Legal
Privacy Policy
Version 2.0 · Last updated 29 Aug 2026
This Privacy Policy explains how Webbed Feet Pty Ltd (ABN 50 135 841 477), operating MySpecialistGP at
myspecialistgp.com.au, handles personal information.
MySpecialistGP is a platform that helps you understand ADHD and connects you with health practitioners who can assess and treat it. We are not a medical practice. When you book an appointment, your consultation is with an independent doctor, and that doctor holds their own clinical records and has their own privacy obligations.
This policy covers myspecialistgp.com.au. The Velluto clinical assessment platform (velluto.app) has its
own policy: Velluto Privacy Policy. If you book an appointment, you will use both, and section 5 explains how information moves between them.
1. What we collect
When you book an appointment. Your name, email address, phone number, date of birth, Medicare card number and expiry date, home address, and your chosen appointment time.
When you purchase the GP-ready ADHD dossier. Your name, email address, mobile number, home address and date of birth, to process your purchase and prepare your file. The dossier itself, your questionnaire answers, observer report, childhood evidence and any documents, is completed and stored in Velluto, not on this website. See section 2.
When you send an enquiry. Your name, email address, and anything you write in the message.
When you join the waitlist or ask to be matched with a GP. Your name, email address, phone number,
state, suburb and postcode, the type of appointment you are looking for, and how you would like to be
contacted.
When a practitioner asks to be listed. The practitioner’s and practice’s contact and professional
details, including AHPRA registration details.
Automatically, when you visit. Your IP address, browser and device type, the pages you view, and how
you arrived. See section 6.
2. Sensitive and health information
Some of what we collect is sensitive information under the Privacy Act, and some is health
information.
Your Medicare card number is a government related identifier. We collect it and pass it to your treating
doctor for two reasons.
The first is billing: so your consultation is billed correctly and you can claim your Medicare rebate.
The second is prescribing safety. ADHD stimulant medications are Schedule 8 controlled substances, and
before prescribing one your doctor must check your state’s real-time prescription monitoring system
(QScript in Queensland) to see what you have already been prescribed. Your Medicare details help your
doctor identify you correctly in that system.
We do not check the prescription monitoring system ourselves. Only registered health practitioners can
access it. We hold your Medicare details and make them available to your treating doctor, who does the
check.
We do not use your Medicare number for any other purpose.
Booking an appointment for an ADHD assessment tells us something about your health. We treat the fact of
your booking, and everything attached to it, as health information.
We collect sensitive information only where you provide it to us for one of the purposes in section 3, and
we handle it under the Australian Privacy Principles and the Privacy Act 1988 (Cth).
We do not collect your clinical questionnaire answers through this website. Assessment questionnaires,
observer reports and uploaded documents are collected by Velluto and are covered by the Velluto Privacy
Policy.
This is true whether you book an appointment or purchase the GP-ready ADHD dossier: either way, the questionnaires themselves are completed in Velluto, not on this website.
3. Why we collect it
- To book your appointment and give the treating doctor what they need to see you
- To give your treating doctor what they need to prescribe safely, including the Medicare details they use
to identify you in your state’s prescription monitoring system (section 2) - To take payment for your appointment and issue a refund where our cancellation policy provides for one
- To send you appointment confirmations, reminders and the link to complete your pre-appointment
questionnaire - To prepare and deliver your GP-ready ADHD dossier, if you purchase one, including sending the finished file to the doctor you choose
- To answer your enquiry
- To tell you when a suitable GP has availability, if you asked us to
- To operate, secure and improve the website
4. Who handles your information
Your information is handled by the following, each for the purpose listed. Some are overseas (section 5).
