Privacy Policy - nursable

Updated: March 2026

Privacy

This Privacy Policy explains how Concept Clinics Australia Pty Ltd (ABN 57 642 637 401) trading as nursable (“nursable”, “we”, “our” or “us”) collects, holds, uses and discloses your personal information, and how you can contact us if you have any questions, concerns, or requests regarding your information.

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs).

This Policy applies to personal information collected through:

– our website;

– our online platform and software;

– forms, bookings and enquiries;

– email, phone and social media communications;

– educational, clinical and business support services we provide; and

– any other interactions you have with us.

Who we are

Concept Clinics Australia Pty Ltd

ABN: 57 642 637 401

Trading as: nursable

Address:

Suite G, 450–460 Chapel Street

South Yarra VIC 3141

Australia

Email: hello@nursable.com.au

Phone: 0408 880 086

Types of personal information we collect and hold

The types of personal information we collect will depend on the nature of your relationship with us and the services you use.

We may collect personal information such as:

– your name;

– date of birth;

– gender;

– phone number;

– email address;

– postal or residential address;

– business or clinic name;

– professional registration details or qualifications (where relevant);

– billing and payment details;

– information about your use of our website, platform or services;

– records of your enquiries, communications and support requests;

– information relating to orders, bookings, purchases and transactions;

– marketing preferences;

– social media interactions; and

– any other information you provide to us directly.

If you are a customer, practitioner, contractor, employee applicant, supplier, or other business contact, we may also collect information relevant to that relationship.

Sensitive information and health information

In some circumstances, we may collect sensitive information or health information (as those terms are defined under the Privacy Act), particularly where our services involve healthcare, aesthetic practice support, clinical education, patient support, prescribing support, compliance support, treatment planning, or related healthcare services.

Depending on how you use our services, this may include:

– patient registration information;

– health questionnaires or screening information;

– medication and prescription-related information;

– treatment history;

– allergies or contraindications;

– medical history;

– consultation notes;

– before-and-after photographs or clinical images;

– appointment and service records;

– incident or complication management information; and

– other information relevant to providing clinical or support services.

We will only collect sensitive information where it is reasonably necessary for our functions or activities, and where permitted or required by law, or with your consent.

If you provide us with personal information about another person (including a patient, child or dependant), you must have the authority or consent to do so.

How we collect your personal information

We generally collect personal information directly from you when you:

– contact us by phone, email, website form, social media or other means;

– create an account or use our platform;

– place an order or make a booking;

– attend training, workshops, webinars or events;

– request support or make an enquiry;

– submit forms, surveys or applications;

– interact with our website, platform, software or digital tools; or

– otherwise engage with us.

We may also collect personal information from third parties where permitted by law, including:

– healthcare practitioners;

– authorised representatives;

– prescribing practitioners or clinical support providers;

– service providers and software platforms;

– payment providers;

– booking or telehealth systems;

– referral sources;

– publicly available sources; or

– any person or organisation authorised to provide us with your information.

Why we collect, hold, use and disclose your personal information

We collect, hold, use and disclose personal information for purposes related to operating our business and providing our services.

This may include to:

– provide products, services, software, support or information to you;

– create and manage your account;

– process orders, payments, deliveries and bookings;

– facilitate prescribing, treatment support, healthcare or clinical-related services;

– provide education, training, events and community support;

– provide customer service and technical support;

– communicate with you about your account, orders, bookings or enquiries;

– manage complaints, incidents, adverse events or complications;

– verify identity or professional eligibility where required;

– improve our platform, services and user experience;

– maintain business records and internal administration;

– comply with legal, professional, regulatory or contractual obligations;

– detect, investigate and prevent fraud, misuse, security incidents or unlawful conduct;

– send service updates, reminders and administrative communications;

– send marketing communications where permitted by law; and

– otherwise operate and improve our business.

