Dukasa Dispensary is committed to maintaining privacy and confidentiality at all times and requires that any information regarding individual patients, practitioners, and clinics will not be disclosed in any form (verbally, in writing, or electronically, inside or outside our practice) except for strictly authorised use within the patient care context or as required by law.

For the purposes of this policy, no distinction has been made between the handling of personal information and sensitive information (including health information), therefore all information will be referred to as "personal information" throughout this Policy.

Examples of types of information collected include but are not limited to the following:

• Name, date of birth, address, telephone number
• Sensitive information about a patient such as but not limited to; past medical history, medications, allergies.

We use personal and health information only where necessary to:

• Dispense and compound medications safely and accurately
• Provide pharmaceutical care, counselling, and clinical support
• Communicate with you regarding prescriptions, orders, and delivery
• Maintain accurate patient records in accordance with legal requirements
• Process payments and manage accounts
• Improve our services, systems, and patient experience
• Meet regulatory, professional, and reporting obligations

Your information is never used for marketing purposes without explicit consent.

We may disclose personal or health information only where required or appropriate, including to:

• Prescribers and authorised healthcare providers
• Courier and logistics providers (for delivery only)
• Regulatory bodies where required by law
• Payment processors and secure service providers supporting our operations

All third parties engaged by Dukasa are required to adhere to strict confidentiality and data protection standards.

We do not sell, rent, or trade personal information.

Information submitted through MyDukasa, online order forms, or secure portals is encrypted and protected using industry-standard safeguards.

Access to patient information is restricted to authorised personnel only and governed by role-based access controls.

For Dukasa Privé members, additional privacy protocols apply.

Information is restricted to the assigned senior pharmacist and essential personnel only. Records are handled with heightened discretion, and no identifying information is disclosed or repurposed without explicit consent.

Discretion is absolute.

We take all reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, or disclosure.

Safeguards include:

• Secure digital systems and encrypted databases
• Controlled physical access to premises and records
• Staff confidentiality agreements
• Ongoing review of data protection practices

Information is retained only for as long as required under Australian law and professional pharmacy standards.

You may request access to, or correction of, personal information we hold about you at any time.

Requests can be made by contacting us directly. We will respond promptly and in accordance with legal requirements.

Our website may use cookies and similar technologies to improve functionality and understand how visitors engage with our site.

These tools do not identify you personally and can be managed through your browser settings.

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our practices.

The most current version will always be available on our website.

If you have any questions about this Privacy Policy, or how your information is handled, please contact us:

Email: info@dukasa.com.au

Phone: (03) 9822 3668