Privacy Policy
1. INTRODUCTION
We respect your rights to privacy and comply with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). We are also bound by any applicable health privacy legislation.
CAN-A-BLISS PTY LTD trading as “WeCan” (ACN 666 440 419) (WeCan, we, us, our) is a telehealth clinic providing online medical consultations, including those related to medical cannabis. Our platform:
- Provides educational information on medical cannabis and general health matters.
- Facilitates confidential consultations with our network of licensed healthcare professionals and other affiliated healthcare service providers (collectively, Affiliated Providers).
This Privacy Policy explains how we manage your personal information, including our obligations and your rights. Please read this policy to understand how we handle personal information collected via our website (www.wecan.com.au), mobile applications, or through your use of our telehealth and related services (Services).
2. HOW WE COLLECT YOUR PERSONAL INFORMATION
2.1 We collect and hold your personal information fairly, lawfully, and without undue intrusion.
2.2 Where practical, we collect personal information directly from you.
2.3 We collect personal information when you:
- Visit our website, sign up for an account, or subscribe to our content.
- Make an enquiry or request telehealth services via our platform.
- Attend an online consultation with one of our Affiliated Providers.
- Contact us by phone, email, or through online enquiry forms.
- Complete online questionnaires, health assessments, or feedback surveys.
- Interact with our Services, including uploading personal information to applications operated by us.
2.4 We may also collect personal information from:
- Our Affiliated Providers (e.g., when a healthcare professional consults with you, prescribes medication, or updates your health records).
- Other healthcare service providers (e.g., pathology laboratories, pharmacists) who contribute to your care.
- Our group companies, business partners, contractors, or publicly available sources.
- Government databases (e.g., Medicare, My Health Record), where authorised by law.
- Any other third parties involved in delivering or supporting our Services.
2.5 If we collect your personal information from a third party, we will, where appropriate, ensure you are aware of this and how you can access, correct, or update that information.
3. TYPES OF PERSONAL INFORMATION WE COLLECT
3.1 We may collect personal information such as your name, date of birth, contact details (address, email, phone number), billing and shipping information, Medicare details, and records related to the Services you access.
3.2 With your consent or as otherwise permitted by law, we may also collect health information or other sensitive information, including medical history, prescriptions, symptoms, health goals, test results, and other data relevant to providing you with appropriate care.
3.3 If you choose not to provide requested personal information, we may be unable to offer the full range of our Services or respond to your enquiries.
4. OUR PURPOSES FOR HANDLING YOUR PERSONAL INFORMATION
4.1 We collect, hold, use, and disclose personal information to:
- Provide telehealth and related healthcare services, including verifying identity, maintaining health records, scheduling appointments, and issuing reminders.
- Enable secure consultations with our Affiliated Providers.
- Process payments, issue invoices, and arrange for the delivery of prescribed products.
- Communicate with you about appointments, treatment plans, product updates, and follow-up care.
- Offer you information about our Services, promotions, and events that may be of interest.
- Improve our Services through research, analytics, and user feedback.
- Comply with legal and regulatory obligations, including healthcare reporting requirements.
- Manage our business operations, including quality assurance, data handling, and compliance.
5. DISCLOSURE OF PERSONAL INFORMATION
5.1 We disclose personal information in accordance with the Privacy Act and other applicable laws.
5.2 We may disclose personal information to:
- Licensed healthcare practitioners and other Affiliated Providers involved in your care.
- Other healthcare service providers (e.g., pathology labs, pharmacists) as necessary.
- Our employees, contractors, and related entities who need access to perform their duties.
- Payment processors, IT service providers, cloud storage providers, and professional advisors who assist our operations.
- Government sources and agencies to meet healthcare, legal, or regulatory requirements.
- Emergency services if we or an Affiliated Provider believe there is an imminent risk to your health or safety.
5.3 We will not use or disclose your personal information for unrelated purposes without your consent or unless required or authorised by law.
6. PROTECTION OF PERSONAL INFORMATION
6.1 We store personal information securely, including in encrypted databases and secure cloud environments.
6.2 We have implemented appropriate technical, administrative, and physical safeguards to prevent unauthorised access, alteration, disclosure, or misuse of personal information.
6.3 Only personnel who need to perform relevant duties have access to personal information. We have procedures to ensure the secure and responsible handling of personal data.
6.4 We will retain personal information only as long as required to fulfil the purposes described or as required by law. When no longer needed, we will securely destroy or de-identify personal information.
7. DIRECT MARKETING
7.1 We may use your personal information to send you marketing materials about our Services, offers, or related healthcare information we believe may interest you.
7.2 You can opt out of marketing communications at any time by following the instructions in the communication or by contacting our Privacy Officer. Opting out will not affect your access to healthcare services.
8. COOKIES AND WEBSITE USE
8.1 We use cookies and similar technologies to enhance user experience, analyse traffic, and improve our Services. Cookies help us recognise your device and remember preferences.
8.2 You may adjust your browser settings to decline cookies. However, this may impact the functionality of our website.
9. ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION
9.1 You may request access to or correction of your personal information by contacting our Privacy Officer.
9.2 We will respond to your request within a reasonable timeframe. If we refuse access or correction, we will provide reasons as required by law.
10. RESOLVING PRIVACY CONCERNS
10.1 If you have questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact:
Privacy Officer
CAN-A-BLISS PTY LTD trading as WeCan (ACN 666 440 419)
[Lvl 8, Off 814, 25 Restwell Street, Bankstown, NSW, 2200
1300 033 440
10.2 We will endeavour to respond to any complaint within a reasonable period and seek to resolve it in good faith.
10.3 If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.
11. CHANGES TO THIS PRIVACY POLICY
11.1 We may update this Privacy Policy from time to time. We will post the updated version on our website. Your continued use of our Services following any changes indicates your acceptance of the updated Privacy Policy.
