Privacy & personal information

Privacy Policy

This policy explains how Dr Ryan McConnell collects, uses, discloses and protects personal and health information.

Last updated: October 2026

1. Introduction

Dr Ryan McConnell is committed to protecting the privacy of individuals who visit this website, contact the practice or receive medical care. This Privacy Policy explains how personal information may be collected, held, used and disclosed through drryanmcconnell.com.au, through interactions with the practice, and through authorised website, enquiry-management, analytics and advertising integrations.

Personal information, including health information, is handled in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as applicable NSW health privacy requirements.

2. Information we collect

Depending on how you interact with the website or practice, we may collect and hold:

  • your name, date of birth, address, email address and telephone number;
  • information you voluntarily provide through contact, enquiry or appointment forms;
  • referral information and information provided by your GP, specialist or other healthcare provider;
  • health information relevant to your care, which may include symptoms, medical history, medications, allergies, diagnoses, imaging, pathology results, clinical reports and details of consultations or treatment;
  • Medicare, private health insurance, billing and administrative information where relevant;
  • information relating to appointment requests and medical enquiries;
  • records of communications with the practice, including messages, emails, SMS and call or appointment notes;
  • technical information, including IP addresses, browser and device information, website usage data and referring pages; and
  • information collected through cookies, analytics and similar technologies.

Please avoid submitting highly sensitive or urgent medical information through general website contact forms or ordinary email unless specifically requested. Website enquiries should not be used for medical emergencies.

3. How we collect information

We generally collect personal information directly from you when you contact the practice, submit a website form, make an appointment, attend a consultation or receive treatment. Where appropriate, information may also be received from your referring doctor, other healthcare providers, hospitals, diagnostic imaging or pathology providers, Medicare, private health insurers, a person authorised by you, or other parties involved in your care.

Limited technical information may be collected automatically when you use this website through cookies, analytics and similar technologies.

4. How we use information

Personal information may be used where reasonably necessary to:

  • respond to enquiries and appointment requests;
  • communicate with patients and referring healthcare professionals, including by phone, email and SMS;
  • assess your condition, provide medical care and coordinate treatment with other healthcare providers;
  • review medical imaging, pathology and other investigations relevant to your care;
  • manage consultations, procedures, follow-up care, billing and administration;
  • maintain clinical and administrative records and meet legal, regulatory and professional obligations;
  • manage website functionality, security and service improvement;
  • understand website performance and improve the information and services provided; and
  • measure and optimise advertising performance.

Personal information is not sold to advertisers.

5. Health information

Health information is sensitive information and is handled with particular care. We generally collect health information with your consent where it is reasonably necessary to provide a health service to you.

Health information may be used or disclosed for purposes directly related to your care where you would reasonably expect this, including communication with your referring doctor and other members of your treating team. Information may also be used or disclosed where you have consented or where required or authorised by law.

6. Website forms and enquiry management (HighLevel)

Enquiry and appointment request forms on this website are provided through HighLevel (also known as GoHighLevel), a customer relationship management and communications platform used by the practice.

When you submit a form, the information you provide — such as your name, contact details and the content of your enquiry — is collected and stored within the practice’s HighLevel account. HighLevel may also be used to manage enquiries and appointment requests and to send related communications, such as email or SMS responses, appointment confirmations and reminders.

Information held in HighLevel is used only for the purposes described in this policy. Access is limited to authorised practice staff and service providers. HighLevel is a third-party provider based in the United States, and information held in the platform may be stored or processed outside Australia (see section 12).

For more information about HighLevel’s privacy practices, visit: https://www.gohighlevel.com/privacy-policy

7. Google Analytics, Google Ads and Meta

This website may use Google Analytics and Google Ads to understand website traffic, measure advertising performance and improve the relevance and effectiveness of advertising. These services may collect information through cookies and similar technologies, subject to applicable settings and consent requirements.

For more information about Google’s privacy practices, visit: https://policies.google.com/privacy

This website also uses the Meta Pixel and Meta Conversions API, provided by Meta Platforms, Inc., the operator of Facebook and Instagram, to measure the effectiveness of advertising on those platforms. When you use this website, these tools may share technical information with Meta, such as your IP address, browser and device details, a cookie identifier, and the fact that you visited the website or submitted an enquiry. We do not share your name, contact details, the information you enter in our enquiry form, or details of any health condition with Meta. Meta handles this information under its own privacy policy, available at: https://www.facebook.com/privacy/policy. You can manage how Meta uses information for advertising through your Facebook or Instagram ad preferences.

