privacy policy
Her7
Her 7 Health
Last updated: September 2026
Her7 respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how Her7 collects, holds, uses and discloses personal information when you visit our website, contact us, make a booking, purchase a product or receive services from us.
Her7 is the trading brand of Her 7 Health, operated by FSM Wholesale Pty. Limited (ABN 44 003 823 514, ACN 003 823 514).
We handle personal and health information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and, where applicable, the Health Records and Information Privacy Act 2002 (NSW) and its Health Privacy Principles.
1. Information we collect
The information we collect depends on how you interact with Her7 and may include:
your name, date of birth and contact details
appointment and booking information
payment and transaction information
private health insurance information where relevant
information you provide through our website, booking system, forms or correspondence
information relating to products or services you purchase from us
communications between you and Her7.
When you receive healthcare services from Her7, we may also collect sensitive health information that is reasonably necessary to provide your care.
This may include information about your health history, current health concerns, medications, treatments, lifestyle, medical investigations, clinical observations, treatment records and other information relevant to your healthcare.
Health information is considered sensitive information under Australian privacy law and is handled with particular care.
2. How we collect information
Where practicable, we collect personal information directly from you.
We may collect information when you:
make an appointment
complete an intake, consent or other form
attend a consultation
communicate with us by email, SMS or another method
submit an enquiry through our website
provide documents or health information
purchase a product or service
subscribe to communications from Her7.
With your consent, or where otherwise permitted by law, we may also collect relevant information from another healthcare provider, service provider, parent, guardian or other person involved in your care.
3. Why we collect and use your information
We collect and use personal information where reasonably necessary to provide our services and operate Her7.
This may include using your information to:
provide and manage healthcare services
assess your health needs and prepare treatment plans
maintain clinical records
communicate with you about your care
arrange, confirm and manage appointments
respond to enquiries
process payments
provide products or services you have requested
communicate with other healthcare providers where appropriate and permitted
meet professional, regulatory, insurance and legal obligations
improve our services and business operations
send educational or promotional communications where you have agreed to receive them.
We aim to collect only the information reasonably necessary for these purposes.
4. Consent
By providing information to Her7 for the purpose of receiving services, you consent to us collecting, holding and using that information as reasonably necessary to provide and manage those services.
We may seek additional consent where required, including before disclosing health information to another healthcare provider or using particular technologies in connection with your care.
You may withdraw consent to particular uses or disclosures of your information, subject to applicable legal and professional obligations.
Withdrawal of consent may affect our ability to provide certain services.
5. Disclosure of information
Her7 does not sell or rent your personal or health information.
We may disclose information where reasonably necessary to provide or administer our services, including to:
healthcare providers involved in your care
clinical, pathology or related healthcare services
product, pharmacy or dispensing providers where relevant
practice management and booking providers
payment-processing providers
secure technology and clinical documentation providers
website, email and IT service providers
accountants, insurers and professional advisers
government agencies, regulators or courts where required or authorised by law.
Where required, we will obtain your consent before disclosing health information.
6. Practice management and technology providers
Her7 uses third-party technology to support the operation of the practice, including systems for appointment bookings, clinical records, communications, payments and administration.
This may include practice management platforms such as Cliniko and other reputable healthcare technology providers.
These providers may process personal information on our behalf to the extent necessary to provide their services.
Her7 takes reasonable steps to consider the privacy and security practices of third-party providers used in connection with personal and health information.
7. Artificial intelligence and clinical scribing
Her7 may use secure artificial intelligence-assisted clinical documentation, transcription or scribing tools to assist with preparing and maintaining clinical records.
Where these tools are used, information discussed during a consultation may be processed by the relevant technology provider for the purpose of generating draft clinical documentation.
Her7 takes reasonable steps to assess the privacy, security and data-handling practices of AI-assisted clinical documentation providers before using them in connection with patient information.
Where appropriate, you will be informed if an AI-assisted scribing or transcription tool is being used during your consultation.
You may ask questions about the use of these tools and may request that an AI scribing or transcription tool not be used during your consultation.
Any AI-generated clinical documentation is subject to practitioner review. Your practitioner remains responsible for the accuracy of your clinical record and for all clinical decisions and professional judgement.
