Privacy Addendum

PRIVACY ADDENDUM – CLINICS AND PRACTITIONERS

NAD AUSTRALIA PTY LTD
ABN 83 626 494 282
PO BOX 627, Moorebank NSW 2170
Email: admin@nadaustralia.com
Governing Law: New South Wales, Australia

1. Purpose

1.1 This Privacy Addendum ("Addendum") applies to all Clinics and Practitioners registered on the NAD Australia Platform.

1.2 It outlines privacy responsibilities to ensure compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1.3 NAD Australia is committed to protecting privacy and transparency. We do not sell, trade, or rent any personal or client data to third parties.

2. Independent Data Handling

2.1 NAD Australia acts solely as a technology facilitator, allowing Clients to view information and communicate with independent Clinics and Practitioners.

2.2 NAD Australia does not take, manage, or facilitate bookings for treatment and does not handle any clinical, medical, or health records.

2.3 Each Clinic or Practitioner is an independent data controller responsible for their own collection, storage, and handling of Client information.

2.4 NAD Australia does not qualify as a "health service provider" under the Privacy Act 1988.

3. Clinic and Practitioner Obligations

3.1 Each Clinic and Practitioner must: a) Collect and use personal information in compliance with the APPs; b) Obtain valid informed consent before collecting any Client data; c) Maintain an up-to-date Privacy Policy accessible to Clients; d) Ensure secure data storage and limit access to authorised personnel; e) Promptly notify NAD Australia and affected Clients of any data breach; f) Cooperate fully with NAD Australia in any privacy-related investigation or complaint.

4. Data Shared Through the Platform

4.1 The Platform may transmit limited operational data such as: Client name and contact details; Service interest or communication details; Payment or transaction confirmations (if applicable).

4.2 NAD Australia does not access, modify, or use Client data beyond what is required for technical functionality.

4.3 NAD Australia does not retain medical, treatment, or health records beyond operational necessity.

5. Security Measures

5.1 NAD Australia employs commercially reasonable security controls, including encryption, firewalls, and restricted data access.

5.2 Clinics and Practitioners must implement their own safeguards, including password protection, secure networks, and staff confidentiality protocols.

5.3 NAD Australia is not liable for any data loss, breach, or unauthorised access resulting from a Clinic's or Practitioner's systems.

6. Data Breach Notification

6.1 If a data breach occurs involving Client personal information held by a Clinic or Practitioner, they must: a) Comply with the Notifiable Data Breaches (NDB) Scheme under the Privacy Act 1988; b) Notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required; c) Notify NAD Australia within 24 hours of discovery.

7. Indemnity

7.1 Clinics and Practitioners indemnify NAD Australia Pty Ltd and its representatives against any claims, penalties, or damages arising from: a) Breach of this Addendum or privacy law; b) Unauthorised access, use, or disclosure of personal information; or c) Failure to obtain necessary client consents or to notify affected individuals.

7.2 This indemnity survives termination of the Clinic's or Practitioner's participation.

8. Limitation of NAD Australia's Liability

8.1 To the fullest extent permitted by law, NAD Australia disclaims all liability for any claim, loss, or damage arising from: a) A Clinic's or Practitioner's handling of Client data; b) A privacy or data breach within their own systems; or c) Any unauthorised disclosure of information caused by third parties outside NAD Australia's control.

9. Termination

9.1 NAD Australia may suspend or terminate a Clinic's or Practitioner's access to the Platform immediately upon breach of this Addendum.

9.2 Upon termination, all Client data obtained through the Platform must be securely deleted except where retention is required by law.

10. Governing Law

10.1 This Addendum is governed by the laws of New South Wales, Australia.

10.2 The parties submit to the exclusive jurisdiction of the courts of New South Wales.