How we handle personal information.

LAST UPDATED: 14 AUGUST 2026

1. Who we are

PreopHQ is operated by Usama Tariq trading as PreopHQ (ABN 54 299 326 744) ("PreopHQ", "we", "us"). PreopHQ provides pre-anaesthetic intake software to Australian anaesthetists and the clinics they service. Because our platform holds health information, we treat ourselves as bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles regardless of business size.

2. The two kinds of information we hold

Clinic and business information - collected from practitioners and clinics who use or enquire about PreopHQ: names, roles, contact details, practice details, and account records. We collect this directly from you (for example, through the book-a-demo form or during onboarding).

Patient health information - collected through questionnaires, booking and consent forms that patients complete for their treating clinic. For this information, the clinic is the health-service provider and decides what is collected and why; PreopHQ stores and processes it on the clinic's behalf and on its instructions. Patients with questions about their records should contact their clinic first; we will assist the clinic with any access or correction request.

3. Collection (APPs 3–5)

• We collect personal information only when it is reasonably necessary for providing the service - there are no hidden collections and no purchase of data from third parties.
• Patient questionnaires state who the information is for and why it is being collected before submission.
• Demo-request details are used to respond to your enquiry and administer demo access, and for no other purpose.

4. Use and disclosure (APP 6)

• Patient health information is used solely to deliver the intake service to the treating clinic: presenting submissions to the clinic's authorised staff, generating documents (such as booking summaries and consent records), and sending the communications the clinic configures (such as questionnaire links and reminders).
• We do not sell, rent, or share personal information with third parties for their own purposes. Ever.
• We do not use patient health information for advertising, profiling, or training artificial-intelligence models.
• Disclosure outside the above happens only where required by law.

5. Storage and security (APP 11)

• All data is processed and stored onshore in Australian data centres. We do not send personal information - including for any document or text processing - to overseas services.
• Each clinic's data is held in its own isolated database, encrypted with keys unique to that clinic.
• Access to patient records is limited to the clinic's own authorised users. PreopHQ's administrative access for onboarding is technically restricted to configuration and cannot read patient records; every administrative action is logged and visible to the clinic.
• Passwords are stored using one-way cryptographic hashing.

6. Retention

Patient health information is retained on behalf of the treating clinic, for as long as the clinic instructs and as required by the laws that apply to the clinic's records (health -records retention obligations vary by state and patient age). When a clinic leaves PreopHQ, its data is exported to the clinic and then deleted from our systems on the clinic's instruction. Business and enquiry information is kept only as long as needed for the purpose it was collected.

7. Access and correction (APPs 12–13)

You may request access to, or correction of, personal information we hold about you. For patient records, we will refer the request to, and work with, your treating clinic - the holder of the clinical relationship. Contact us using the details below; we respond within 30 days.

8. Data breaches

We maintain a data-breach response process consistent with the Notifiable Data Breaches (NDB) scheme. If a breach involving personal information is likely to result in serious harm, we will notify affected clinics, affected individuals, and the Office of the Australian Information Commissioner (OAIC) as the scheme requires.

9. Cookies and website analytics

The PreopHQ application uses session cookies strictly for sign-in and form functionality. This marketing website sets no advertising or cross-site tracking cookies.

10. Complaints and contact

Privacy questions or complaints: The Privacy Officer, PreopHQ - hello@preophq.com.au. We acknowledge complaints within 7 days and aim to resolve them within 30. If you are not satisfied with our response, you may complain to the OAIC at www.oaic.gov.au.

11. Changes to this policy

We will post any changes on this page with an updated date. Material changes affecting how patient information is handled are notified to clinics directly.