Last updated: October 2026 · Changes effective 20 October 2026 · Governing law: Queensland, Australia
clinic-admin is the operations layer of your clinic — not the clinical layer. We hold roster, compliance, fridge logs, SOPs, key dates, equipment records, supplier invoices, prep instructions and similar operational data.
We do not store patient health records, consultation notes, prescriptions, pathology results, Medicare claims or any other clinical information. Those live in your clinical software (Best Practice, Medical Director, Genie, Zedmed and the like) where they belong.
Note: free-text fields (e.g. Clinic Rules, Incidents, Prep Cards) accept whatever staff type. Use these as you would any business tool — avoid patient identifiers and follow your clinic's normal privacy practices. The full sections below explain exactly what we collect, store and protect.
Digital Treasure Pty Ltd ("we", "us", "our") operates the clinic-admin platform, a clinic operations management platform for Australian medical and allied health practices. We are based in Queensland, Australia.
This Privacy Policy explains how we collect, use, store, and protect information about you and your clinic staff when you use the clinic-admin portal at clinic-admin.com.
We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We collect only the information necessary to provide the Service. This includes:
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, name, role | Authentication and access control |
| Clinic data | Clinic name, setup code | Multi-clinic account management |
| Staff records | Staff name, email, compliance dates (CPR, AHPRA, indemnity), phone | Optional — entered by your clinic admin for compliance tracking; not required by clinic-admin |
| Operational logs | Fridge temperatures, incident reports, meeting minutes | Clinic operations management |
| Billing data | Payment method details | Processed by Stripe — we do not store card details |
| Usage data | Login timestamps, feature usage | Service improvement and security |
We do not collect data beyond what is needed for the Service, and we do not purchase or obtain data from third-party sources.
We use the information we collect to:
We do not:
All data entered into clinic-admin is stored on Google Firebase (Firestore), which uses AES-256 encryption at rest and TLS encryption in transit. Firebase infrastructure complies with ISO 27001, SOC 1, SOC 2, and SOC 3 standards.
Data is stored on Google Cloud Firestore in the australia-southeast1 region (Sydney). Backups are managed by Google Cloud and remain within Australian data centres. Your clinic data does not leave Australia for storage or backup purposes. By using the Service, you consent to this storage arrangement. Note: some sub-processors listed below (e.g. email delivery, payment processing, website analytics) may process limited contact and billing information outside Australia in order to deliver their service — this does not include the clinic data you enter into the platform.
To deliver the Service, we engage the following sub-processors. Each is bound by their own privacy and security obligations:
This list may change as the Service evolves. Material changes to sub-processors will be notified in the manner set out in our Terms of Service.
We implement the following security measures:
Despite these measures, no system is completely secure. We encourage you to use a strong password and enable multi-factor authentication where possible.
clinic-admin uses the following third-party services to operate:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Firebase | Database, authentication, file storage | firebase.google.com |
| Stripe | Payment processing | stripe.com/au/privacy |
| Resend | Transactional email delivery | resend.com/privacy |
| Google Analytics and Google Fonts | Website usage measurement and typefaces | policies.google.com/privacy |
| Cloudflare | Website hosting and delivery | cloudflare.com |
Each of these providers has their own privacy policies and data handling practices. We select providers with strong security practices, but we are not responsible for the privacy practices of third-party services.
clinic-admin is designed exclusively for clinic operational data — staff records, compliance tracking, logs, and internal communications.
Any data entered into the system that inadvertently contains patient information remains the responsibility of the subscribing clinic. We recommend reviewing your data entry practices regularly.
We retain your data for as long as your subscription is active. Upon cancellation:
If you request earlier deletion of your data, contact us and we will action this within 30 days.
Under the Australian Privacy Principles, you have the right to:
To exercise any of these rights, contact us at info@clinic-admin.com. We will respond within 30 days.
clinic-admin uses minimal cookies and browser storage necessary to operate the Service, including:
On our website pages (for example the home page, product pages and free tools) and in the portal we use Google Analytics, which sets cookies (such as _ga) to count visits and see which pages are used. Inside the portal, Analytics records only which screens are used (for example "Fridge Logs" or "Key Dates"), so we can see which features are useful. It never receives what you type, staff or clinic names, clinic identifiers or invite links, and we do not link it to your account.
We do not use advertising cookies, we do not use Analytics data for advertising, and we do not sell it. You can block or delete these cookies in your browser settings, or use Google's opt-out browser add-on. Some pages also load typefaces from Google Fonts, as described in Section 4.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or via a notice in the portal.
The current version of this policy is always available at clinic-admin.com/privacy.html. The "last updated" date at the top of this page indicates when the policy was last revised.
For any privacy-related questions, requests, or complaints, please contact:
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.