Released July 2026
Saje Health Limited (Saje) is committed to protecting the privacy of personal information (including health and sensitive information) that we collect and hold.
This privacy policy explains how Saje handles personal information in accordance with the requirements of the Privacy Act 1988 (Cth) and the Health Records and Information Privacy Act 2002 (NSW) and its Health Privacy Principles. It explains:
the kinds of information that Saje may collect about you;
how Saje collects and holds personal information;
the purposes for which Saje collects, holds, uses and discloses personal information;
how Saje maintains the quality and security of your personal information;
how you can access the personal information Saje holds about you and seek to correct such information; and
the way in which you can complain about a breach of your privacy and how Saje will handle that complaint.
Scope
This policy applies to all employees and contractors of Saje including any medical practitioners appointed or credentialed with Saje; volunteers; students; and any other persons who in the course of their work have access to personal information and health information, whether by electronic means or otherwise.
This policy only applies to personal information, including health information, and does not include de-identified information.
Definitions
De-identified Information
Information or an opinion about a person whose identity cannot be ascertained from the information or opinion.
Health Information
personal information or an opinion about:
an individual's physical or mental health or disability (at any time);
an individual's express wishes about the future provision of health services for themselves; or
health service provided, or to be provided, to an individual;
other personal information collected to provide, or in providing, a health service.
Personal Information
Information or an opinion about an identified individual, or an individual who is reasonably identifiable:
whether the information or opinion is true or not; and
whether the information or opinion is recorded in a material form or not.
Personal Information includes both health information and sensitive information. Personal Information related to a deceased person is protected by privacy laws for up to 30 years.
Sensitive Information
a.personal information or opinion about an individual's:
i.racial or ethnic origins;
ii. political opinions or political associations;
iii. philosophical beliefs or religious beliefs or affiliations;
iv. sexual preferences or practices; or
v. criminal record; or
b. health information about an individual; or
c.genetic information about an individual that is not otherwise health information.
Our commitment
Saje is committed to protecting the privacy of personal information including sensitive information which it collects and holds.
Saje complies with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and other privacy laws (including the Health Records and Information Privacy Act 2002 (NSW)) which govern the way in which organisations (such as Saje) collect, hold, use and disclose personal information.
Collection and use of personal information
Types of personal information collected by Saje
Saje will only collect information which is necessary to provide you with health care services or appropriately manage and conduct our business. This may include (as applicable):
a. Patients / clients
Saje collects information from you which is necessary to provide you with health care services, or if you enquire about our health care services. This includes collecting personal information such as your name, address, contact number, email address, your health history, family history, past and current treatments, lifestyle factors, and any other information which is necessary to assist the health care team in providing appropriate care.
b. Students, contractors and volunteers
Saje collects information from you which is necessary to properly manage and operate its business. This includes collecting personal information such as your name, address and contact details, professional experience, qualifications and past employers, and any other information which may be necessary to appropriately conduct its business.
c. Job applicants
Saje collects information from you which is necessary to assess and engage job applicants. This includes collecting personal information such as your name, address and contact details, professional experience, qualifications, references and past employers, and any other information which is necessary to process your job application.
How we collect personal information
We will endeavour to collect your personal information directly from you where this is possible, however, sometimes we may need to collect information about you from third parties, such as:
a.relatives, friends, authorised representatives or registered supporters involved in your care;
b. another health service provider;
c. past employers and referees;
d. government agencies;
e.private health funds or other insurer responsible for payment of our services.
We will only collect information from third parties where:
a. you have consented to such collection;
b.such collection is necessary to enable us to provide you with appropriate health care services (such as in the case of an emergency medical treatment);
c.such collection is reasonably necessary to enable us to appropriately manage and conduct our business; or
d.it is otherwise legally permissible for us to do so.
How Saje uses your personal information
Saje will only use your personal information for the purpose for which it was collected by Saje (primary purpose), unless:
a.there is another purpose (secondary purpose) and that secondary purpose is directly related to the primary purpose, and you would reasonably expect, or Saje has informed you, that your personal information will be used for that secondary purpose;
b. you have given your consent for your personal information to be used for a secondary purpose; or
c.Saje is required or authorised by law to use your personal information for a secondary purpose.
Some examples of how Saje may use your personal information include, to:
a.provide health care services to you;
b.provide any ongoing health related services to you;
c.appropriately manage our business, such as assessing insurance requirements, conducting audits, and undertaking accreditation processes;
d.assist it in running our business, including quality assurance programs, billing, improving its services, implementing appropriate security measures, conducting research and training for personnel;
e. where required, effectively communicate with third parties, including Medicare Australia, My Health Record and private health insurers.
Complete and accurate details
It is important that you provide us with complete and accurate information when receiving health services. If the personal information you provide us is incomplete or inaccurate, or you withhold personal information, this may impact the services provided to you.
Anonymity and pseudonymity
Where possible and practicable, you will have the option to deal with Saje on an anonymous basis or by using a pseudonym. However, this may limit our ability to provide you with the services that you need or are enquiring about or to engage with you effectively.
Surveillance
Saje uses camera surveillance (commonly referred to as CCTV) in the psychedelic-assisted therapy room only, for the purpose of maintaining the safety and security of patients and personnel during treatment. This surveillance may also collect and store personal information, and Saje will comply with all privacy legislation in respect of any such information. Signage and / or verbal notifications are used to make patients aware that surveillance is in operation in that room.
