Privacy Policy

We may collect the following types of personal information:

• Identity details: name, date of birth, address, phone number, and email address.
• Health information: medical history, surgical history, medications, allergies, GP referral letters, clinical notes, photographs, and treatment records.
• Payment details: billing information necessary to process consultation and procedure fees.
• Enquiry information: details you provide through our website contact forms, phone calls, or email correspondence.

We collect personal information through:

• In-person consultations and clinical appointments.
• Website forms submitted through our website at drgeorginakonrat.com.au, which are processed via our CRM platform (GoHighLevel / LeadConnector).
• Phone calls and emails to our clinic.
• GP referral letters and correspondence from other health practitioners.
• Online booking through Calendly when you schedule a consultation.
• The website chat widget, an automated assistant that answers general questions and helps you book. It only loads after you click the chat bubble, and a member of our team can join the conversation. It does not provide medical advice or make decisions about your care.

We use your personal and health information to:

• Provide clinical care, including consultations, surgical procedures, and post-operative follow-up.
• Maintain your medical records as required by AHPRA and applicable health regulations.
• Process payments and manage appointment bookings.
• Communicate with you about your care, appointments, and follow-up.
• Respond to enquiries submitted through our website or by phone.
• Comply with legal and regulatory obligations, including AHPRA reporting requirements.

As a registered medical practitioner (AHPRA registration: MED0001407863), Dr Georgina Konrat is required to maintain accurate and complete health records for all patients. These records are retained in accordance with the requirements of the Health Records and Information Privacy Act 2002 (NSW).

Health records for adult patients are retained for a minimum of seven years from the date of the last entry. Records for patients who were children at the time of treatment are retained until the patient turns 25 years of age, or for seven years from the last entry, whichever is longer.

We use the following third-party services in the operation of our practice:

• GoHighLevel / LeadConnector: our customer relationship management platform, used for managing patient enquiries, communications, and appointment scheduling. It also provides the website contact forms and the “Chat with us” widget. The chat widget only loads after you click it, so nothing is sent to GoHighLevel on an ordinary page view.
• Calendly: our online booking system. When you book, Calendly receives the name, email address, phone number, and any notes you provide.
• Google Analytics 4: website analytics covering pages visited, referrer, approximate location derived from your IP address, browser and device, and on-page interactions such as phone-link clicks and booking completion. We do not pass your name, email address, phone number, or health information to Google.
• Google Ads: conversion measurement and remarketing audiences derived from website activity. Where you arrive from one of our ads, the Google click identifier is recorded so a booking can be attributed to that ad.
• Meta Pixel (Facebook and Instagram): measures the effectiveness of our advertising on Meta platforms. The Pixel loads across the website, including pages about specific procedures. It records the URL of each page you visit on this site, your referrer, and standard interaction events. We do not enable Meta Advanced Matching and we do not send your name, email address, phone number, or health information to Meta.
• Vercel: website hosting and content delivery. Receives standard request data including IP address, user agent, and the requested URL.
• Google Maps: embedded clinic location maps, loaded by Google when the relevant page is viewed.

If you would prefer not to be measured by our analytics and advertising tools, you can use a private browsing window, install a tracker-blocking extension, or change your ad preferences in your Google and Meta account settings.

We do not sell, rent, or trade your personal information to third parties. We may disclose your health information to other health practitioners involved in your care (such as your GP, anaesthetist, or hospital) with your consent, or where required by law.

Our website may use cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device that help us understand how you use our site.

We use Google Analytics to collect data about website usage, including pages visited, time on site, and referral sources. We do not upload your name, email address, phone number, or health information to Google. We do not treat this data as identifying you by name, but the advertising tools described above use cookies and identifiers that can be associated with your browser or your Google and Meta accounts. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Embedded content from other websites (such as videos or maps) may set their own cookies and collect data. We recommend reviewing the privacy policies of those third-party services.

Several of the providers we rely on are based outside Australia, primarily in the United States. As a result, some of the information collected through this website is stored on, or accessible from, servers located overseas. This is consistent with Australian Privacy Principle 8 (Cross-border disclosure of personal information).

The overseas providers we use include:

• Vercel Inc. (United States): website hosting and content delivery.
• Google LLC (United States): Analytics, Ads, Fonts, and Maps.
• Meta Platforms Inc. (United States and Ireland): Meta Pixel.
• Calendly LLC (United States): consultation booking.
• HighLevel Inc. (United States): customer relationship management, website forms, the chat widget, and SMS and email communications.

Your clinical records are held separately from these systems and are not sent overseas as part of routine website or enquiry handling.

By using this website, completing a form, or booking a consultation, you consent to the disclosure of your information to these overseas recipients. Where information is disclosed overseas, we take reasonable steps to ensure the recipient handles it in accordance with the Australian Privacy Principles, but you acknowledge that overseas recipients may be subject to different privacy laws and that the protections of the Australian Privacy Act 1988 may not apply.

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access your personal and health information held by our practice.
• Request correction of any inaccurate, incomplete, or out-of-date information.
• Withdraw consent for the use of your information for purposes other than direct clinical care (subject to legal requirements).
• Make a complaint if you believe your privacy has been breached.

To make a request regarding your personal information, please contact us using the details below.

If you believe your privacy has been breached or you have a concern about how your information has been handled, we encourage you to contact our practice directly so we can address your concern.

If your concern remains unresolved, you may lodge a complaint with:

• Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au
• AHPRA (Australian Health Practitioner Regulation Agency): www.ahpra.gov.au
• Health Care Complaints Commission (NSW): www.hccc.nsw.gov.au

Dr Georgina Konrat

Suite 402, Level 4, 59-75 Grafton Street, Bondi Junction NSW 2022

Phone: 02 9188 1949

Email: info@drgeorginakonrat.com.au