Privacy Policy

Last updated: 1 July 2025

Ostra Medical Pty Ltd (ABN 92 702 557 793) (“Ostra Medical”, “we”, “us” or “our”) is a provider of medical services and supplies based in Perth, Western Australia. We are committed to protecting the privacy of personal information we hold, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, store and secure your personal information, and how you can access and correct it.

1. Who we are and how to contact us

Ostra Medical Pty Ltd is an Australian private company registered under ABN 92 702 557 793 and operating from Perth, Western Australia. If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer at ceo@ostramedical.site.

2. The Australian Privacy Principles

The APPs govern the way Australian organisations collect, hold, use and disclose personal information. Our handling of personal information is designed to comply with the APPs, including APP 1 (open and transparent management), APP 3 (collection of solicited information), APP 5 (notification of collection), APP 6 (use and disclosure), APP 7 (direct marketing), APP 8 (cross-border disclosure), APP 11 (security of personal information), APP 12 (access) and APP 13 (correction).

3. What personal information we collect

The types of personal information we may collect include:

• Your name, job title and organisation (where you contact us on behalf of a business or practice);
• Your email address, and any address details you choose to provide for the delivery of supplies;
• Enquiry details, quote requests and correspondence you send to us;
• Billing and transaction records relating to orders for medical services and supplies;
• Website usage data collected through cookies and analytics tools, such as pages visited, referring pages, browser type and approximate location derived from IP address;
• Any other information you voluntarily provide to us.

4. Sensitive information and health information

We provide medical services and supplies, and from time to time our work may involve information that is classified as sensitive information or health information under Australian law. Where such information is provided to us, we will only collect it with your consent (or where another lawful exception applies), we will only use it for the purpose for which it was provided or a directly related purpose you would reasonably expect, and we will apply heightened safeguards to its storage and handling.

5. How we collect personal information

We generally collect personal information directly from you, including when you:

• Submit a form or enquiry through this website, including through our Request a Quote or Contact pages;
• Send us an email, including to ceo@ostramedical.site;
• Place an order or engage us to provide medical services or supplies;
• Communicate with us in person or in writing.

We may also collect technical information automatically when you browse this website, as described in section 9 below. We will not collect personal information unless it is reasonably necessary for, or directly related to, one or more of our functions or activities, and we will only collect sensitive information by lawful and fair means and with appropriate consent.

6. Why we collect, use and disclose personal information

We collect, hold, use and disclose personal information for purposes including:

• Responding to enquiries and providing quotes for our services and supplies;
• Supplying goods and delivering services to our clients;
• Administering accounts, invoices, payments and order records;
• Meeting legal, regulatory, tax and record-keeping obligations;
• Improving our website, services and client experience;
• Sending service updates or marketing communications where you have consented or where permitted by law.

We will not use or disclose personal information for a purpose other than the primary purpose of collection, unless you have consented, the information is not sensitive information and the secondary purpose is related (and directly related in the case of sensitive information), or another exception under the APPs applies.

7. Direct marketing

We may send you information about our medical services and supplies where we are permitted to do so under APP 7, for example where you have provided your details to us and reasonably expect to receive such communications. Every direct marketing communication will include a simple way for you to opt out, and you may opt out at any time by emailing ceo@ostramedical.site. Once you opt out, we will not send you further marketing communications.

8. Disclosure to third parties

We do not sell or rent personal information. We may disclose personal information to third parties only where reasonably necessary for our functions, including to:

• Logistics and delivery providers engaged to deliver supplies on our behalf;
• Professional advisers such as accountants, auditors and lawyers;
• IT service providers, hosting providers and website analytics providers who support the operation of our systems;
• Government agencies, regulators or law enforcement bodies where required or authorised by law.

Where we engage third-party service providers, we take reasonable steps to ensure they handle personal information in a manner consistent with this Privacy Policy and the APPs.

9. Overseas disclosure

Some of our service providers, including website hosting, email and analytics providers, may store or process information on servers located outside Australia. Where personal information is disclosed to an overseas recipient, we will take reasonable steps to ensure that the recipient does not breach the APPs in relation to that information, in accordance with APP 8. Where it is practicable, we will seek your consent before disclosing personal information overseas.

10. Security of personal information

We take reasonable steps to protect personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure, in accordance with APP 11. These steps include restricting access to personal information to personnel who need it to perform their duties, using technical and organisational security measures such as access controls and secure storage, and destroying or de-identifying personal information once it is no longer needed for a permitted purpose, subject to our record retention obligations.

11. Access to and correction of your personal information

Under APP 12, you may request access to the personal information we hold about you. Under APP 13, you may request correction of personal information we hold about you if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading. To make a request, please email ceo@ostramedical.site with details of your request. We will respond within a reasonable period. We may charge a reasonable fee for providing access in some circumstances, but we will not charge for making a request, and we will not charge for correcting personal information. In limited circumstances, we may decline a request where permitted by the APPs, and we will provide written reasons and information about how to complain if we do so.

12. Cookies and website analytics

When you visit this website, we and our analytics providers may use cookies and similar technologies to collect information such as pages viewed, time spent on the site, browser type and approximate location. Cookies are small files stored on your device that help the website function and help us understand how it is used. You can control or delete cookies through your browser settings; disabling cookies may affect some functionality of the website. Analytics data is used in aggregated form to improve website performance and content.

13. Third-party websites

Our website may contain links to third-party websites. Those websites are not under our control, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party website before providing personal information to it.

14. Making a privacy complaint

If you believe we have breached the APPs or mishandled your personal information, you may lodge a complaint by emailing ceo@ostramedical.site. Please include enough detail for us to investigate your complaint. We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law or technology. The current version will always be published on this page, together with the date of the most recent revision. Continued use of this website after an update constitutes acceptance of the revised policy.

16. Contact

For all privacy matters, including access requests, correction requests, opt-outs and complaints, please contact:

Ostra Medical Pty Ltd
Privacy Officer
Email: ceo@ostramedical.site
Perth, Western Australia
ABN 92 702 557 793

Related pages: Terms of Use · Home · Services · Contact