Privacy Policy
Effective Date: July 1, 2025
Applies to users in Australia and Fiji
Beyond Health Fiji (“we”, “our”, or “us”) is committed to protecting your personal information and ensuring your healthcare data is managed responsibly and securely. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use our online healthcare services via the Beyond Health web portal.
1. Who We Are
Beyond Health Fiji provides online healthcare services to patients in Fiji, supported by healthcare professionals based in both Fiji and Australia. Our systems are hosted securely in internationally compliant cloud environments and meet applicable privacy and data protection laws in both countries.
2. What Information We Collect
We collect the following types of information:
a. Personal Information
• Full name
• Contact details (phone, email, address)
• Date of birth, gender
• Dependent family member details (with appropriate consent)
b. Health Information
• Medical history, medications, allergies
• Uploaded documents (e.g. lab results, medical certificates)
• Health data synced from devices or remote monitoring tools
• Consultation records, including chat/question-based exchanges
c. Technical & Usage Data
• IP address, browser type, device info
• Portal activity (login times, session duration)
• Necessary cookies used for secure login and functionality
3. How We Use Your Information
We use your information to:
• Provide and coordinate healthcare services
• Facilitate online consultations and remote monitoring
• Communicate with you about your care
• Improve our platform and services
• Comply with legal, regulatory, and clinical requirements
• Analyse anonymised data for service improvements
4. Who Can Access Your Information
Only authorised healthcare providers and Beyond Health support staff may access your identifiable health records. Your information may be disclosed:
• With your consent
• To other healthcare professionals involved in your treatment
• When legally required in Australia or Fiji (e.g. public health reporting, court orders)
• In emergency situations where your health or safety is at risk
• To technical providers (e.g. AWS) strictly for secure data processing
We do not sell, rent, or trade your personal data to third parties.
5. Data Storage and Security
All data is stored securely on encrypted, firewall-protected servers hosted by Amazon Web Services (AWS), with safeguards aligned with HIPAA, GDPR, and Australian Privacy Principles (APPs). Key protections include:
• End-to-end encryption (e.g., SSL/TLS) for data transmission
• Two-factor authentication (2FA) recommended for user access
• Restricted administrative access with audit logs
• Regular monitoring for potential breaches
6. Your Rights (Australia & Fiji)
You may request:
• Access to your health or personal information
• Correction of any inaccurate or incomplete data
• Deletion of your account (with limited retention of billing records for compliance)
• Information on how your data has been used or shared
Requests can be made via email or through the patient portal. We will respond within a reasonable timeframe and in accordance with the Privacy Act 1988 (AU) and the Fijian Online Safety Act 2018 or other applicable Fijian laws.
7. Children’s Data
Parents and legal guardians may create and manage records on behalf of minors or dependent adults. We require appropriate consent and documentation. Individuals aged 18 and over should register independently when capable.
8. Cookies and Analytics
We use cookies only for:
• Secure authentication
• Session management
• Basic performance metrics (anonymised)
You may disable cookies in your browser, but doing so may affect the functionality of the web portal.
9. Data Breaches
In the unlikely event of a data breach, we will notify affected users and relevant authorities as required under the Notifiable Data Breaches (NDB) Scheme in Australia or applicable Fijian laws. We will take immediate steps to contain and remedy any breach.
10. Cross-Border Data Handling
Because Beyond Health Fiji serves users in both Australia and Fiji, and uses cloud infrastructure based internationally, your data may be stored or processed outside of your country of residence. We ensure any offshore data handling complies with local and international data protection standards.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be published on our website and will take effect immediately. We encourage you to review the policy periodically.
12. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your data:
Australia
Beyond Health Fiji Support
support @beyondhealth.com.au
📍 Suva/Nadi locations available upon request