Our Privacy Commitment
HealthNav is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Health information is treated as sensitive information with enhanced protection.
No Data Selling
We never sell your personal information to third parties.
Encrypted & Secure
All data is encrypted in transit and at rest.
Your Control
Access, correct, or delete your data anytime.
About Us
HealthNav is a healthcare provider directory operated by:
Company Name
QuestFeed Pty Ltd
ABN
58 632 013 855
Entity Type
Australian Private Company
Location
Queensland, Australia
GST Registered
Yes (from 1 April 2023)
Active Since
7 March 2019
As an organisation that provides health-related services, we are bound by the Privacy Act 1988 (Cth) regardless of our annual turnover. We take our privacy obligations seriously.
Information We Collect
Information You Provide
Search Information
Search terms, location, symptoms, preferences, and filter selections
Contact Information
Name, email, phone number (if you contact us or create an account)
Health Information
Symptoms, conditions, or health concerns entered in searches
Feedback
Comments, reviews, or suggestions you submit
Automatically Collected
Device Information
Device type, OS, browser type and version
Usage Data
Pages visited, features used, time spent
Location Data
Approximate location from IP or precise if enabled
Log Data
IP address, access times, referring URLs
From Public Sources
We collect healthcare provider information from AHPRA's public register, government databases, and publicly available business directories to populate our directory.
Why We Collect Information
Primary Purposes
Provide healthcare provider search and directory services
Match you with relevant providers based on your search criteria
Improve and personalise your experience
Respond to enquiries and provide support
Ensure platform security and integrity
With Your Consent Only
Secondary uses like marketing communications or research require your explicit consent. You can withdraw consent at any time.
Special Protection for Health Information
Sensitive Information
Under the Privacy Act, health information is classified as "sensitive information" and receives enhanced protection. We treat all health-related information with the highest level of care.
What Constitutes Health Information
How We Protect Health Information
Collection
Only collect what's reasonably necessary for our services
Consent
Collected only with your consent (provided by using search features)
Use
Used only for helping you find relevant healthcare providers
Storage & Access
Enhanced security measures, strictly limited access
Disclosure
Never disclosed without explicit consent (except where required by law)
What We Do NOT Do
We will NEVER:
Sell your personal information to third parties
Share your health information with insurers, employers, or marketers
Allow healthcare providers to access your search history
Use your health information for advertising
Disclose information for unrelated purposes without consent
Data Security
Security Measures
All data encrypted in transit (TLS/SSL) and at rest
Strict controls limiting who can access personal information
SOC 2 compliant data centres with regular audits
Procedures to respond to and notify about data breaches
Data Breach Notification
In accordance with the Notifiable Data Breaches scheme, if we experience a breach likely to cause serious harm, we will notify the OAIC and affected individuals as soon as practicable.
Data Retention
We retain personal information only for as long as necessary:
| Information Type | Retention Period |
|---|---|
| Search queries (anonymous) | 12 months |
| Account information | Duration of account + 2 years |
| Contact enquiries | 2 years |
| Analytics data | 26 months (aggregated) |
| Provider profile data | Duration of listing + 2 years |
| Legal/compliance records | 7 years (as required by law) |
Your Rights
Under Australian Privacy Principles, you have the right to:
Access (APP 12)
Request access to your personal information and receive a copy in a commonly used format
Correction (APP 13)
Request correction of inaccurate, incomplete, or outdated information
Withdraw Consent
Withdraw consent at any time where processing is based on consent
Deletion
Request deletion of your personal information (subject to legal requirements)
How to Exercise Your Rights
To exercise any of these rights, contact us at:
privacy@questfeed.comWe will respond within 30 days. No charge for requests.
Complaints
If you believe we have breached the Australian Privacy Principles:
Contact Us First
Email privacy@questfeed.com with "Privacy Complaint" in the subject. We'll acknowledge within 5 business days and respond within 30 days.
OAIC (If Not Satisfied)
Lodge a complaint with the Office of the Australian Information Commissioner
Office of the Australian Information Commissioner
Contact Our Privacy Officer
For questions about this Privacy Policy or our privacy practices:
QuestFeed Pty Ltd
Relevant Australian Privacy Legislation
Document Version: 1.0 | Effective: December 2025 | Next Review: December 2026