Privacy Policy
Last updated July 2026
Dr Lucy Lex is committed to protecting your privacy. This policy explains how your personal and health information is collected, used, stored and protected, in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the Health Records and Information Privacy Act 2002 (NSW).
What we collect
We collect personal information such as your name, contact details and date of birth, and health information you choose to share when you book an appointment, attend the practice, complete the Health Scorecard, or contact us. Health information is sensitive information and is treated with a higher standard of care.
Where it is lawful and practicable, you may deal with us anonymously, for example when making a general enquiry. Providing care, however, requires us to know who you are.
Why we collect it
We collect your information to provide and manage your care, to arrange and confirm appointments, to keep accurate clinical records as required by law, to communicate with you, and to meet our professional and legal obligations as a registered health practice.
Consent
We collect health information only with your consent, and only what is reasonably needed to provide your care. You can withdraw your consent at any time, though this may affect our ability to provide care. Information about a child is collected from and with the consent of a parent or guardian.
Online bookings
Appointments are booked through Halaxy, a secure practice-management and booking platform used by Australian healthcare providers. When you book, the details you enter are collected and held in Halaxy on our behalf, and Halaxy’s own privacy policy also applies. We recommend reading it at halaxy.com.
How we store and protect it
Your clinical records are held securely in our practice-management system, and access is limited to those who need it to provide your care. We take reasonable steps to protect your information from misuse, loss, interference and unauthorised access, and we aim to hold health information within Australia.
Clinical records are retained as required by law, generally for at least seven years from the last entry, and for records about a child, until they turn 25. In the unlikely event of a data breach likely to cause serious harm, we will notify you and the regulator in line with the Notifiable Data Breaches scheme.
When we share it
We do not sell your information, and we do not share your health information for marketing. We will only share it where it is necessary for your care, for example a referral made with your consent, or where we are required or authorised to do so by law.
Communications and marketing
We will only send you wellness or marketing communications if you have opted in, and every such message includes a simple way to opt out. Appointment confirmations and reminders are service messages relating to your care.
Website, cookies and analytics
This website may use analytics and advertising tools, such as Google Analytics and the Meta Pixel, to understand how the site is used and to measure advertising. These tools use cookies and may collect information such as your device type and the pages you visit. They do not receive your health information or clinical records.
You can limit this collection by adjusting your browser’s cookie settings or using the opt-outs those providers offer. The website is hosted on infrastructure that may process technical data, such as server logs, outside Australia.
Access and correction
You can ask to see the personal information we hold about you, or ask us to correct it, by contacting us using the details below. We will respond within a reasonable time. In limited circumstances allowed by law, access may be declined, and if so we will explain why.
Complaints
If you have a concern about your privacy, please contact us first so we can address it. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au, or, for NSW health-privacy matters, the Information and Privacy Commission NSW at ipc.nsw.gov.au.
Changes to this policy
We may update this policy from time to time. The current version is always published on this website.
Contact
To contact us about privacy, email drlucylex@gmail.com, call 0406 115 758, or write to 102 King Street, Manly Vale NSW 2093.