Her7 does not intentionally provide identifiable patient health information to publicly available general-purpose AI tools for the purpose of training public AI models.
The use of AI involving personal information remains subject to Australian privacy obligations, and the OAIC recommends that organisations clearly explain their use of AI in their privacy policies and collection notices.
8. Website data, cookies and analytics
When you visit www.her7.com.au, certain technical information may be collected automatically.
This may include information such as:
your IP address
browser and device information
pages viewed
general location derived from technical information
date and time of your visit
website interaction information.
Our website may use cookies and similar technologies to operate effectively, understand website usage and improve the user experience. Where we embed third-party services such as online booking tools on our website, those services may use cookies or similar technologies to enable functionality, understand usage and support analytics. These technologies may be governed by the privacy and cookie practices of the relevant third-party provider.
You can manage cookies through your browser settings. Disabling some cookies may affect website functionality.
9. Marketing communications
Where you have agreed to receive them, Her7 may send you educational information, practice updates, information about services, events or products.
You may unsubscribe from marketing communications at any time by using the unsubscribe option provided or contacting us at:
Appointment reminders, booking confirmations and communications relating to your care are service communications and are not necessarily marketing communications.
10. Storage and security
Her7 takes reasonable steps to protect personal and health information from misuse, interference, loss, unauthorised access, modification and disclosure.
These measures may include:
secure and password-protected systems
restricted access to clinical information
reputable practice management and technology providers
appropriate physical security
secure disposal of information when it is no longer required.
While we take reasonable precautions, no electronic storage or communication system can be guaranteed to be completely secure.
11. Overseas processing
Some third-party technology providers may use infrastructure, service providers or subcontractors located outside Australia.
Where personal information may be processed or disclosed overseas, Her7 takes reasonable steps as required under applicable privacy legislation to ensure information is handled appropriately.
12. Data breaches
If Her7 becomes aware of a suspected privacy or data-security breach, we will take reasonable steps to assess, contain and respond to the incident.
Where required, we will comply with applicable Australian data-breach notification requirements, including the Notifiable Data Breaches scheme.
13. Retention of health records
Her7 retains health records for the periods required by applicable law and professional obligations.
Generally, health records relating to an adult are retained for at least seven years from the last occasion on which a health service was provided.
Where health information was collected while a person was under 18 years of age, records are generally retained until that person reaches 25 years of age.
Records may be retained for longer where required by law or another legitimate professional, insurance or regulatory reason.
NSW health service providers are subject to the Health Privacy Principles under the Health Records and Information Privacy Act.
14. Accessing your information
You may request access to personal or health information held about you by Her7.
Please contact:
We may need to verify your identity before providing access.
Access may be limited in circumstances permitted by law.
Where permitted, reasonable administrative costs may apply to extensive requests. We will advise you of any applicable cost before proceeding.
15. Correcting your information
We aim to ensure that the information we hold is accurate, complete and up to date.
If you believe information held about you is incorrect or incomplete, please contact:
We will take reasonable steps to correct information where appropriate.
16. Children and young people
Her7 may provide services to children and young people.
Where appropriate, information may be collected from or shared with a parent or guardian.
Consent, confidentiality and access to information will be managed having regard to the young person’s age, maturity, circumstances and applicable legal and professional obligations.
17. Electronic communication
Email, SMS and other forms of electronic communication may involve privacy and security risks.
Please do not use email, website forms or social media for emergencies or urgent medical concerns.
18. Third-party websites
Our website may contain links to external websites or services.
Her7 is not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the relevant third party’s privacy policy before providing personal information.
19. Privacy enquiries and complaints
If you have a question or concern about the way Her7 has handled your personal or health information, please contact us:
Her7
Her 7 Health
FSM Wholesale Pty. Limited
ABN 44 003 823 514
ACN 003 823 514
Email: hello@her7.com.au
Website: www.her7.com.au
New South Wales, Australia
We will investigate privacy concerns and respond within a reasonable period.
If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner (OAIC) or the Information and Privacy Commission NSW (IPC NSW).
20. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices or legal obligations.
The current version will be available at www.her7.com.au and will display the date of the most recent update.