| Who | What they receive | Why |
|---|---|---|
| The treating doctor and their practice | Your booking details | They are providing your care. This is the reason you gave us the information. |
| A GP or clinician you choose | The finished GP-ready ADHD dossier, if you buy one | Because you asked us to send it to them. May not be a doctor listed on this site. |
| Velluto (velluto.app, velluto.health), operated by Webbed Feet Pty Ltd | Your booking details or dossier purchase details, to create your assessment record or prepare your file | The clinical assessment platform your doctor uses. Same owner as MySpecialistGP, separate system and separate policy. |
| Stripe | Your name, email address and payment card details | Booking payments are made to your doctor’s own Stripe account; dossier purchases are made to ours |
| Cloudflare | Your IP address and request data | Website security and delivery |
| Google (Tag Manager and Analytics) | Website usage data, IP address | To understand how the site is used. See section 6. |
| Meta (Facebook Pixel) | Website usage data, IP address, device information, and cookie identifiers linking your visit to a Facebook or Instagram ad | Advertising and remarketing, including measuring which ad converted. See section 6. |
| Resend | Your name and email address | To send booking confirmations, payment links and reminders |
| Trillet.ai | Whatever you say or type to our phone line or our website chat assistant (“Cece”), and your name and contact details if you give them | To answer questions about booking an assessment, by phone and website chat. Trillet and the AI model behind it are Australian-based. |
We do not sell your personal information, and we do not disclose it to anyone for their own marketing.
We may also disclose personal information where the law requires or authorises it, or where it is
necessary to prevent a serious threat to life, health or safety.
5. Information sent overseas
Stripe, Cloudflare, Google, Meta and Resend store or process information outside Australia, including in
the United States. Before disclosing your information to an overseas recipient we take reasonable steps to
ensure they handle it consistently with the Australian Privacy Principles, as APP 8 requires.
Trillet.ai, our phone and website chat assistant, and the AI model it runs on, are both Australian-based,
so no information disclosed to them leaves Australia.
The website itself is hosted in Australia (Sydney).
6. Cookies and analytics
This website uses cookies for site function, and it uses Google Tag Manager, which loads two further
tools: Google Analytics, and the Meta (Facebook) Pixel. Both set cookies and collect information
about how the site is used across pages and visits, including your IP address and device information.
We use Google Analytics to understand how the site is used. We use the Meta Pixel for advertising and
remarketing: to measure the performance of our advertising on Facebook and Instagram, and to match
visits and conversions on this website to the ad that led to them. If you have a Facebook or Instagram
account, Meta may connect this information to your account under its own privacy policy.
We do not otherwise use these tools to identify you personally.
You can block or delete cookies in your browser settings, and you can control ad tracking in your Facebook
or Instagram settings. Blocking them will not stop you using the site, though some things may not work as
well.
7. Where your information is stored
Website and booking data is held on servers in Sydney, Australia. Section 5 lists the recipients who hold
information outside Australia.
8. How long we keep it
- Booking and appointment information: seven years from your appointment, matching the clinical record
held by your doctor and in Velluto. This is the standard retention period for Australian medical
records. Where the patient was under 18, until they turn 25. - GP-ready ADHD dossier purchases: seven years from purchase, the same as booking and appointment information. It’s the same category of clinical preparation material, just bought as a standalone product rather than alongside an appointment on this site.
- Enquiries: 12 months from your last contact with us.
- Waitlist and matching requests: 24 months from the last time you were in touch, whichever is later:
when you joined, when you last updated your details, or when you last opened or clicked one of our
emails. You can ask us to remove you at any time, and every waitlist email includes a link to do it. - Website analytics: 14 months.
When we no longer need information and are not required to keep it, we destroy it or de-identify it.
9. Security
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. That includes encrypted connections, access controls, and limiting who can see what.
No system is perfectly secure. If something goes wrong, section 10 applies.
10. Data breaches
We are covered by the Notifiable Data Breaches scheme. If a data breach happens that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as soon as we can, and explain what happened and what to do about it.
11. Access, correction and complaints
You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it
if it is wrong. Email [email protected]. We will respond within 30 days.
Your clinical records are held by your treating doctor, not by us. For those, contact the practice
directly.
If you think we have mishandled your information, tell us first at [email protected] so we can
try to fix it. If you are not satisfied with our response, you can complain to the Office of the
Australian Information Commissioner at oaic.gov.au or 1300 363 992.
12. Changes
We update this policy when what we do changes. The version number and date at the top tell you which
version is current. Material changes will be notified on this page.
13. Contact
Email [email protected] with any privacy question.
Webbed Feet Pty Ltd · ABN 50 135 841 477