Privacy Policy

SuperPharmacyPlus (ABN 50 280 623 275) is a locally owned community pharmacy at 621 Stafford Road, Stafford QLD 4053, with an online store at superpharmacyplus.com.au. In this policy, “we”, “us” and “our” means SuperPharmacyPlus.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect, how we use and protect it, and how you can access it, correct it or make a complaint. It applies to our pharmacy, mobility, compression and allied health services, and to our website and online store.

“Personal information” is information or an opinion about an identified individual, or an individual who is reasonably identifiable. “Health information” is a type of sensitive information and is given extra protection under the Privacy Act.

The information we collect depends on how you deal with us. It may include:

• Contact and identity details: your name, date of birth, address, phone number and email address.
• Health information: prescriptions and eScript tokens, medication history, allergies, medical conditions, measurements and assessments for compression or mobility products, referrals from health professionals, and notes from services such as vaccinations, medication reviews and occupational therapy.
• Government and funding identifiers: Medicare, DVA, concession and PBS safety net details, and NDIS, Support at Home, insurance or workers’ compensation claim details.
• Order and account details: products purchased, delivery details, order history, account login details and Click & Collect information. Card payments are processed by our payment providers, and we do not store your full card number.
• Communications: emails, messages, phone calls, form submissions and feedback.
• Website and device information: your IP address, browser and device type, pages visited, search terms entered and referring websites, collected through cookies and similar technologies.
• Marketing preferences: whether you have subscribed to our emails or SMS, and how you interact with them.
• Job applications: details you provide when you apply to work with us.

If you supply information about another person, such as a family member you care for, please make sure they know you are sharing it with us and that they can read this policy.

We collect most personal information directly from you: in store, over the phone, by email, through our website and online forms, through the MedAdvisor app, and when you send us an electronic prescription.

With your consent, or where the law allows, we may also collect information from:

• your doctor, prescriber or other health professionals involved in your care
• your carer, guardian or authorised representative
• NDIS plan managers, aged care providers, insurers and case managers
• electronic prescription exchange services, Medicare and the Department of Veterans’ Affairs
• your My Health Record, where you have one and access is permitted

You can deal with us without identifying yourself, or by using a pseudonym, when you make general enquiries or buy many over-the-counter products in store. We need to identify you to dispense prescriptions, provide most professional services, process claims or deliver online orders.

We only collect health information when it is needed to provide our services to you and you have consented, or when the collection is required or authorised by law. In most cases your consent is implied when you ask us to dispense a prescription or provide a health service.

Our pharmacists and staff keep health information confidential. We follow professional standards for pharmacy practice and the Quality Care Pharmacy Program (QCPP).

We use your personal information to:

• dispense medicines and provide pharmacy, compression, mobility, hire and allied health services
• process, deliver and support your orders, returns and account
• make claims with Medicare, the PBS, DVA, the NDIS, aged care providers and insurers
• communicate with you about your orders, prescriptions, appointments and enquiries
• meet our legal, professional and record-keeping obligations
• prevent and detect fraud and keep our systems secure
• improve our website, products and services
• send you marketing, if you have agreed to receive it (see below)

We will only use or disclose your information for another purpose if you consent, if you would reasonably expect it and it is related to the original purpose (or, for health information, directly related), or if the law requires or allows it.

If you subscribe or give us your email address or phone number, we may send you newsletters, offers and reminders by email or SMS. We use Klaviyo to manage these messages. Our emails and SMS may contain tracking that tells us whether a message was received, opened or clicked, so we can keep our messages relevant and check they are being delivered.

You can unsubscribe at any time using the link in our emails, by following the opt-out instructions in our SMS, or by contacting us. Even if you unsubscribe, we will still send messages about your orders and services.

We will never sell, rent or share your phone number or email address with third parties for their own marketing.

We may share your personal information with:

• other health professionals involved in your care, such as your doctor, specialist or occupational therapist
• your My Health Record, where you have one, unless you ask us not to upload information
• Services Australia (Medicare and the PBS), DVA, the NDIA and other government agencies when we make claims or where the law requires
• NDIS plan managers, aged care providers, insurers and case managers, when they are funding your products or services
• delivery carriers, so they can deliver your order
• service providers who help us run our business, such as our eCommerce platform, payment and fraud-prevention providers, email and SMS platforms, online form providers, IT and cloud services, and professional advisers
• regulators, law enforcement or others when required or authorised by law

Our service providers may only use your information to provide services to us.

Most of our systems store information in Australia. Some of our service providers store or process information overseas, mainly in the United States (for example, our email and SMS platform and our online form provider). Payment and fraud-prevention providers may also process information overseas.

Before using an overseas provider, we take reasonable steps to make sure your information is handled in line with the APPs. We do not send health information overseas unless that is needed to provide a service you have asked for, or the law allows it.

Our website uses cookies and similar technologies to keep your cart and account working, remember your preferences, understand how people use our website, and measure our advertising. We use analytics and advertising services such as those provided by Google and Microsoft. These services may collect information about your visit, such as your device, pages viewed and how you arrived at our website.

You can set your browser to refuse or delete cookies, although some parts of our website, such as the cart and checkout, may not work properly without them.

When you pay online, our payment providers (Stripe and PayPal) use automated fraud-prevention tools to check the risk of fraud. These tools use information such as your name, billing and delivery addresses, email address, IP address, device details and order details.

Based on this check, a payment may be declined. If this happens, you can try another payment method or contact us. We do not use computer programs alone to make decisions about your health care.

We store personal information in secure systems, both electronic and paper. We protect it using measures such as access controls, multi-factor authentication, encryption, staff training and confidentiality obligations.

We keep health and dispensing records for as long as the law and professional standards require. When we no longer need personal information, we take reasonable steps to destroy it or de-identify it.

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

You can ask to see the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Please contact us using the details below. We may need to confirm your identity first.

We will respond within a reasonable time, usually within 30 days. Access is generally free, although we may charge a reasonable fee for large requests. If we refuse access or correction, we will tell you why in writing and explain how you can complain.

If you have a question, or think we have not handled your personal information properly, please contact us first so we can try to resolve it. We will acknowledge your complaint, look into it and respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

Privacy enquiries
SuperPharmacyPlus
621 Stafford Road, Stafford QLD 4053
Email: [email protected]
Phone: 07 3355 3052

We may update this policy from time to time. The latest version will always be on our website.

Last updated: 2 November 2026.