PRIVACY STATEMENT

Document Name: Privacy Statement
Authorised by: Head of Corporate Compliance
Document Group: Policies
Version No: 3
Document Number: QMSP041
Issue Date: 18/08/2026

1. Privacy Statement

Altaira respects your right to privacy.

We are committed to managing your health information in a respectful way by adhering to Commonwealth and State privacy laws, including the Australian Privacy Principles (APPs) contained within the Commonwealth Privacy Act 1988.

This Statement is intended to provide a general overview of our compliance with the relevant legislative and regulatory requirements for Privacy and provide guidance in respect to the handling of personal information.

This Statement is intended to cover most personal information handled by us, but is not exhaustive.

If there are any queries about our handling of personal information, please view our Privacy Policy or contact humanresources@altaira.com.au.

2. Personal Information

Personal Information is any information identifying an individual, information about an individual; or information from which (either alone or together with other reasonably available information) an individual is identifiable.

3. How we Collect, Hold and Use Personal Information

Altaira collects different types of information about you.

Personal Identifying Information

This includes information from which you may be identified, such as your:

  • name, address, contact details
  • your occupation, qualifications and certifications for the role
  • Information in the CV or resume, and details of referees
  • It may also include information required for billing purposes, such as your health fund and Medicare information

Health Information and other Sensitive Information

This is identifiable information that relates to your medical history, your reason for seeking treatment and may include records or results from other providers and records and results of the treatment provided Altaira.

Altaira may also collect information about you from affiliated healthcare professionals and contracted service providers such as hospitals and pathology.

Other sensitive information that Altaira collects includes Police Clearance, NDIS worker screening checks vaccination records and other medical records required under the relevant Aged Care legislation and per the Altaira Mandatory Checks Policy.

We deal with individuals as suppliers, service providers or other businesses and we collect personal information incidentally to those dealings.

When collecting personal information, we will take reasonable steps to make those affected aware of the purposes for which we are collecting it.

Holding / Storage of Personal Information

We will take reasonable steps to protect all personal information from misuse, interference and loss as well as unauthorised access, modification or disclosure.

For example, information stored on our computer network is protected by security features and procedures.

Electronic records are stored in data centres and the data backups stored with cloud providers with facilities within the Australian territory.

We will endeavour to destroy or de-identify personal information in line with our professional standards and requirements.

Use of Personal Information

We will generally only use personal information for the purpose for which we collected it, and for related purposes we consider would be within your reasonable expectations.

We generally use personal information for the following purposes (as applicable in the circumstances):

  • To provide services for individuals such as referrals to other professionals and clients as needed;
  • To create and maintain an individual’s records;
  • To provide clients with information that we consider is likely to be of interest to then relating to our products or services;
  • To seek feedback from clients and perform market research; or
  • To engage in other activities where required or permitted by law.

4. Online privacy

This Statement and the Privacy Policy also sets out how we manage any services provided by us via the Internet, such as our website, email communications and social media.

We collect personal information about individuals if they send us an email or complete any online forms or applications.

Use of personal information collected through our Website or Marketing Channels

We will collect your personal information through our website.

We may also collect information that may be considered personal information through third party cookies and pixels.

We will take all reasonable steps to minimise the data collected by third party cookies and pixels, and will only use the information for a purpose identified in this Privacy Policy.

The primary purpose for which we collect your information on the Website is for administrative and internal business purposes related to the services we provide or may provide to you. Secondary purposes may include marketing and promotional activities.

Some third-party providers, including the AI tools, may store or process data overseas (most are US-based).

Cookies

Cookies are small files that are stored on your computer, tablet or mobile phone by a website which record your visit and collect statistical information.

Altaira uses cookies via our website to improve your browsing experience, track the number of website views and provide you with relevant information across our website and on third party sites including other websites and social media pages.

We use the information sourced from these cookies to help improve our website experience by creating more effective content and developing better user experiences.

Pixels and other tracking tools on Altaira website

Altaira sites currently runs tracking tools: Meta (Facebook) Pixel, TikTok Pixel, LinkedIn Insight Tag, and Google – Analytics, reCAPTCHA and the YouTube video player).

A consent banner is used to stop these firing until the visitor opts in. This tracking only runs if you accept it via the banner. Your choice can changed or withdrawn at any time.

Accepting “Marketing” means Altaira may show you ads on Facebook, TikTok or LinkedIn based on your visit, and how to opt out (via the banner selection).

Meta (Facebook) Pixel

Collects: pages visited, referring page, device and browser information, and a Meta cookie identifier that links the visit to the person’s Facebook/Instagram account if you have one.

Data goes to Meta Platforms and is used for ad measurement and retargeting (showing Altaira ads on Facebook/Instagram to past visitors).

TikTok Pixel — ID D6KGKCJC77U7OH6C2AKG

Collects: pages visited, device/browser information, and a TikTok identifier. Data goes to TikTok and is used for ad measurement and retargeting.

LinkedIn Insight Tag — Partner ID 8958388

Fires on every page.

Collects: pages visited (including job and career pages), IP address, device/browser information, and links the visit to the person’s LinkedIn profile if logged in. Data goes to LinkedIn and is used for ad analytics and retargeting.

Google

Three components:

  1. Google Analytics — collects pages visited, session behaviour, and device information for site analytics;
  2. reCAPTCHA — loads on all pages to protect the contact form, collects device/interaction signals to distinguish humans from bots;
  3. YouTube video player on the homepage — sets YouTube/Google cookies when the page loads.

All three send data to Google.

Altaira Allied Health site also runs Google Ads conversion tracking and a Birdeye reviews widget, both of which share data with third parties.

All platforms store data on servers outside Australia (US and elsewhere).

Marketing

Individuals may request not to receive marketing communications by contacting us, or by using the opt out function provided for in those communications.

If individuals do not opt out in either of these ways then the individual will be taken to have consented to receiving such communications from us.

Individuals may elect to re-join our marketing list at a later stage if they wish.

We will only use personal information for the purposes outlined, reasonably expected or with an individuals permission, unless we are required or permitted by law to do so without consent.

5. Complaints and Privacy Breaches

We treat privacy complaints very seriously and we aim to resolve them quickly and fairly. If any individual believe that a breach of their privacy has occurred, we encourage them to contact us to discuss their concerns.

If we receive a privacy complaint from you, or we become aware of a privacy breach ourselves, we will undertake a prompt investigation, which will include an assessment of whether the incident is likely to result in serious harm to any individuals.

In such a situation we will comply with the requirements of the Act which may require notification to the Office of the Australian Information Commissioner (OAIC) and affected individuals.

If you become aware of a data or privacy breach, please tell us immediately and it will be investigated by the Director and Altaira’s Privacy Officer. Please contact Altaira at: humanresources@altaira.com.au

6. Storage and Transmission of Personal Information Online

Unless we indicate encryption is being used prior to sending information, any information we exchange electronically cannot be guaranteed to be private and secure.

If we receive personal information, we will take reasonable steps to store it securely to prevent unauthorised access, modification, disclosure, misuse or loss.

7. Changes

We reserve the right to amend Privacy Statement at any time. A copy of the Privacy Policy is available from our website.

8. Further Information and Contact Details

Further information about the ways we manage personal information can be made via the relevant Operations Manager or by contacting humanresources@altaira.com.au.