Last updated: June 2026

1. Purpose of this Privacy Policy

Red Hill Day and Night Pharmacy is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how personal information is collected, held, used, disclosed, stored, and managed in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy applies to Red Hill Day and Night Pharmacy and its pharmacy services, clinical services, digital services, customer communications, loyalty-related activities, and associated business operations described in this document.

2. Who We Are

Red Hill Day and Night Pharmacy
ABN 75 156 478 980
152 Musgrave Road, Red Hill QLD 4059
Email: redhill@pinnaclepharmacy.com.au
Phone: 07 3369 4344
Mail: 152 Musgrave Road, Red Hill QLD 4059

3. The Personal Information We Collect

The personal information collected depends on the nature of the interaction with the pharmacy. This may include the following categories:

Pharmacy services

·        Name, date of birth, residential address, and contact details;

·        Medicare number, DVA number, concession card details, and other government identifier information relevant to pharmacy services;

·        Health information, including medical conditions, medications, allergies, health concerns, prescription details, and medication history

·        Healthcare provider details, including treating doctor details where relevant.

·        Identity verification documents, such as a driver license, where required by law for certain medicines or services;

·        Payment and billing information.

Clinical and health services

·        Consultation records, health assessments, vaccination records, immunisation history, blood pressure readings, blood glucose readings, and other health measurements;

·        Information relating to medication reviews, dose administration aids, compliance programs, and referrals to or from other healthcare providers.

Loyalty and customer programs

·        Name, address, email address, phone number, date of birth, purchase history for eligible items, rewards points information, redemption history, and marketing preferences.

Digital services

·        Information provided through websites, mobile applications, online forms, or other digital platforms;

·        Records of interactions with digital services and technical information such as IP address and device information.

Disability and aged care services

·        NDIS participant details, plan information, care needs assessments, support requirements, aged care referral information, and service delivery information;

·        Information provided by family members, carers, or support coordinators where relevant to service delivery.

Employment and business dealings

·        For employment applicants, contact details, work history, qualifications, and references.

·        For contractors and suppliers, business contact information, ABN details, and payment details.

4. How Personal Information Is Collected

Personal information may be collected directly from individuals, from third parties, and in limited cases from publicly available sources where reasonably necessary for the pharmacy’s functions or activities.

Information collected directly

Personal information may be collected directly when an individual:

·        registers as a customer or patient;

·        presents a prescription for dispensing;

·        purchases products or services;

·        participates in clinical services such as consultations, vaccinations, or health checks;

·        joins a loyalty program or requests paperless receipts;

·        uses a triage system, consultation pod, website, mobile application, or other digital services; or

·        contacts the pharmacy in person, by phone, online, or by completing a form or questionnaire

Information collected from third parties

Personal information may also be collected from third parties, including:

·        doctors, specialists, hospitals, pathology providers, and other healthcare professionals;

·        Medicare, the Department of Veterans’ Affairs, NDIS, My Aged Care, and other government agencies;

·        prescription exchange services and other pharmacies, including where prescriptions are transferred; and

·        service providers, technology platforms, family members, carers, or support coordinators where appropriate

Sensitive information, including health information, will only be collected with consent unless collection is required or authorised by law. Consent may be express or implied depending on the circumstances.

5. Why Personal Information Is Collected, Held, Used and Disclosed

Personal information is collected, held, used, and disclosed for purposes connected with the operation of the pharmacy and the provision of related services.

Primary purposes

These purposes include:

·        dispensing medicines safely, including identity verification, medication management, and clinical safety checks;

·        providing pharmacy and healthcare services, including vaccinations, consultations, screenings, medication reviews, and related professional services;

·        meeting legal, regulatory, professional, and record-keeping obligations;

·        processing purchases, payments, and receipts;

·        administering loyalty programs and related member services; and

·        delivering disability services, aged care services, and associated support activities.

Secondary purposes

Where permitted by law, personal information may also be used for:

·        improving services, training staff, and evaluating service quality;

·        sending service-related communications such as appointment confirmations, prescription reminders, follow-up information, and health information;

·        marketing products, services, health programs, or offers where consent has been provided;

·        business administration, operational management, and service development; and

·        research, planning, and public health improvement activities using de-identified information where appropriate.

Personal information will not be used or disclosed for unrelated purposes without consent unless required or authorised by law.

6. Who Personal Information May Be Shared With

Personal information may be disclosed where reasonably necessary for the purposes described in this Privacy Policy, including to the following categories of recipients:

Healthcare and professional recipients

·        doctors, specialists, hospitals, pathology providers, emergency services, other pharmacies, and other healthcare providers involved in care;

·        nurse practitioners and healthcare professionals engaged in service delivery;

·        NDIS providers, support coordinators, and aged care service providers; and

·        professional advisers and professional indemnity insurers where appropriate.

