Hairmop Pty Ltd (ACN 609 183 388) trading as “Mosh” and “Moshy” ("we", "us", or "our") is committed to privacy protection.
At https://www.getmosh.com.au/ and https://www.getmoshy.com.au/ (the "Sites"), we understand the importance of keeping Personal Information private and secure. This privacy policy ("Privacy Policy") describes generally how we manage Personal Information and safeguard privacy. If you would like more information, please don't hesitate to contact us. Mosh and Moshy are health platforms that provide and facilitate confidential consultations with Australian registered doctors (“Doctors”) and health practitioners such as psychologists (“Practitioners”). We also sell personal care products and facilitate the supply by mail of medications by independent pharmacies (“Pharmacies”) which use the platform.
We are committed to respecting your privacy. Our Privacy Policy sets outs out how we collect, use, store and disclose your Personal Information. We are bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) (“Privacy Act”). The Privacy Act lays down 13 key principles in relation to the collection and treatment of Personal Information, which are called the “Australian Privacy Principles”.
By providing Personal Information to us, you consent to our collection, use and disclosure of your Personal Information in accordance with this Privacy Policy and any other arrangements that apply between us. We may change our Privacy Policy from time to time by publishing changes to it on our Sites. We encourage you to check our Sites periodically to ensure that you are aware of our current Privacy Policy.
Doctors, Practitioners and Pharmacies may also collect, use and disclose your Personal Information (including your health information) in similar ways to those described in this Privacy Policy. Doctors, Practitioners and Pharmacies are also required to uphold professional standards for the protection of your Personal Information. Some of the practitioners who use our platform work for us, and others are operating their own practice independent of us. While we don't interfere in the way practitioners provide health care services, we require all practitioners who use the platform to comply with applicable privacy-related laws and standards and professional obligations relating to patient confidentiality.
We care about your privacy:
We will never rent, trade or sell your email address to anyone.
We will never publicly display your email address or other personal details that identify you.
In this Privacy Policy the following capitalised terms have the following meanings:
We may collect the Personal Information you directly give us through some of the following means:
We may also collect Personal Information from publicly available sources and third parties, such as suppliers, recruitment agencies, contractors, our clients and business partners and your relatives and representatives.
The type of Personal Information we may collect can include (but is not limited to), your name, postal address, email address, phone numbers, date of birth, billing and shipping information, your device ID, IP address, statistics on page views, traffic, standard web log-in information, details of the services and products you make enquiries about, and, if applicable, employment information.
We will collect and hold Sensitive Health Information about you, such as your height, weight and medical history and any information you provide to a Doctor or Practitioner. That information may also include your Medicare number, Individual Healthcare Identifier, health care and concession card details and health insurance details. Sometimes your medical history and profile may also include information about sexual orientation/activity, religious and other beliefs, ethnicity and genetics, where relevant. We only collect sensitive health information about you with your consent, or otherwise in accordance with the Privacy Act.
Where you do not wish to provide us with your Personal Information, we may not be able to provide you with requested goods or services or do the other things described in the next section.
We may collect, hold, use and disclose your Personal Information for the following purposes:
We may disclose Personal Information for the purposes described in this Privacy Policy to:
Where a prescription is issued to you by a Doctor, Mosh and Moshy offer a range of options for facilitating the dispensing to you of the relevant medications. The manner in which your Personal Information relating to the prescription is managed will depend on the option you select. We have, or are working towards having, capability for Doctors to issue prescriptions via all channels which are permitted in Australia.
If you opt for a paper prescription, the Doctor will either send the prescription to you, or send it to your own pharmacy or to a Pharmacy which uses the platform, as directed by you. Where the law allows, the Doctor may send a scan, photo or fax of the prescription with the original paper prescription to follow, where required.
'Tokens' are unique identifiers - such as a barcode or QR code - for your prescription (also called an e-script). They can be printed or sent by email, SMS or via an app. Your Doctor can send a token to you, or you can elect to have Mosh or Moshy (as applicable) hold and manage the tokens associated with the prescriptions issued by the Doctor(s) on your behalf and forward them to your own pharmacy or to a Pharmacy which uses the platform, as directed by you (this includes managing tokens relating to repeat prescriptions). Where Mosh or Moshy is holding and managing tokens on your behalf, they will continue to do so unless and until all such prescription(s) (including any repeats) have been dispensed or you revoke your consent. You may at any time require that any tokens held which have not already been dispensed are instead sent to you.
An ASL is a central repository of a patient's tokens. If you have an ASL, and we are able to do so at the relevant time, tokens for your prescriptions will be added to your ASL unless you ask your Doctor not to do so. Any pharmacy (including any Pharmacy which uses the platform) which dispenses your prescription will need to access your ASL. Mosh, Moshy, Doctors, Practitioners, Pharmacies and third parties may collect, use and disclose information about your prescriptions in accordance with the options you select and the directions you give us as described above.
We may collect Personal Information about you when you use and access our website.
While we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the internet protocol address assigned to your computer.
We may also use 'cookies' or other similar tracking technologies on our website that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, TV, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. You can disable cookies through your internet browser but our websites may not work as intended for you if you do so.
In some cases, third parties may place cookies through this Site. For example:
We are committed to protecting the security of your information. In order to mitigate against unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. We store data online and use Secure Sockets Layer to provide users secure and private access.
Mosh and Moshy are primarily hosted in Australia. From time to time we may engage an overseas recipient to provide services to us, such as cloud-based storage solutions. Please note that the use of overseas service providers to store Personal Information will not always involve a disclosure of Personal Information to that overseas provider. However, by providing us with your Personal Information, you consent to the provision of such information to overseas recipients (such as servers located in the United States of America) and acknowledge that overseas recipients may not be bound by the Privacy Act, and you may not be able seek redress under that Act from them or us.
We will only disclose your Personal Information overseas, for example, to a third-party service provider or to cloud servers which are based outside of Australia, in accordance with the Australian Privacy Principles (APPs), particularly APP 8. Where we do transfer your Personal Information to another country, we will ensure certain conditions are met, for example:
Where we do this, we will take reasonable steps to ensure these parties take appropriate measures not to breach the APPs.
Our Sites may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites.
You can access the Personal Information we hold about you by contacting us using the information below. Sometimes, we may not be able to provide you with access to all of your Personal Information and, where this is the case, we will tell you why. We may also need to verify your identity when you request your Personal Information.
If you think that any Personal Information we hold about you is inaccurate, please contact us and we will take reasonable steps to ensure that it is corrected.
We and/or our carefully selected business partners may send you direct marketing communications and information about the services offered on our Sites. This may take the form of emails, SMS, mail or other forms of communication, in accordance with the Spam Act and the Privacy Act. You may opt-out of receiving marketing materials from us by contacting us using the information below, or by using the opt-out facilities provided (e.g. an unsubscribe link).
We may retain your Personal Information as long as you are registered to the Sites. You may close your account by contacting us. However, we may retain Personal Information for an additional period as is permitted or required under applicable laws. Even if we delete your Personal Information it may persist on backup or archival media for an additional period of time for legal, tax or regulatory reasons or for legitimate and lawful business purposes.
If you think we have breached the Privacy Act, or you wish to make a complaint about the way we have handled your Personal Information, you can contact us using the details set out below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time. If you think that we have failed to resolve the complaint satisfactorily, we will provide you with information about the further steps you can take.
For further information about our Privacy Policy or practices, or to access or correct your Personal Information, make a complaint or unsubscribe from marketing communications, please contact us at [email protected].
Effective: 24 January 2022
Last updated: 2 March 2023