Last reviewed: May 2026 (section 8 updated to reflect the addition of Google Analytics with prior consent).
This policy applies to drJ Clinics Pty Ltd and to Dr Jeremy Vaughan Cumpston (AHPRA registration MED0001152748) operating at Double Bay and St Leonards in New South Wales, Australia.

1. What this policy covers

This policy explains how we collect, hold, use and disclose personal information, and how you can access or correct your information or raise a concern. “Personal information” has the meaning given to it in the Privacy Act 1988 (Cth) — it includes information that identifies you or that could be used to identify you, including health information.

2. The kinds of information we collect

The kinds of personal information we collect depend on how you interact with the clinic:

Through this website: contact details and any information you choose to provide in the contact or consultation-request forms. Server logs may record technical information (IP address, browser type, pages visited) for security and diagnostic purposes.
As a patient: identifying information (name, date of birth, contact details), Medicare and private-health information where relevant, medical history, current medications, allergies, the details of consultations and procedures performed, photographs (only where consent has been given and only as part of the medical record), and any information you provide about insurance or third-party billing.
Through general enquiries: the information you provide to us by phone or email.

3. How we collect personal information

We collect personal information directly from you wherever possible — through forms on this website, by phone, by email, and at consultations and procedures. In some cases we may collect information about you from a referrer (such as your usual general practitioner or another treating specialist) where you have asked us to.

4. How we use personal information

We use personal information for the purposes for which it was collected, including:

Providing clinical care — consultation, treatment planning, performing procedures, follow-up, and managing complications.
Communicating with you about your care, appointments, and accounts.
Maintaining and operating the practice, including billing, record-keeping, and quality improvement.
Complying with our legal and regulatory obligations as a registered medical practitioner.

5. When we disclose personal information

We do not sell personal information. We may disclose personal information in the following circumstances:

To other treating health practitioners involved in your care, where you have consented or where disclosure is necessary for the provision of care.
To Medicare, the Department of Veterans’ Affairs, or private health insurers, in connection with billing.
To service providers who support the operation of the practice (for example, secure clinical software providers, pathology services, our accountants and IT support), under confidentiality obligations.
To regulators — including AHPRA — where required by law.
In response to a court order, subpoena, or other legal compulsion.
Where you have consented to the disclosure for another purpose.

6. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. This includes physical security at our premises, restricted access to clinical software, secure password practices, and contractual obligations with our service providers.

No website transmission is entirely secure. Please do not include sensitive medical information in website forms; we will follow up by phone or in person to discuss anything sensitive.

7. Retention

Medical records are retained in line with the requirements of New South Wales law and AHPRA’s professional guidelines. In most circumstances, adult records are retained for at least seven years from the date of last entry, and records of patients who were minors when the records were created are retained until the patient’s 25th birthday.

8. Cookies and website analytics

The drjclinics.com.au website uses Google Analytics 4 to understand which pages visitors find useful and to identify problems with the site. Google Analytics is only loaded after you accept the cookie banner shown on your first visit; until you accept, no Google scripts are fetched and no analytics cookies are set. Your choice is remembered in your browser’s local storage.

If you accept, Google Analytics sets a small number of first-party cookies (typically _ga and _ga_*) and shares the following with Google as your data processor:

the pages you visit on this site and how long you spend on each;
your approximate location (country/city level), derived from your IP address — the full IP address is not stored, as IP anonymisation is enabled;
technical information about your device and browser (screen size, operating system, browser version);
the website or search term that referred you here.

We have configured the analytics integration to minimise data collection: IP anonymisation is on, Google Signals is disabled, and ad-personalisation signals are disabled. The data is used only to improve this website — it is not used for advertising, remarketing, or any clinical purpose, and it is not connected to any patient record.

Google may transfer information collected to, and store it in, the United States or other countries where Google operates. By accepting the banner you consent to that transfer for the purpose described above. You can withdraw consent at any time by clearing your browser’s site data for drjclinics.com.au, or by installing the Google Analytics opt-out browser add-on.

Aside from Google Analytics, this website does not set any non-essential cookies and does not use any other third-party trackers, pixels, or advertising tags.

9. Accessing or correcting your information

You have the right to request access to the personal information we hold about you, and to request correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading. Please send your request in writing to info@drjclinics.com.au or by post to the Double Bay clinic. We may need to verify your identity before providing access. In some cases, the law permits or requires us to refuse access — we will explain the reasons if that occurs.

10. How to raise a privacy concern

If you have a concern about how we have handled your personal information, please contact us first at info@drjclinics.com.au or 0452 108 308. We will acknowledge your complaint within five business days and respond substantively within 30 days.

If you are not satisfied with our response, you can raise the matter with the Office of the Australian Information Commissioner (OAIC):

Online: oaic.gov.au
Phone: 1300 363 992

11. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the date of last review noted at the top.

12. Contact

drJ Clinics
Level 1, Kiaora Place, 451 New South Head Road
Double Bay NSW 2028
0452 108 308
info@drjclinics.com.au

Privacy policy.