Skip to main content

How We Protect Your Health Data

A plain-language summary of how Thrive Rx collects, stores, and protects your health information — including your rights under the Australian Privacy Act.

Updated today

Your health data is sensitive and personal. Thrive Rx is committed to protecting it at every stage — from collection through to storage, access, and sharing. Here's how.

What Data We Collect

To provide your clinical care, Thrive Rx collects and stores:

  • Personal information — Your name, date of birth, contact details, Medicare details and address.

  • Health information — Your medical history, current medications, health questionnaire responses, pathology results, biomarker data, care plans, consultation notes, and prescription records.

  • Payment information — Billing details required to process your membership and any medication costs.

We only collect information that is necessary to deliver your clinical care and operate the service.

How Your Data Is Stored

Your health records are stored securely within the Thrive Rx platform. Our data storage practices include:

  • Encryption — Your data is encrypted both in transit (when being sent between your device and our systems) and at rest (when stored on our servers).

  • Access controls — Only authorised personnel — primarily your treating clinician and essential support staff — can access your health records.

  • Australian hosting — Your data is stored on servers located in Australia, subject to Australian privacy law.

  • Audit trails — Access to your records is logged, so there is a record of who has viewed or modified your information.

Who Can Access Your Data

Access to your health information is restricted to:

  • Your treating Thrive Rx clinician

  • Clinical support staff involved in your care (e.g. for pathology coordination or prescription processing)

  • The dispensing pharmacy, to the extent necessary to fulfil your prescription

We do not sell, rent, or share your health information with third parties for marketing purposes. Your data is never used for advertising.

Sharing With Your GP or Other Providers

With your explicit consent, your Thrive Rx clinician can share relevant clinical information with your GP or other healthcare providers to support coordinated care. This only happens with your permission — you control who receives your information.

Your Privacy Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

  • Access your records — Request a copy of the health information Thrive Rx holds about you.

  • Correct your information — Ask us to update or correct any inaccurate information.

  • Know how your data is used — Ask us to explain what information we hold, why we hold it, and who has access.

  • Make a complaint — If you believe your privacy has been breached, you can raise a complaint with Thrive Rx or directly with the Office of the Australian Information Commissioner (OAIC).

Data Retention

Thrive Rx retains your health records in accordance with Australian legal requirements for medical records. Even if you cancel your membership, your clinical records are retained for the legally required period to ensure continuity of care and regulatory compliance.

Questions About Your Privacy

If you have questions about how your data is handled, want to request access to your records, or have a privacy concern, contact our support team and we'll assist you promptly.


Thrive Rx provides clinician-led health optimisation services. All clinical decisions are made by AHPRA-registered practitioners. For our full privacy policy, visit thriverx.com.au. Thrive Rx does not provide emergency medical care. If you are experiencing a medical emergency, call 000 immediately.

Did this answer your question?