Home › Privacy Policy
Privacy Policy

Privacy Policy

How Redux Rehab collects, uses, stores and discloses personal information, including health information. Version 1.1, last updated 8 October 2026.

Redux Rehab Pty Ltd (ABN 36 696 717 432) ("Redux Rehab", "we", "us") is a NSW workplace rehabilitation provider. We take the privacy of the people we work with seriously. This policy explains how we collect, use, store and disclose personal information, including health information, when we deliver workplace rehabilitation and CTP rehabilitation services and when you use this website.

The rules we follow

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and we handle health information in line with the Health Records and Information Privacy Act 2002 (NSW). Where we deliver services under the NSW workers compensation or CTP schemes, we also comply with the applicable scheme legislation and State Insurance Regulatory Authority (SIRA) requirements.

What we collect

  • Identity and contact details: your name, phone number, email and address.
  • Employment details: your employer, role and duties, where relevant to your recovery at work.
  • Health and injury information: information about your injury, treatment, capacity and recovery that is relevant to the rehabilitation services we are engaged to provide.
  • Claim details: your insurer or scheme agent, claim number and claim correspondence.
  • Website enquiries: the name, contact details and message you provide through our referral or contact forms.
  • Phone calls: when you call our main number, a recording and transcript of the call and the details you give.
  • Signing records: when you sign a form with us electronically, the date and time, your IP address, the country it was signed from and your device and browser details, kept as evidence of your signature.

How we collect it

Wherever practical we collect information directly from you, with your consent. We may also receive information from your insurer or scheme agent, your employer, your treating doctor and other treating practitioners as part of a referral or during your program. We only collect what is relevant to the services we provide.

Why we use it

  • To deliver workplace rehabilitation services, including assessment, recovery at work planning and coordination with the people supporting your claim.
  • To prepare the reports and plans the workers compensation and CTP schemes require.
  • To administer our services, including invoicing the insurer.
  • To respond to enquiries made through this website.

Who we share it with

We share relevant information with your consent, or where scheme legislation requires or permits it, with: your insurer or scheme agent; your employer (limited to what is needed to support your recovery at work, such as capacity and suitable duties, not your broader clinical information); your treating doctor and treating practitioners; and SIRA where required by law. We do not sell personal information. We also use service providers to run our business, and some of them store or process information outside Australia. They are listed in the next section.

Service providers we use, and where they are

Your case record is kept in Cliniko, which stores it in Australia. To run our service we also use the providers below. Some of them store or process information overseas, so your information is likely to be held in or pass through the United States, and may also pass through Japan, New Zealand, the United Kingdom, India, the Netherlands, Singapore and other countries where these providers operate, as listed below.

  • Case records: Cliniko. Australia.
  • Email and document storage: Google Workspace. The United States and other countries where Google operates data centres. Google does not offer storage limited to Australia.
  • Our website, online forms and operations database: Cloudflare, a United States company. Our database is held in Cloudflare's Oceania region, and our website and forms run on Cloudflare's global network.
  • Emails sent automatically from our website, such as your copy of a signed form: Resend. Japan and the United States. If Resend is unavailable, a backup service, Web3Forms, delivers them from the United States.
  • Our phone line and text message alerts to our team: Twilio. The United States.
  • Our AI phone receptionist, including call recordings and transcripts: ElevenLabs, using an AI model provided by Google. Stored in the United States; processed in the United States, the Netherlands and Singapore.
  • AI tools that help our team prepare documents and manage email and records: Anthropic (Claude). Stored in the United States; may be processed in the United States, Europe, Asia and Australia.
  • Accounting and invoicing (the invoices we send your insurer carry your name and claim number): Xero. Australia, New Zealand, the United States, the United Kingdom, India and other countries where Xero and its subprocessors operate.
  • Software code storage: GitHub. The United States and other countries.

We remain responsible for your information while these providers hold it. You can ask us at any time which providers hold your information.

How we use AI

AI tools help our team prepare drafts of reports, plans and letters, sort and summarise email, and check our records, compliance and billing. To do that they may use your name, contact details and claim details, and information about your injury, treatment, capacity and work.

No decision about you is made by a computer program alone. Your treating doctor decides your capacity for work, and your insurer makes the decisions about your claim.

Our phone line

Calls to our main number, (02) 8403 2320, are answered by an AI receptionist. The receptionist takes your details and the reason for your call so our team can follow up. It does not make decisions about your claim or your program. A summary and transcript are sent to our team by email. If you would rather not speak with the AI receptionist, you can email us at [email protected] instead. Telehealth sessions with your consultant are separate, and are never recorded without the written consent of everyone involved.

How we keep it safe

Your case record is held in Australia, and the other systems we use, and where they are, are listed above. Records are retained for a minimum of 7 years from the date of last service, or longer where the law requires; records relating to a person under 18 are retained until they turn 25 or for 7 years from last service, whichever is later. Telehealth sessions run on encrypted platforms and are never recorded without the written consent of everyone involved. If a privacy breach ever occurs, including at one of our service providers, we contain it, assess it within 30 days, and notify affected people and the Office of the Australian Information Commissioner where the law requires. We also tell SIRA, as it requires.

Access, correction and complaints

You can ask for access to the personal information we hold about you, and ask us to correct it, by contacting [email protected] or (02) 8403 2320. Access and correction requests are processed within 30 days. You can also ask us which service providers hold your information, or ask any question about this policy. If you have a privacy concern or complaint, contact us first at [email protected] or (02) 8403 2320. We acknowledge it in writing within 2 business days and give you our response within 10 business days. If we need longer, we tell you why and when to expect it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or the NSW Information and Privacy Commission (ipc.nsw.gov.au). You can also contact SIRA at any time on 13 74 72 or [email protected].

This website

Information submitted through our forms is used only to respond to your enquiry or referral and, when you sign a consent form, to deliver your program. Form submissions reach our team by email through the providers listed above. When you sign a form electronically, we record the date and time, your IP address, the country it was signed from and your device and browser details as evidence of your signature. This site may collect basic, non identifying usage statistics to help us understand how it is used.

Changes

We update this policy from time to time, including when we start or stop using a service provider listed above. The current version is always available on this page, with its version number and date.

Contact: Redux Rehab Pty Ltd, [email protected], (02) 8403 2320. Version 1.1, last updated 8 October 2026.