Privacy
Short version: we collect as little as we can, keep it in Australia, and never sell or share it.
Patients
- You don't need an account, and we don't store your searches. The suburb you type stays in the address bar of your browser.
- There are no third-party trackers, ad pixels or session recorders on any page. We count page views and booking clicks on our own server, with an anonymous id that changes every day and holds no IP address.
- If you ask to hear when a doctor opens telehealth, we keep your email for that one purpose and email you once.
- Booking happens on the clinic's own site under its own privacy policy. Satchel never sees your appointment.
Doctors
- Your registration number is encrypted at rest and shown masked. We store the result of the register check, not a copy of the register.
- You can hide your page in one click (it is removed from search engines within the hour) or delete it. Delete removes your personal data for good; we keep only an anonymous count.
- Before you claim it, your page may already exist, made from public professional information only: your name and clinic, your photo and qualifications as your clinic publishes them, the areas your clinic lists for you, your training and earlier roles, articles you wrote for local papers, and links such as your LinkedIn profile. Each item says where it came from and when we saw it, and the page says at the top that you haven't checked it. We don't use the Ahpra register, personal social media or review sites, and we never show hobbies or family details.
- Photos are credited to your clinic. Ask and we'll take yours down at once and delete our copy; once you claim your page you can hide any item yourself, or upload your own photo.
- Claim it to correct it, hide it or delete it yourself. If you'd rather not, email us and we'll take it down.
Where data lives
Our database runs in Sydney, Australia. Satchel follows the Australian Privacy Principles. For any question or request, email us here.