Privacy

This page explains what personal information we collect through this website and through working with you, why we collect it, who we share it with, and how you can get at it or correct it. It is written to be read, not to be skimmed past.

Last updated: October 2026 · Version 1.2

Who we are

This website is operated by First Sky Meditech Pty Ltd (ABN 37 698 315 561), trading as MedAd.

In this policy, “we” and “us” mean First Sky Meditech Pty Ltd. You can reach us at info-REMOVE-@medadcoach.com. Our registered office is Level 1/457–459 Elizabeth Street, Surry Hills NSW 2010.

What we do not collect

We think this is the part our clients most want to read, so it comes first.

• We do not touch your patient or customer records. Our work is on your website, your content, and your business profile. It does not involve your booking system, your practice management software, or any file you hold about someone who has come to you.
• We do not collect health information about anyone.
• We do not buy or sell personal information.
• We do not ask you to give us patient records, images of identifiable individuals, or testimonials. Where a piece of work would need any of those, we say so and we stop.

There is one thing we do see, and we would rather name it here than leave you to find it further down. If you give us read access to your website analytics, we see information about the people who visit your site. What that covers is set out under Access you give us during an engagement.

What we collect when you contact us

Only what you send us, plus what your email carries with it.

• Your name, business name, email address, and phone number if you give it
• Your website address and what you told us you want to grow
• Anything else you choose to put in the message

We use it to answer you, to quote, and to carry out work you engage us for. We keep the correspondence so that we have a record of what was agreed, and when it is no longer needed for that, we delete it.

The contact form does not send anything to us on its own. It opens your own email program with the message filled in, and nothing reaches us until you press send there. That means no third party handles what you type, and nothing is stored on a server between you and us.

We do not add you to a mailing list. We do not run one. If that changes, this page will say so before it does.

What we collect when you use this website

This site runs three analytics products: Google Analytics from Google, Clarity from Microsoft, and Cloudflare Web Analytics from Cloudflare.

Google Analytics counts visits and tells us which pages people read, where they arrived from, and roughly where in the world they are. It works from a cookie that tells one visit apart from another. It does not store your IP address: Google uses the address to work out an approximate location and then discards it. Google holds the underlying event data for the period set on our property, after which the summary reports remain but the detail behind them does not.

Cloudflare Web Analytics measures page views and how pages perform for visitors. Cloudflare says that this product does not collect or use visitors’ personal data. Cloudflare adds its analytics script automatically when it serves this site, and the script sends its measurements back through this website.

Clarity goes further than counting, and records how the pages are used:

• Session recordings — a replay of mouse movement, clicks, scrolling, and which pages you moved between. This is a reconstruction of on-page behaviour, not a video of your screen or your camera. What you type into the contact form is masked, so the recording shows that a field was filled in but not what was put in it.
• Heatmaps — where visitors click and how far down a page they read, aggregated across visitors.
• Technical information — your approximate location derived from IP address, your device type, browser, operating system, screen size, and the page or search that referred you.

Clarity sets cookies and uses browser storage to tell one session apart from another. We do not use this information to identify you personally, and we do not try to match it to anyone who later contacts us. Microsoft keeps the session recordings for 30 days, and the heatmap and aggregated click data for nine months. Each is deleted when its period ends, backups included.

These three analytics products are the only third-party scripts this site loads.Loading a page here does not fetch fonts, advertising tags, social buttons, or embedded content from anyone else. Cloudflare also serves the site itself and is covered underWho we share information with.

If you would rather not be measured or recorded, you can block scripts from clarity.ms, googletagmanager.com,google-analytics.com, and static.cloudflareinsights.com using your browser’s tracking protection, an extension, or your browser’s privacy settings. Google also publishes a browser add-on that turns off Google Analytics on every site. The site works normally without any of them.

Access you give us during an engagement

If you engage us, we usually ask for read access to your Google Search Console, your Google Analytics, and your Google Business Profile.

• Read access means we can see the measurements. It does not let us publish, reply, or change your listing.
• Where we do need to make a change, we ask you for it in writing first.
• You can remove our access at any time from your own Google account, and we ask you to do so when the engagement ends.

What we see in your Google Analytics

Analytics is the one place in this list that holds information about the people who visit your site, rather than about your business. We would rather set out plainly what that means than let you assume it is narrower than it is.

• What we normally look at is aggregate: how many people arrived, where they came from, which pages they read, on what kind of device, and roughly where they were.
• Analytics can also show visitor-level detail, such as an individual session. Read access includes that, and we may use it when we are working out why a measurement looks wrong.
• We do not try to identify anyone from it, and we do not combine it with any other source.
• We do not export it or keep copies. Nothing from your Analytics enters our own records beyond the figures that appear in your report.
• We do not use anything we see there for our own marketing, or for any other client.

Who we share information with

We do not sell your information and we do not share it for anyone else’s marketing.

• Microsoft — website analytics and session data, through Clarity, so that we can see how this site is used.
• Cloudflare — hosting and server logs, and website analytics through Cloudflare Web Analytics. The site is served by Cloudflare Workers Static Assets.
• Google — website analytics, through Google Analytics, so that we can see how this site is used. Separately, during an engagement we read your own Search Console, Analytics, and Business Profile, with your permission.
• A law firm — only the page or wording being reviewed, and only when you have asked us to arrange a legal review.

Where we arrange a legal review, you engage the firm directly. We pass on the material, not your file.

Information held overseas

Some of what is described above is held or processed outside Australia.

• Microsoft processes Clarity data outside Australia, including in the United States.
• Cloudflare serves this site from a global network, so the request that loaded this page may have been handled by a server outside Australia.
• Google processes the Google Analytics data from this website outside Australia, including in the United States. Google also holds the Search Console, Analytics, and Business Profile data we read during an engagement, on servers outside Australia. Two parts of that are worth naming: a Business Profile includes posts by named individuals, such as reviews and questions; and Analytics holds information about the people who visit your site.

Overseas recipients are not subject to the Australian Privacy Principles in the way an Australian organisation is.

How we look after it

We keep access to client information limited to the people doing the work, we use multi-factor authentication on the accounts that hold it, and we remove access when an engagement ends.

No system is perfectly secure, and we do not claim otherwise. If something goes wrong that is likely to cause you serious harm, we will tell you and, where the law requires it, the Office of the Australian Information Commissioner.

Getting at your information, and correcting it

You can ask us what personal information we hold about you, and you can ask us to correct it. Email info-REMOVE-@medadcoach.com.

We will respond within a reasonable period. If we cannot give you what you asked for, we will tell you why in writing.

If you are not happy with how we handled it

Tell us first — email info-REMOVE-@medadcoach.com and describe what happened. We will look into it and write back.

If you are not satisfied with our answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this page

When we add or remove a tool that collects information, we update this page and change the date at the top.

The current version is always the one published here.

What the information on this site is, and is not→Terms of use→