Government and regulatory recipients

·        Medicare, Services Australia, the Department of Veterans’ Affairs, NDIS, My Aged Care, AHPRA, the Pharmacy Board of Australia, state or territory health departments, medicines regulators, and law enforcement bodies where required or authorised by law.

Service providers and business partners

·        technology providers supporting dispensing systems, workflow systems, point-of-sale systems, websites, digital platforms, and cloud-based services;

·        banks and payment processors;

·        wholesalers and suppliers where relevant to stock management and service delivery; and

·        marketing and communications providers where consent has been given.

Other authorised recipients

·        family members, carers, guardians, or authorised representatives where consent has been given or disclosure is otherwise permitted by law; and

·        any other person or entity authorised by the individual.

7. Overseas Disclosure and Cloud Services

We use a range of cloud-based and technology services to operate our pharmacy and related services. These include email and collaboration platforms, document storage and backup services, and pharmacy and clinical systems. Some service providers or technology platforms used by the pharmacy may store, process, back up, or permit access to personal information outside Australia, including in the United States, the European Union and other regions where they operate data centres.

Where personal information is disclosed overseas, reasonable steps will be taken to ensure the recipient handles the information in a manner consistent with Australian privacy law, unless an exception under the Privacy Act 1988 (Cth) applies. Where practical, further information about overseas disclosure arrangements can be requested using the contact details in this Privacy Policy.

8. Storage and Security

Reasonable steps are taken to protect personal information from misuse, interference, loss, and from unauthorised access, modification, or disclosure.

These steps may include:

·        secure storage of paper records in restricted-access areas;

·        security systems and controlled access to staff-only areas;

·        password-protected systems, encryption, security updates, and system monitoring; and

·        privacy training, confidentiality obligations, and access controls for staff and contractors.

Personal information is retained only for as long as necessary for the relevant purpose or as required by law, professional standards, or record-keeping obligations. When no longer required, personal information is securely destroyed or de-identified.

9. Access and Correction

An individual may request access to personal information held about them and may request correction of information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

To make a request, contact the pharmacy using the details in section 2 and provide enough information to identify the relevant records. Identity may need to be verified before access or correction is processed.

Access requests are generally handled within 30 days. No fee is charged for making a request, although a reasonable administrative fee may be charged for providing access to large volumes of information.

Access or correction may be refused in circumstances permitted by law, including where access would pose a serious threat to life, health or safety, unreasonably affect another person’s privacy, be unlawful, prejudice legal proceedings, or where the request is frivolous or vexatious. If a request is refused, written reasons will generally be provided unless it would be unreasonable or unlawful to do so.

10. Marketing Communications

The pharmacy may contact individuals by email, SMS, phone, or mail for service-related and, where consent has been given, marketing-related purposes.

Marketing communications can be opted out of at any time by using the unsubscribe facility in an email, replying STOP to an SMS, updating preferences, or contacting the pharmacy directly. Essential service communications, such as prescription notifications or safety-related communications, may still be sent where necessary for service delivery.

Where an individual joins a loyalty or rewards program, program-related communications may still be sent in connection with administration of that program, even if broader marketing preferences are changed, subject to applicable law and the individual’s communication choices.

11. Website and Digital Services

Websites and digital services may use cookies and similar technologies to remember preferences, understand usage, and improve functionality and user experience.

Cookie settings can usually be managed through a web browser, although disabling cookies may affect how certain digital features operate. External websites linked from pharmacy websites or digital platforms are not controlled by the pharmacy, and their privacy practices should be reviewed separately.

12. Children’s Privacy

Personal information is not knowingly collected from children under 18 without parent or guardian consent unless the collection is required for healthcare service delivery, permitted or required by law, or the young person has sufficient maturity and capacity to provide consent.

Parents and guardians may request access to and management of a child’s information, subject to applicable legal and professional obligations.

13. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, technology, services, or business practices. The current version will be made available on the pharmacy’s website or on request.

Where appropriate, material changes may also be notified by website notice, in-store notice, or another suitable communication method.

14. Privacy Complaints

If there is a concern about how personal information has been handled, a privacy complaint may be made using the contact details in section 2. The complaint should include the complainant’s contact details, the nature of the concern, relevant dates or circumstances, and the outcome sought.

The pharmacy will generally acknowledge a privacy complaint within 7 days, investigate the matter, and provide a written response within 30 days or advise if more time is required.

If the response is not satisfactory, a complaint may be made to the Office of the Australian Information Commissioner (OAIC)

Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Mail: GPO Box 5218, Sydney NSW 2001

15. Special Note about Health Information

Health information is treated as sensitive information and handled with additional care under Australian privacy law. Health information is only collected, used, and disclosed with consent, where necessary to provide healthcare services, or where otherwise required or authorised by law.

Health information is also handled in accordance with applicable professional obligations, pharmacy practice standards, and confidentiality requirements.

Red Hill Day and Night Pharmacy acknowledge the importance of your privacy and is committed to maintaining the trust you place in us with your personal information.