BrightMemory

Privacy Policy

Effective Date: [13 May 2020]

Bright Memory and My Care Management (MCM) are committed to safeguarding your personal and health information. We will not provide your personal information to any other organisation for marketing purposes without your consent and will not share, sell, or trade your personal information with non-related companies or persons.

We will only use or disclose your personal information for the primary purpose of collection or a related purpose, where we are required or permitted to do so by law, or where you have provided consent. We will not seek broader consent than is necessary for the circumstances.

We value your privacy and are committed to protecting the personal information you provide to us. We adhere to the Australian Privacy Principles (APPs) under the Privacy Act 1988 (as amended) in the way that we collect, use, disclose, secure, and provide access to personal information.

This Privacy Policy describes how Bright Memory and My Care Management (MCM) collect, use, and disclose your Personal Information when you engage with our services or visit our websites.

1. INTRODUCTION

Bright Memory and My Care Management (MCM) are dedicated to enhancing the quality of aged care services across Australia. We are committed to protecting your personal and health information and ensuring compliance with the Australian Privacy Principles under the Privacy Act 1988. By using our services, you consent to the practices described in this Privacy Policy.

2. DATA COLLECTED

DATA STORAGE LOCATION

We store all data securely on Australian servers, adhering to the highest standards of data protection required for healthcare information. Our hosting providers ensure that your data is protected in compliance with Australian healthcare regulations and the Australian Privacy Principles.

REGISTRATION DATA

If you register on our website or with our services, we store your chosen username, email address, and any additional personal and health information added to your user profile. You can see, edit, or delete your personal information at any time (except for changing your username). Website administrators can also see and edit this information.

HEALTH AND CARE DATA

In providing aged care services, we collect and store health-related data such as health records, care plans, and other clinical information necessary to deliver high-quality care and comply with healthcare regulations.

SUPPORT DATA

If you have registered on our website and have a valid support account, you can submit support tickets for assistance. Support form submissions are handled by our third-party ticketing system, and only the data you explicitly provide is sent. You are asked for consent each time you create a new support ticket.

COMMENTS AND CONTACT FORMS

When you leave comments on our website or submit information through a contact form, we collect the data shown in the form, along with your IP address and browser user agent string to help with spam detection. This information is used only for customer service purposes and is not shared with third parties.

GOOGLE ANALYTICS

We use Google Analytics on our site for anonymous reporting of site usage. No personalised data is stored. If you would like to opt out of Google Analytics monitoring your behavior on our website, you can do so by using the Google Analytics Opt-out feature.

CASES FOR USING PERSONAL DATA

We use your personal and health information in the following cases:

Verification/identification during website usage;
Providing technical assistance;
Sending updates with important information about our services;
Checking accounts’ activity to prevent fraudulent transactions and ensure security;
Customising the website to make your experience more personal and engaging;
Guaranteeing overall performance and smooth administrative functions.

3. EMBEDDED CONTENT

Pages on our site may include embedded content, such as videos or social media feeds. Embedded content from other websites behaves in the same way as if you visited the other website directly. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that content, including tracking your interaction if you have an account and are logged in to that website.

Examples of embedded content:

Facebook: Our site may include Facebook content. Facebook has its own privacy policies, which apply to data collected through its embedded content.
Twitter/ X: Our site may include Twitter content. Twitter has its own privacy policies, which apply to data collected through its embedded content.
YouTube: Our site may include YouTube videos. YouTube has its own privacy policies, which apply to data collected through its embedded content.

4. COOKIES

This site uses cookies—small text files that are placed on your machine to help the site provide a better user experience. Cookies are used to retain user preferences, store information for services like patient portals, and provide anonymised tracking data to third-party applications like Google Analytics. Cookies generally exist to make your browsing experience better. However, you may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in your browser. We suggest consulting the help section of your browser.

NECESSARY COOKIES (ALL SITE VISITORS)

cfduid: Used by our CDN CloudFlare to identify individual clients behind a shared IP address and apply security settings on a per-client basis.
PHPSESSID: To identify your unique session on the website.

NECESSARY COOKIES (ADDITIONAL FOR LOGGED-IN CUSTOMERS)

wp-auth: Used by WordPress to authenticate logged-in visitors, password authentication, and user verification.
wordpress_logged_in_{hash}: Used by WordPress to authenticate logged-in visitors, password authentication, and user verification.
wordpress_test_cookie: Used by WordPress to ensure cookies are working correctly.
wp-settings-[UID]: Used by WordPress to customise your view of the admin interface and possibly also the main site interface.

5. WHO HAS ACCESS TO YOUR DATA

If you are not a registered user of our site, we do not retain or view any personal information regarding yourself. If you are a registered user, your personal information (only your name and email address) can be accessed by:

Our system administrators.
Our support team members to reply to your query or email.

6. THIRD-PARTY ACCESS TO YOUR DATA

We do not share your data with third parties in a way that reveals any of your personal information (like email, name, etc.) except for the partners we work with to provide the services you expect from us.

Examples of third-party services:

Payment Processing: We use trusted payment systems such as PayPal for collecting fees and payments related to our services.
Healthcare Service Providers: We may share your data with healthcare service providers, clinical auditors, or IT support services related to healthcare management. All third-party providers are required to comply with Australian privacy laws.

7. HOW LONG WE RETAIN YOUR DATA

We retain healthcare and personal data for as long as necessary to fulfil our service obligations and comply with Australian healthcare regulations.

Comments: Metadata from comments is retained until you request its removal.
Registered Users: We retain the personal information you provide in your user profile. You can see, edit, or delete your personal information at any time (except changing your username). Website administrators can also see and edit that information.

8. SECURITY MEASURES

We use advanced security measures, including SSL/HTTPS protocols, encryption, two-factor authentication, and regular security audits, to protect your healthcare data. In the event of a data breach, we will take immediate steps to secure your data and notify you as required by Australian law.

9. YOUR DATA RIGHTS

GENERAL RIGHTS

If you have a registered account on this website or have left comments, you can request an exported file of the personal data we retain, including any additional data you have provided to us. You can also request that we erase any of the personal data we have stored, except for data that we are obliged to keep for administrative, legal, or security purposes.

GDPR RIGHTS

We are committed to protecting your privacy in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988. Where applicable, we also comply with the General Data Protection Regulation (GDPR) for residents of the European Union.

10. THIRD-PARTY WEBSITES

Bright Memory and My Care Management (MCM) may post links to third-party websites on our website. These third-party websites are not screened for privacy or security compliance by us, and we are not responsible for the conduct of these third-party websites. Please review the privacy policy and terms of service for each site you visit through third-party links.

11. RELEASE OF YOUR DATA FOR LEGAL PURPOSES

We may disclose your information as required by Australian law, particularly in compliance with healthcare regulations, including mandatory reporting to the Aged Care Quality and Safety Commission. If we receive a subpoena affecting your privacy, we may elect to notify you to give you an opportunity to file a motion to quash the subpoena, or we may attempt to quash it ourselves, but we are not obligated to do either. We may also proactively report you and release your information to third parties where we believe it is prudent to do so for legal reasons, such as our belief that you have engaged in fraudulent activities.

12. AMENDMENTS

We may amend this Privacy Policy as necessary to reflect changes in our services or relevant laws. We will update this page accordingly and notify you of any significant changes, requesting your consent to continue using our services.

13. Contact Information:

For questions or concerns regarding this Privacy Policy or data practices, please contact us at using the contact us tab.

By accessing or using the “Bright Memory” and “My Care Management” services, you consent to the practices described in this Privacy Policy.

[End of Privacy Policy]