Disclosing your personal information
Saje may disclose your personal information for the primary purpose for which that information has been collected (for example, the provision of health care), or for a related secondary purpose where this is permissible. This includes when disclosure is necessary to provide services to you, to assist us in running our organisation, to facilitate the provision of quality and efficient health care services in NSW or for security reasons.
We may provide your personal information to:
a.third parties involved in your care, including healthcare professionals outside of Saje, such as senior medical experts and specialists who have been asked to assist in diagnosis or treatment;
b.third parties contracted to provide services to Saje, such as entities contracted to assist in accreditation or survey processes;
c. private health insurance providers and Medicare Australia;
d.anyone authorised by you to receive your personal information including relatives, carers, close friends, guardians (unless Saje has been informed otherwise and your consent may be express or implied);
e.anyone Saje is required by law to disclose your personal information to, which may include NSW Police, NSW Ombudsman, NSW Ministry of Health, Privacy Commissioner and the Health Care Complaints Commission.
Third party service providers
Where permissible under privacy laws we may disclose personal information to external service providers who may use, process and store that information overseas. For example, we use overseas service providers to help us provide and improve our services (for example, by hosting data, facilitating payments, tracking website use). These providers may be located in Europe or other international locations which have differing privacy obligations. Where possible, we require them to take similar measures as those required under Australian privacy legislation.
Data storage, quality and security
Data quality
Saje will take reasonable steps to ensure that your personal information which is collected, used or disclosed is accurate, complete and up to date.
Storage
All personal information held by Saje is stored securely in either hard copy or electronic form and for periods set out in any applicable legislation or policies. Patient records are held in Saje's cloud-hosted clinical system under a data processing agreement that requires the vendor to act on Saje's instructions, encrypt information in transit and at rest, and store it within Australia.
How are Artificial Intelligence (AI) Scribes used?
Some of our practitioners may use the AI scribe feature within Tacklit, the clinical software platform we use to manage your care. The AI scribe uses an audio recording of your consultation to generate a clinical note for your health record. When this feature is used:
transcription is performed exclusively within Australia;
the audio file is destroyed once the transcription is complete;
sensitive, personal identifying information is removed as part of the transcription;
post-redaction, the transcript is encrypted. It is not stored in its original form;
only the concerned clinician can access your health data;
by default, data is stored on our Australian servers for only 7 days before being deleted.
The practice will only use data from our digital scribe service to provide healthcare to you.
Data security
Saje strives to ensure the security, integrity and privacy of personal information, and will take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Saje reviews and updates (where necessary) its technical and operational security measures to keep your information secure.
Online transfer of information
While Saje does all it can to protect the privacy of your personal information, no data transfer over the internet is 100% secure. When you share your personal information with Saje via an online process, it is at your own risk.
There are ways you can help maintain the privacy of your personal information, including:
a. always closing your browser when you have finished your user session;
b. always ensuring others cannot access your personal information and emails if you use a public computer; and
c.never disclosing your user name and password to third parties.
Notifiable data breaches
We are required to notify particular individuals and the Office of the Australian Information Commissioner about eligible data breaches.
An individual will be notified if they are likely to be at risk of serious harm and the likely risk of harm is unable to be prevented with remedial action.
Use of cookies
A 'cookie' is a small data file placed on your electronic device which lets Saje identify and interact more effectively with your computer. While cookies allow a computer to be identified, under Australian law they do not contain personal information about a specific individual.
Cookies are industry standard and are used by most websites, including those operated by Saje. Cookies can facilitate a user's ongoing access to and use of a website. Cookies allow Saje to customise our website to the needs of our users. For some of our online services, cookies are necessary to provide you with some of our features.
Links to other sites
Saje may provide links to third party websites. These linked sites may not be under our control and Saje is not responsible for the content or privacy practices employed by those websites. Before disclosing your personal information on any other website, we recommend that you carefully read the terms and conditions of use and privacy statement of the relevant website.
Accessing and amending your personal information
You have a right to access the personal information which Saje holds about you. If you make a request for access to your personal information, we will ask you to verify your identity and specify the information you require.
You may also request Saje make an amendment to any of your personal information if you consider that it contains information which is incomplete, incorrect, out of date, or misleading. Saje will consider your application and will respond in accordance with the privacy law.
You can contact Saje about any privacy issues as follows:
The Privacy Officer, Saje
Nicky Christie
02 7235 0066
While Saje aims to meet all requests for access to personal information, in a small number of cases and where permitted to do so by law, Saje may not give access or may do so only under conditions.
Complaints on breach of privacy
If you have a complaint about Saje's information handling practices or consider we have breached your privacy, you can lodge a complaint with:
a. The Privacy Officer, on the contact details listed above; or
b. the Office of the Australian Information Commissioner: Phone 1300 363 992, or fill out an enquiry form at https://www.oaic.gov.au/contact-us
Saje deals with all complaints in a fair and efficient manner.
Related legislation and standards
This policy responds to, and should be read in conjunction with, the following:
Privacy Act 1988 (Cth)
Health Records and Information Privacy Act 2002 (NSW)
Health Records and Information Privacy Regulation 2022 (NSW)
My Health Records Act 2012 (Cth)