How your information is handled.
Hallam Natural Medicine collects only what is necessary to provide care, stores it securely, and never shares it with third parties for marketing. Health information is treated as sensitive information under the Australian Privacy Principles.
At a glance
- Privacy Act 1988 (Cth) and the Australian Privacy Principles
- Health Records Act 2001 (Vic)
- Records held in Cliniko, stored in Australia
- Never sold, rented or used for advertising
Who this policy covers
This policy applies to Hallam Natural Medicine, operated by Adrian Charles Hallam (ABN 67 474 826 824) as a sole trader. It covers everyone who contacts the practice, books an appointment, or works with Adrian as a client, whether by telehealth anywhere in Australia, or in person in Warrnambool, Victoria.
What is collected
Personal information: your name, contact details, date of birth, and billing information.
Health information: your medical and health history, presenting concerns, symptoms, medications and supplements, results of pathology or other investigations you choose to share, and the clinical notes made during and after your consultations.
Health information is sensitive information under the Privacy Act. It is only ever collected with your consent, and only where it is reasonably necessary for your care.
Why it is collected
To provide clinical care, communicate with you about your plan, send appointment reminders, issue invoices and receipts, and meet the record-keeping obligations required by Australian law and professional association requirements. It is not used for any other purpose without your consent.
How it is stored, and where
Clinical records, appointments and invoicing are held in Cliniko, an Australian practice-management system, on encrypted servers located in Australia. Access is password-protected and limited to Adrian.
Telehealth consultations are delivered through Cliniko’s secure video service. Consultations are not recorded. Only the clinical notes Adrian makes are retained.
Email and SMS are handled through established providers. Paper notes, where used, are kept in locked storage. Records are retained for the period required by law, generally seven years from your last consultation, and for minors until the age of 25, and then securely destroyed.
Who it is shared with
Your information is never sold, rented, or shared with third parties for marketing purposes.
With your explicit consent, Adrian may share clinically relevant information with your GP, specialists, or other practitioners involved in your care. Information may also be disclosed to a pathology provider where you consent to testing, or where disclosure is required or authorised by law.
Service providers used to run the practice, the practice-management system, payment processing and email, necessarily process some of your information to do so. They are bound by their own privacy obligations and may not use it for their own purposes.
Consultations across state borders
Telehealth consultations are available anywhere in Australia. Your information is handled to the same standard regardless of which state or territory you are in, under the Privacy Act and the Australian Privacy Principles, which apply nationally.
Your rights
Under the Australian Privacy Principles you have the right to access the personal and health information held about you, to request that it be corrected if it is inaccurate or out of date, to withdraw consent for any non-essential use, and to ask how your information has been handled.
To exercise any of these rights, contact hello@hallamnaturalmedicine.com or call 0429 049 968. Requests are answered within 30 days.
If you are not satisfied with how a privacy concern has been handled, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.
This website
You can browse this website without providing any personal information.
The site uses Google Analytics to understand which pages people find useful and how they reach us. It records pages viewed, approximate location by country or region, the device and browser used, and whether you clicked a booking, phone or email link. Your IP address is anonymised before it is stored, and this information is not linked to your identity or to any clinical record.
No advertising cookies are set, and no data is shared with advertising networks. You can opt out across all sites using Google’s browser add-on at tools.google.com/dlpage/gaoptout, or by using your browser’s do-not-track setting.
Booking links on this site take you to Cliniko’s client portal, which operates under its own privacy terms. Any information you enter there is collected by Cliniko on the practice’s behalf and handled under this policy.
Data breaches
In the event of a data breach likely to result in serious harm, affected individuals and the Office of the Australian Information Commissioner will be notified as required under the Notifiable Data Breaches scheme.
Changes to this policy
This policy may be updated to reflect changes in the law or in how the practice operates. Material changes will be communicated to active clients in writing.
Last reviewed: August 2026.