Privacy Policy

SiteClinic provides clinical documentation, occupational health and emergency response software to industrial and resources operators. This policy explains what we collect and how it is protected.

Who controls the data

For clinical and occupational records created inside the platform, the operator (your employer or the site owner) is the data controller. SiteClinic acts as a processor under their instructions and does not use clinical data for any other purpose.

What we collect

• Account data: name, work email, registration number, site and role assignments.
• Clinical and occupational records entered by clinicians: presentations, observations, medications, case management, health surveillance and testing records.
• Operational records: equipment checks, inventory movements, incidents and handovers.
• Enquiry data submitted through the demonstration request form on this website.
• Security logs: authentication events and an immutable audit trail of record access.

How access is controlled

Access is enforced in the database, not just the interface. Every record is bound to a company and site, and users can only reach records for sites they are a member of. Clinical detail (notes, observations, medications, test results) is restricted to clinical roles. Management roles see only occupational outcomes — fitness for duty, restrictions, due dates and case status — never the underlying clinical detail for non-work-related presentations.

Storage and security

Data is encrypted in transit and at rest, hosted in managed cloud infrastructure, backed up continuously, and protected by row-level security policies plus multi-tenant isolation. Support access to a customer environment requires a logged, time-limited support session with a recorded reason.

Retention

Clinical records are retained according to the operator’s statutory obligations (generally seven years from the last entry, longer for minors and specified exposures). Enquiry data is retained for up to 24 months. Operators may request export or deletion of their environment at any time.

Your rights

Workers may request access to, or correction of, their own health records through the site clinic. Requests that cannot be resolved on site can be escalated to us and we will assist the operator in responding.

Contact

Privacy enquiries: privacy@siteclinic.app.