Creston Health is committed to the utmost privacy of your personal information.
This Privacy Policy applies to all Creston Health operations. It explains how we collect, use and disclose your personal information and our reasons for doing so, as well as your privacy rights.
By providing personal information to us, you consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy.
This Privacy Policy was last updated on 27 April 2026. We may update it from time to time and will post any revised policy on this web page.
It is important to us that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.
For further information about our Privacy Policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out in section 13 below.
1. Who we are
In this Privacy Policy, ‘us’, ‘we’, ‘our’ and ‘Creston Health’ are used to refer to Creston Health Pty Ltd (ABN 51 679 526 491).
Creston Health provides practice finance, operations, and growth services to medical and allied health specialists and practices, including medical billing and revenue cycle management, bookkeeping and financial administration, payroll, marketing and digital services, and business advisory services.
2. What personal information do we collect?
We only collect personal information for purposes which are directly related to our services and activities. We may collect the following types of personal information:
contact details, including name, mailing and street address, email address and telephone numbers;
business and professional details, including practice name, role or title, medical specialty, ABN, and details of your practice or organisation;
financial details, including bank account details (for payment processing), payment card details, and transaction and billing records relating to the services we provide;
identification information, including date of birth, identification documents and the results of identity verification checks;
details of the services you have enquired about or engaged us to provide, including any additional information necessary to respond to your enquiries or deliver those services;
your device ID, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from our website, IP address and standard web log information;
information you provide to us through our website or to our representatives, including your marketing and communication preferences and information about service preferences;
any other personal information that may be required in order to facilitate your dealings with us.
3. When do we collect personal information?
We may collect personal information directly from you when you:
complete an enquiry form on or contact us through our website;
subscribe to receive news or updates from Creston Health;
express an interest in, or engage us to provide, our services;
ask us to send you information about our services;
communicate with us through any form of correspondence, chat, email, our website, or via social media platforms, applications or websites;
interact with our website, services, content or advertising; or
apply for a job or position with us.
We may also collect personal information from third parties, including:
your employees, partners or authorised representatives who contact us on your behalf;
our related entities, business service providers, contractors and agents, including our marketing contractor, IT systems and cloud storage providers, email marketing providers, payment providers and software platform providers such as accounting and practice management system vendors;
a recruitment consultant, previous employers and others who may be able to provide information to assist in our decision on whether to make you an offer of employment or engage you under a contract; or
publicly available sources and business registers.
4. Why do we collect personal information?
We may collect, hold, use and disclose your personal information for the following purposes:
to add you to our database to receive news about Creston Health and our services (with your consent);
to register you as a new client or prospective client;
to provide medical billing, finance, bookkeeping, payroll, marketing, digital, and business advisory services to you or your practice;
to manage and develop our relationship with you, including sending you information requested by you;
to communicate with you regarding the services we are providing or may provide to you;
to process invoices, payments and billing-related transactions on behalf of your practice;
to maintain financial and business records required for taxation, regulatory or legal compliance;
to comply with our legal obligations, including producing records as required by law, resolving disputes, and enforcing our agreements;
to prevent or lessen a serious threat to an individual’s life, health or safety;
to conduct internal administration processes including account keeping, billing and recovery of monies, as well as operating, protecting, improving and optimising our services, website and user experience, such as to perform analytics, conduct research, quality assurance and complaint handling;
to send you reminders, updates, security alerts and information requested by you;
to operate, protect and optimise our business, website and social media accounts; and
to consider your employment application.
5. Do we use your personal information for direct marketing?
Making you aware of carefully selected information about Creston Health and our services is an integral part of our business. We may send you direct marketing communications in the form of emails, SMS, mail or other forms of communication.
You may opt out of receiving such communications from us by contacting us using the details set out below or by using the opt-out facilities provided (e.g. an unsubscribe link).
6. To whom do we disclose your personal information?
We do not transfer your personal information to organisations who wish to use it for their own marketing promotions or other purposes.
We may disclose your personal information for the purposes described in this Privacy Policy to:
our related entities and third party suppliers and service providers, including our IT consultants, IT systems and cloud storage providers, accounting and practice management software providers, marketing contractors, email marketing providers, our banks, payment system operators and insurance providers;
professional advisers, including accountants, lawyers and auditors;
our employees;
anyone to whom our assets or businesses (or any part of them) are transferred; and
other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.
Where we do disclose your personal information, it will be on the basis that these individuals and organisations are required to keep the information confidential and secure, and they will only use the information to carry out the instructed services.
7. Disclosure of personal information outside Australia
We may disclose personal information outside of Australia to the individuals and organisations described above, including third party suppliers and service providers located in the United States (such as cloud storage and software platform providers).
When you provide your personal information to us, you consent to the disclosure of your information outside of Australia. While we are not required to ensure that overseas recipients handle that personal information in compliance with Australian privacy law, we will take reasonable steps to ensure that any overseas recipient will deal with such personal information in a way that is consistent with the Australian Privacy Principles and this Privacy Policy.
8. How long will we keep your personal information?
We will retain your personal information for as long as we consider necessary to provide the relevant services and to maintain business records for tax, legal and regulatory reasons.
9. Using our website and cookies
We may collect personal information about you when you use and access our website. While we do not use browsing information to identify you personally, we make use of cookies and other similar tracking devices to store information relating to your visit such as a unique identifier, or a value to indicate where you have seen a webpage. You can disable cookies through your internet browser but our website may not work as intended for you if you do so.
We may also use cookies to enable us to collect data that may include personal information. We will handle any personal information collected by cookies in the same way that we handle all other personal information as described in this Privacy Policy.
10. Security
We may hold your personal information in either electronic or hard copy form. We take reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure. We use a number of physical, administrative, personnel and technical measures to protect your personal information, including:
holding your electronic information on an encrypted database;
holding your hard copy information in a secure environment only accessible by authorised persons;
using SSL technology and firewalls on our website;
ensuring our staff and contractors sign confidentiality agreements; and
maintaining document retention and destruction policies.
Notwithstanding these efforts, we cannot guarantee the security of your personal information held in our systems, nor that information you supply through the internet or any computer network is entirely safe from unauthorised intrusion, access or manipulation during transmission. Any transmission is at your own risk and we will not be liable for any resulting misuse of your personal data.
Our emails and website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage you to read them before using those websites.
11. Accessing or correcting your personal information
You can access the personal information we hold about you by contacting us using the contact details below. We may also need to verify your identity when you request your personal information.
If you think that any personal information we hold about you is inaccurate, please contact us and we will take reasonable steps to ensure that it is corrected. You can also request us to complete information if you believe it is incomplete.
12. Making a complaint
If you wish to make a complaint about the way we have handled your personal information, you can contact us using the details set out below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time. If you think that we have failed to resolve the complaint satisfactorily, we will provide you with information about the further steps you can take.
You may raise a complaint with the Office of the Australian Information Commissioner (OAIC) if you consider that we have failed to handle your personal information in accordance with the Australian Privacy Principles. However, we would appreciate the chance to deal with your concerns before you approach the OAIC, so please contact us in the first instance. The OAIC can be contacted at www.oaic.gov.au.
13. Contact Us
For further information about our Privacy Policy or practices, or to access or correct your personal information, or make a complaint, please contact us:
Privacy Officer
Creston Health Pty Ltd (ABN 51 679 526 491)
Level 50, 108 St Georges Terrace, Perth WA 6000
[email protected]
Effective From: 27 April 2026
Last Updated: 27 April 2026
Version 1.0