Privcay Policy

Effective date: 08/05/2026

Empowered Health Analytics Pty Ltd, referred to in this policy as EHA, we, us or our, respects your privacy and is committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, contact us, book a meeting, subscribe to updates, or engage with our services.

This policy has been prepared with reference to the Australian Privacy Principles under the Privacy Act 1988 (Cth). The OAIC states that a privacy policy should explain, in clear language, what personal information an organisation collects, how it is collected and stored, why it is collected, how it is used and disclosed, how people can access or correct it, how complaints are handled, and whether information is likely to be disclosed overseas.

1. Information we collect

We may collect personal information that you provide to us directly, including:

  • your name

  • job title

  • organisation or hospital name

  • email address

  • phone number

  • information submitted through website forms

  • information provided when booking a meeting or Benchmark Review

  • correspondence you send to us

  • preferences for receiving updates or communications from us

We may also collect limited technical and usage information when you visit our website, including:

  • IP address

  • browser type

  • device type

  • pages visited

  • referring website

  • approximate location based on browser or device data

  • interactions with website forms, links or buttons

Where you engage EHA for services, we may receive business, operational, commercial or health-service-related data from your organisation. This type of information is handled under the relevant engagement terms, confidentiality arrangements and data handling processes agreed with the client organisation.

2. How we collect information

We may collect information when you:

  • visit our website

  • submit a website form

  • book a call or Benchmark Review

  • email or call us

  • subscribe to updates

  • interact with our marketing or website content

  • provide information during a discovery call, proposal process or client engagement

We may also collect information through trusted third-party tools used to operate our website and communications, such as website hosting, analytics, CRM, email marketing, scheduling or form tools.

3. Why we collect personal information

We collect personal information to:

  • respond to enquiries

  • book and manage meetings

  • provide information about EHA’s services

  • assess whether a Benchmark Review or broader engagement may be appropriate

  • provide proposals, reports or services

  • communicate with current and prospective clients

  • improve our website, content and user experience

  • manage marketing, newsletters or business updates

  • meet legal, regulatory, administrative and security obligations

  • protect our business, systems and website from misuse or unauthorised access

We only collect information that is reasonably necessary for our business activities.

4. How we use personal information

We may use personal information to:

  • contact you about an enquiry or meeting request

  • provide information about EHA, ROADS analytics, advisory support or Benchmark Reviews

  • prepare for discussions with your organisation

  • deliver services to your organisation

  • send updates, insights or marketing communications where permitted

  • monitor and improve website performance

  • manage business records and internal administration

  • comply with applicable laws

We do not sell personal information.

5. Marketing communications

If you subscribe to updates or otherwise agree to receive communications from us, we may send you relevant emails about EHA, benchmarking, advisory support, insurer negotiations, events or sector insights.

You can unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us directly.

Australian spam rules require commercial electronic messages to be sent with consent, identify the sender, include contact details and provide a clear and easy unsubscribe option. ACMA also says unsubscribe requests must be honoured within five working days.

6. Cookies and website analytics

Our website may use cookies and similar technologies to:

  • operate the website

  • remember preferences

  • understand website traffic and usage

  • improve website performance

  • measure the effectiveness of content or campaigns

Cookies are small files placed on your device by your browser. You can disable cookies through your browser settings, although some website features may not work as intended.

We may use analytics or marketing tools provided by third parties. These tools may collect information such as device data, browser data, pages visited and interactions with the website.

7. Disclosure of personal information

We may disclose personal information to:

  • employees, contractors or advisers who need the information to perform their role

  • technology providers that support our website, email, CRM, scheduling, analytics or business systems

  • professional advisers such as lawyers, accountants or consultants

  • service providers who assist with business operations

  • regulatory authorities, courts or government agencies where required by law

  • another party with your consent

We take reasonable steps to ensure third-party providers handle information appropriately.

8. Overseas disclosure

Some of the technology providers we use may store or process information outside Australia.

This may include providers of website hosting, analytics, email marketing, scheduling, CRM, cloud storage or security services.

Where information is disclosed or stored overseas, we take reasonable steps to use reputable providers and apply appropriate safeguards where practical.

9. Security and storage

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

These steps may include:

  • access controls

  • secure systems and cloud platforms

  • password protection

  • restricted internal access

  • secure transfer processes where appropriate

  • confidentiality obligations for staff, contractors and advisers

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we take privacy and confidentiality seriously.

10. Client data and confidentiality

During a Benchmark Review or client engagement, EHA may receive data from a hospital or healthcare organisation for benchmarking, analysis or advisory purposes.

Client data is handled separately from general website enquiry data and is subject to the agreed scope of work, confidentiality obligations and any applicable contractual terms.

EHA uses client data for the purpose of delivering the agreed services, including benchmarking, analysis, modelling, reporting and advisory support.

We do not use client data for unrelated purposes without authorisation.

11. Accessing or correcting your personal information

You may request access to personal information we hold about you.

You may also ask us to correct information if you believe it is inaccurate, incomplete or out of date.

To make a request, contact us at:

[Insert privacy/contact email]

We may need to verify your identity before responding. We will respond within a reasonable period.

12. Complaints

If you believe we have mishandled your personal information, please contact us first so we can review and respond to your concern.

Contact:

[Insert privacy/contact email]

Please include enough detail for us to understand the issue. We will aim to respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

13. Links to third-party websites

Our website may contain links to third-party websites or services, including scheduling tools, social media platforms or external resources.

We are not responsible for the privacy practices or content of third-party websites. You should review their privacy policies before providing personal information.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, systems, legal obligations or information handling practices.

The updated version will be published on our website with a revised effective date.

15. Contact us

For privacy questions, access requests, correction requests or complaints, contact:

Empowered Health Analytics Pty Ltd
Email: info@empoweredhealthanalytics.com.au