage our staff and contractors;

  • send newsletters, resources and service updates (you can opt out at any time);

  • operate, secure and improve the Website; and

  • meet our legal, regulatory, tax and insurance obligations.


We will not use or disclose your information for any other purpose unless you consent, you would reasonably expect it, or it is required or authorised by law. We do not sell personal information.

Patient health information

When we provide services to a medical practice, the practice remains responsible for its patients' health information. We act on the practice's behalf, under a written agreement, and handle patient information only as needed to deliver the agreed services, such as billing, appointment management, correspondence and reporting.
We apply the same or higher standards of care to patient information as the practice itself, including:
 

  • access limited to authorised Axiom personnel who need it for their role;

  • use of the practice's own systems where possible, rather than copying records;

  • confidentiality obligations on all staff and contractors; and

  • return or secure destruction of information when our engagement ends, unless the law requires  us to keep it.


Patients who want to access or correct their health records, or who have a privacy concern, should contact their treating practice in the first instance. We will help the practice respond.

Disclosure to third parties and overseas

We may disclose personal information to:
 

  • service providers who help us run our business, such as website hosting (Wix), accounting software (Xero), email, cloud storage, scheduling and payment providers;

  • our professional advisers, including accountants, lawyers and insurers;

  • medical practice clients, where relevant to the services we provide them; and

  • government agencies or regulators where required or authorised by law.


We require service providers to protect personal information and use it only for the services they provide to us.  Some providers store data outside Australia. In particular, our Website platform, Wix, may store and process data in the United States and other countries. Before disclosing information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs. Patient health information is stored on Australian-hosted systems wherever practicable.

Cookies and analytics

The Website uses cookies and similar technologies to keep it working, remember your preferences and understand how visitors use it. We may use tools such as Wix Analytics, Google Analytics and social media pixels (for example Meta and LinkedIn) to measure traffic and the performance of our marketing.

This information is generally aggregated and does not identify you directly. You can block or delete cookies through your browser settings or our cookie banner, although some parts of the Website may not work properly as a result.

Security, retention and data breaches

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Our safeguards include multi-factor authentication, role-based access, encrypted connections, password management, staff confidentiality agreements and privacy training.

We keep personal information only as long as needed for the purposes in this policy or as required by law (for example, tax records for 5 years, and health records for at least 7 years from last contact in NSW, or until a patient turns 25 if collected while they were under 18). We then securely destroy or de- identify it.

If we experience a data breach likely to result in serious harm, we will notify affected individuals, our relevant clients and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

Your choices and rights

Access and correction: you can ask for access to the personal information we hold about you, or ask us to correct it. We will respond within 30 days. We may refuse access in limited circumstances allowed by law and will explain why in writing.
Anonymity: you can browse the Website and make general enquiries without identifying 
yourself, but we usually need your details to provide services.
Marketing: you can unsubscribe from our emails at any time using the link in each message or by contacting us.
Automated decisions: we do not use personal information to make decisions about you by solely automated means.

Complaints and contact

If you have a question or complaint about how we handle personal information, please contact our Privacy Officer:
 
Privacy Officer, Axiom Practice Partners Email: admin@axiompracticepartners.com.au Phone: 0288801046 Post: 2104, 101 Grafton Street, Bondi Junction NSW 2022.

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the OAIC at oaic.gov.au or on 1300 363 992. For health information in NSW, you may also contact the NSW Information and Privacy Commission at ipc.nsw.gov.au.

Changes to this policy

We may update this policy from time to time to reflect changes in the law, our services or our practices. The current version will always be published on the Website, with the date it took effect. Last updated: 6 November 2026

About this policy 

bottom of page