Privacy Policy

Draft for review. This policy was prepared for Tidy Tooth Dental and must be reviewed and approved by practice management before launch. This is a general template, not legal advice.

Last updated 26 August 2026

About this policy

Tidy Tooth Dental (ABN 48 623 503 524) (“we”, “us”) operates dental practices at 6/40 Train Street, Broulee NSW 2537; 29 Old Princes Highway, Batemans Bay NSW 2536; and 58 Beach Road, Batemans Bay NSW 2536. We are committed to protecting your personal information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the rules that apply to health service providers, including NSW health records legislation. This policy explains what we collect, why, and how you can access or correct your information. It applies to our patients and to visitors to this website.

What we collect

Your name, contact details, date of birth and emergency contact.
Medicare, health fund, DVA and concession details used for claims.
Health information — your dental and medical history, clinical notes, x-rays and imaging, referrals and treatment plans. This is “sensitive information” and is given extra protection under the law.
Payment details, which are processed by our payment providers — we do not store full card numbers.
Appointment and communication history, including online booking details.
Website and analytics data described under “Our website and online tools” below.

How we collect it

Mostly directly from you — in person, by phone or email, through our forms, or when you book online. With your consent we may also receive information from other health providers, such as a referring dentist, GP or specialist. Online bookings are made through Praktika, our practice management software provider — details you enter in the booking window are collected into our patient management system and handled under our agreement with Praktika. Where practicable, you may deal with us anonymously or using a pseudonym (for example, a general enquiry) — though providing dental care safely requires us to know who you are.

Why we use it

To provide safe, appropriate dental care and keep accurate clinical records.
To manage appointments, send confirmations, reminders and recalls.
To process payments and claims (including HICAPS, health funds, Medicare, the Child Dental Benefits Schedule and DVA where relevant).
To meet our legal, professional and insurance obligations.
With your consent, to send practice news or oral health information — you can opt out at any time via the unsubscribe link or by contacting us.

Who we share it with

The practitioners and clinical staff involved in your care within our practices.
Specialists, laboratories, imaging and pathology providers when you are referred.
Medicare, your health fund or DVA, to process claims.
My Health Record, where you participate and consent.
Trusted service providers who support the practice (practice management software, secure IT and payment processing), under confidentiality obligations.
Where required or authorised by law.

We do not sell your personal information. We do not share your clinical or health information with advertising or analytics platforms.

Our website and online tools

Our website uses cookies and third-party measurement tools, configured through Google Tag Manager:

Google Analytics — to understand how the site is used (pages viewed, device type, general location, and booking steps such as which clinic was chosen).
Meta (Facebook/Instagram) tools — to measure the effectiveness of our marketing.

These tools collect information such as device identifiers, browser information and pages visited. They are configured not to receive your name, contact details or any clinical information. Google and Meta may process this data on servers located overseas, including in the United States, under their own privacy policies. You can limit this collection by blocking or clearing cookies in your browser, using Google's Analytics opt-out, or adjusting your Meta ad preferences.

Our online booking window and embedded maps are provided by third parties and operate under their own privacy policies. Links to external websites are provided for convenience — we are not responsible for their content or privacy practices.

Storage and security

Your records are held in secure, access-controlled electronic systems. We take reasonable steps to protect your information from misuse, loss and unauthorised access. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme. We retain health records for the periods required in NSW — generally at least seven years from your last visit, or for children, until age 25.

Access and correction

You may request access to, or correction of, the personal information we hold about you. Contact us at smile@tidytooth.au or on (02) 4472 9535. We will verify your identity and respond within a reasonable time. In limited circumstances we may need to refuse a request — if so, we will explain why.

Complaints

If you have a concern about how we have handled your information, please contact us first so we can put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. For concerns about a health service itself, you can also contact the NSW Health Care Complaints Commission at hccc.nsw.gov.au or on 1800 043 159.

Changes to this policy

We may update this policy from time to time. The current version will always be published on this page.

Contact

Tidy Tooth Dental (ABN 48 623 503 524) · smile@tidytooth.au · (02) 4472 9535