8. Google Ads API integration

Dr Ryan McConnell uses a private Google Ads API integration to access and analyse advertising data from Google Ads accounts under his control. The integration uses Google’s OAuth 2.0 authorisation framework to obtain authorised access to Google Ads information. The integration is intended exclusively for internal advertising analysis, campaign monitoring, reporting and optimisation. It is not offered as a public application, and third parties cannot connect their own Google Ads accounts through this integration.

Authorised advertising data may be processed through OpenAI’s ChatGPT service to generate reports, analyse campaign performance and assist with advertising management. The information accessed may include campaign settings, advertising expenditure, performance metrics, search terms and conversion information, depending on the permissions granted and the reports requested.

Access is limited to the permissions granted through Google’s authorisation process and can be revoked through the relevant Google account settings. The Google Ads API integration is not intended to retrieve or process patient medical records. Google Ads information is not sold or made available to unrelated advertisers.

9. Email and online communications

If you submit an enquiry, appointment request or other form through this website, the information you provide will be used to respond to your request and, where relevant, assist with arranging your care.

Email, SMS and online communications may not always be completely secure. Please do not rely on a website form, email or SMS for urgent medical concerns. If you require urgent medical attention, call 000 or attend your nearest emergency department.

10. Cookies and website analytics

This website may use cookies and similar technologies, including those provided by Google and Meta, to support website functionality, understand how visitors use the website, measure performance and assist with advertising measurement. These technologies may collect information such as device type, browser, IP address, pages viewed, referring website and interactions with the site.

You can usually control or disable cookies through your browser settings, although doing so may affect some website functionality.

11. Disclosure to third parties

Personal information may be disclosed where reasonably necessary to provide your care, operate the practice, respond to enquiries, maintain the website or analyse advertising performance. Depending on the circumstances, recipients may include:

  • your referring GP or specialist and other members of your treating team;
  • hospitals, healthcare providers, diagnostic imaging, pathology and other clinical service providers involved in your care;
  • Medicare, private health insurers and billing or administrative service providers;
  • website hosting, information technology, communications, cloud storage and practice management service providers;
  • enquiry-management and communications providers, including HighLevel;
  • analytics and advertising providers, including Google and Meta;
  • OpenAI where authorised advertising data is processed through ChatGPT for the purposes described in this policy;
  • professional advisers, insurers or regulatory bodies where appropriate; and
  • other persons or organisations where you have consented to the disclosure or where disclosure is required or authorised by law.

Personal and health information is not sold to advertisers.

12. Overseas processing and service providers

Some technology, website, enquiry-management, analytics, communications or cloud service providers may process or store information outside Australia. For example, HighLevel, Google, Meta and OpenAI are based in the United States, and information handled through their services may be stored or processed in the United States or other countries where they or their sub-processors operate.

Where Australian privacy law requires it, reasonable steps are taken in relation to the overseas handling of personal information. You may contact us if you would like further information about service arrangements relevant to your information.

13. Data security and retention

Reasonable steps are taken to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Personal information may be held in electronic practice systems, clinical records, secure cloud services and, where necessary, paper records.

Information is retained for as long as reasonably required for its intended purpose and to meet applicable legal, professional and clinical record-keeping obligations. Where permitted and appropriate, information that is no longer required is securely destroyed or de-identified.

14. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Requests can be made using the contact details below. We may need to verify your identity before providing access. In some circumstances, access may be limited or refused where permitted by law.

15. Anonymity and pseudonyms

Where lawful and practicable, you may interact with us anonymously or using a pseudonym. However, it will generally not be practicable to provide medical consultation, treatment, Medicare billing or coordinated clinical care without accurately identifying you.

16. Privacy complaints

If you have a concern or complaint about how your personal information has been handled, please contact us using the details below. We will review the concern and respond within a reasonable period.

If you are not satisfied with our response, you may also contact the Office of the Australian Information Commissioner (OAIC) for information about privacy rights and complaint options.

17. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our website, clinical or administrative practices, technology, service providers or legal obligations. The current version will be published on this page with the date of the latest update.

18. Contact

For questions about this Privacy Policy, requests to access or correct personal information, or concerns about the handling of personal information, please contact:

Dr Ryan McConnell
Phone: (02) 9023 9970
Email: info@drryanmcconnell.com.au