Privacy policy.

Who I am

Assistant Solutions is operated by Melissa Ambrose, ABN 51 787 262 890, based in Australia. I provide remote administration, executive assistance and business management support to medical and allied health practices and to trades businesses.

I handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What this policy covers

This policy covers information collected through this website and through my day to day work with clients. Where I work inside a client's own systems, that client's privacy policy governs the information held there. More on that below.

What I collect through this website

When you send a message. The contact form asks for your name and email address, and gives you space to tell me what kind of support you need. Only your name and email are required. The form sends that message to me. I use it to reply to you and to understand what you are after.

When you book a call. Bookings are handled by TidyCal, a third party scheduling service. TidyCal collects your name, email address and anything else you choose to type into the booking form, and shares it with me so I know who I am speaking to. TidyCal handles that information under its own privacy policy.

When you simply visit. I use Cloudflare Web Analytics to see which pages people read and roughly where visitors come from. It does not use cookies, does not follow you across other websites, and does not identify you personally.

I do not use advertising or tracking cookies on this site. Cloudflare, which hosts the site, may set cookies that are strictly necessary for security and for keeping the site available.

What I collect when we work together

To do the work, I usually need business information such as contact details for you and your team, supplier and customer details, invoicing and scheduling information, and access to the systems the work lives in.

For practice clients this can mean I see patient information while handling bookings, billing, correspondence and results. I treat that information as confidential health information. I work inside your systems rather than copying records out of them, I access only what the task requires, and I do not use it for anything other than the work you have asked me to do.

Who else can see your information

I do not sell personal information and I do not share it for marketing.

I use a small number of reputable service providers to run the business, including email, file storage, scheduling, accounting and website hosting. They can hold information only so that I can use their service, and they are bound by their own privacy obligations.

Some of these providers, including Cloudflare and TidyCal, are based overseas or store data overseas, mainly in the United States. By sending a message or booking a call through this website you consent to your information being handled that way. I take reasonable steps to use providers with proper privacy and security practices.

I will also disclose information where the law requires it.

How I keep it safe

This website runs over an encrypted connection. Accounts I use are protected with strong, unique passwords and multi factor authentication where the provider supports it. I work on business devices that are kept up to date and locked when not in use, and I limit access to client systems to what the work requires.

I carry Professional Indemnity, Public Liability, and Cyber and Privacy Protection insurance. Certificates are available on request.

No system is perfect. If a data breach happens that is likely to cause serious harm, I will notify the people affected and the Office of the Australian Information Commissioner, as the law requires.

How long I keep it

I keep enquiries and client records only for as long as I need them for the work, and for any period required by tax, insurance and professional obligations. After that they are deleted or de-identified.

Your rights

You can ask me what personal information I hold about you, ask me to correct it if it is wrong, or ask me to delete it. Email me at mel@assistantsolutions.com.au and I will respond within a reasonable time, usually well under 30 days. I may need to confirm who you are first.

If your information sits inside a client's system rather than mine, I will point you to the right organisation.

If you have a complaint

Email me first at mel@assistantsolutions.com.au and tell me what has gone wrong. I take privacy complaints seriously and I will look into it properly.

If you are not satisfied with how I have handled it, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

If this policy changes, the updated version will appear on this page with a new date at the top.

Contact

Melissa Ambrose, Assistant Solutions
ABN 51 787 262 890
mel@assistantsolutions.com.au