Streamline Solutions Pty Ltd (ABN 29 005 885 361) trading as Medicity
This Privacy Policy & Online Data Processing Policy explains how Streamline Solutions Pty Ltd trading as Medicity (“Medicity”, “we”, “us”, “our”) collects, uses, stores, and protects personal information when you use eCaptis (“Platform”).
By using eCaptis, creating an account, purchasing a subscription, or clicking “I agree”, you accept and consent to the eCaptis Privacy Policy and Data Processing Agreement (“DPA”).
1. What Information We Collect
We collect:
• Account information (name, contact details, organisation details)
• Clinical and administrative data entered by you or your authorised users
• Patient information uploaded or generated through eCaptis
• Technical data (IP address, device type, browser type, usage logs)
• Billing information (processed securely by third party payment providers)
We do not store full credit card numbers.
2. How We Use Information
We use personal and health information to:
• Provide and operate eCaptis
• Support clinical workflows
• Maintain security and system integrity
• Process payments and manage subscriptions
• Improve eCaptis using aggregated, anonymised data
• Comply with Australian laws and regulatory obligations
We do not sell or trade personal or patient information.
3. Customer Data Ownership
You own all data you upload or generate in eCaptis (“Customer Data”).
You grant Medicity:
• A licence to use Customer Data to provide eCaptis
• A perpetual licence to use aggregated, anonymised data for analytics, benchmarking, and product improvement
4. Data Hosting
All identifiable Customer Data is hosted in secure Australian data centres.
5. Security
We implement industry standard security measures including:
• Encryption
• Access controls
• Monitoring
• Backups
You must maintain reasonable security practices within your organisation.
6. Disclosure
We may disclose information to:
• Hosting providers
• Payment processors
• Security and monitoring services
• Regulatory bodies where required by law
All service providers are bound by privacy and security obligations.
7. Data Breaches
If a data breach involving personal or health information occurs, Medicity will:
• Act promptly to contain the breach
• Notify affected customers
• Comply with the Notifiable Data Breaches Scheme under the Privacy Act
8. Access & Correction
You may request access to or correction of your personal information at any time. Patient access requests must be handled by the healthcare provider, not Medicity.
9. Cookies
We use cookies to support login sessions and improve functionality. You may disable cookies, but some features may not work correctly.
10. Changes to This Policy
We may update this Privacy Policy at any time. Continued use of eCaptis constitutes acceptance of the updated policy.
11. Contact
Streamline Solutions Pty Ltd trading as Medicity
Address: Level 6, 24 Albert Road, South Melbourne Vic 3205 Australia
Support Email: support@medicity.com.au
Online Data Processing
1. Roles
• Customer is the Controller of Customer Data.
• Medicity is the Processor of Customer Data.
2. Purpose
Medicity processes Customer Data solely to provide eCaptis and related services.
3. Types of Data Processed
• Patient demographic and clinical information
• Appointment and workflow data
• Uploaded files and attachments
• User account information
• Technical logs and audit trails
4. Customer Responsibilities
You must:
• Ensure lawful collection of patient information
• Obtain all necessary consents
• Manage authorised user access
• Maintain security within your organisation
5. Medicity Responsibilities
Medicity will:
• Process Customer Data only as instructed
• Maintain security controls
• Provide hosting, support, and platform services
• Comply with Australian privacy and health records laws
6. Sub Processors
Medicity may use sub processors such as:
• Hosting providers
• Payment processors
• Security and monitoring services
All sub processors are bound by privacy and security obligations.
7. Data Location
All identifiable Customer Data is stored and processed within Australia.
Aggregated, anonymised data may be processed internationally.
8. Security Measures
Medicity implements:
• Encryption
• Access controls
• Monitoring
• Backups
• Secure development practices
9. Data Breach Notification
Medicity will:
• Notify the Customer promptly after becoming aware of a breach
• Provide details and mitigation steps
• Assist with compliance under the Notifiable Data Breaches Scheme
10. Access & Requests
Medicity will:
• Provide tools for Customer Data access and correction
• Redirect patient access requests to the Customer
• Not respond directly to individuals without Customer instruction
11. Data Retention & Deletion
Upon termination:
• Customer may request a data export within 60 days
• Medicity may delete Customer Data after this period
• Backups are deleted according to standard retention cycles
12. Liability
Liability is governed by the eCaptis Terms & Conditions. Nothing in this DPA limits rights under the Australian Consumer Law.
13. Governing Law
This DPA is governed by the laws of Victoria, Australia.
14. Contact
Streamline Solutions Pty Ltd trading as Medicity
Address: Level 6, 24 Albert Road, South Melbourne Vic 3205 Australia
Support Email: support@medicity.com.au
Version 1.1