Where appropriate, we may also use de-identified or aggregated information for internal reporting, service improvement, analytics, education, quality assurance and business planning.

Automated tools and technology

We may use software tools and automated technologies to support our operations and improve efficiency, including tools used for:

– appointment and booking workflows;

– communications and support;

– form processing;

– clinical documentation support;

– workflow automation;

– analytics and reporting; and

– transcription or summarisation support (where applicable).

Where these tools are used in connection with personal or health information, we take reasonable steps to ensure they are used appropriately and securely.

Disclosure of personal information to third parties

We may disclose your personal information to third parties where reasonably necessary for the purposes set out in this Policy, including to:

– healthcare practitioners, prescribing practitioners, pharmacists, or other clinical providers involved in care or service delivery;

– contractors, staff, administrative support personnel and authorised representatives;

– service providers who assist us in operating our business, including:

– IT and software providers;

– cloud hosting providers;

– payment processors;

– booking and scheduling platforms;

– communications and messaging providers;

– training or education platforms;

– customer support providers;

– legal, accounting and professional advisers;

– insurers;

– couriers or fulfilment providers;

– marketing, analytics or website support providers;

– government, regulatory, legal or law enforcement bodies where required or authorised by law;

– any person or organisation you have authorised us to deal with; and

– any other party disclosed to you at the time of collection or otherwise permitted by law.

We do not sell your personal information.

Where health or sensitive information is involved, we will only disclose it where reasonably necessary, with consent where required, or as otherwise permitted or required by law.

Overseas disclosure of personal information

Some of our service providers or technology providers may store or process personal information outside Australia.

This may occur, for example, where we use cloud-based systems, software providers, communication tools, analytics tools, or secure technology infrastructure hosted overseas.

Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles the information in a manner consistent with Australian privacy law.

If you would like more information about whether your personal information may be stored or processed overseas, you can contact us using the details below.

How we store and protect your personal information

We hold personal information electronically and, in some cases, in hard copy form.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps may include:

– secure software systems;

– password protection and access controls;

– staff and contractor confidentiality obligations;

– restricted access to sensitive records;

– encrypted or secure cloud-based systems where available; and

– secure disposal or de-identification of information when no longer required.

While we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Marketing communications

We may use your personal information to send you information about our products, services, training, updates, events, offers or other business-related communications that we think may be relevant to you.

You can opt out of receiving marketing communications from us at any time by:

– clicking the unsubscribe link in an email;

– contacting us directly; or

– emailing us at hello@nursable.com.au

Even if you opt out of marketing communications, we may still send you important service, transactional, clinical, safety or administrative communications.

Website use, cookies and analytics

When you use our website or digital services, we may collect certain information automatically, including:

– IP address;

– browser and device information;

– pages viewed;

– referring websites;

– session activity;

– approximate location information; and

– interactions with our website or content.

We may use cookies, pixels, tags, analytics tools and similar technologies to:

– operate and improve our website and platform;

– understand website usage and performance;

– remember user preferences;

– improve functionality and user experience;

– support security and fraud prevention; and

– help us understand the effectiveness of our marketing and communications.

Some of these tools may be provided by third parties such as website hosting, analytics, or advertising providers.

You can usually manage cookies through your browser settings, although disabling cookies may affect website functionality.

Accessing and correcting your personal information

You may request access to the personal information we hold about you, and you may request that we correct information that is inaccurate, incomplete or out of date.

Requests should be made using the contact details below.

We may need to verify your identity before processing your request.

We will respond within a reasonable time and, where we are unable to comply with a request, we will provide reasons where required by law.

We do not charge a fee to make a request, although in some circumstances we may charge a reasonable administrative fee for providing access.

Complaints

If you have any questions, concerns or complaints about how we handle your personal information, please contact us using the details below.

We will investigate your complaint and aim to respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

How to contact us

If you would like to contact us about this Privacy Policy, or if you wish to access or correct your personal information, please contact us using the details below: