Citymed Compounding Pharmacy
Privacy Policy
Last updated: 26 October 2026
About this policy
This policy explains how Citymed Compounding Pharmacy collects, uses, stores and shares your personal and health information, including information you send through the enquiry form on this website.
We follow the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records and Information Privacy Act 2002 (NSW), including the Health Privacy Principles. Health information is sensitive, and we handle it with extra care.
Who we are
Citymed Compounding Pharmacy, ABN 72 160 794 436.
- Address: B2 RT.06, 39–41 Martin Place, Sydney NSW 2000
- Phone: (02) 9235 0406
- Email: citymedcompounding@gmail.com
Contact us at any time with a privacy question, or to ask about the information we hold about you.
What information we collect
When you send us a compounding enquiry through this website, we collect:
- your full name, date of birth, mobile number and email address
- your preferred contact method and the date you need your medication by
- your prescription, either as an uploaded photo, scan or PDF, or as an eScript token
- your delivery address, if you choose Australia Post delivery
- any notes you choose to add, which may include health details
A prescription contains health information, such as the medicine, dose and prescriber, and may show other details such as your address or a Medicare or concession card number.
When you visit or call the pharmacy, we also collect the information we need to dispense your medication and advise you safely.
How and why we use it
We collect information directly from you (through the form, by phone or in person) and, where needed, from your prescriber.
We use it to:
- respond to your enquiry and confirm the formulation, timing and next steps
- prepare and dispense your medication
- arrange collection or Australia Post delivery
- contact you by your preferred method
- meet our legal and professional record-keeping obligations
By ticking the consent box on the form and submitting it, you agree that we may use the information for these purposes. If you do not give us the information we ask for, we may not be able to help with your enquiry.
Who we share it with
We do not sell your information. We share it only where needed to care for you or where the law requires:
- your prescriber, to confirm or clarify a prescription
- Australia Post, which receives your name and delivery address if you choose delivery
- Services Australia and the PBS, for Medicare and PBS claims where they apply
- the national electronic prescription system and its exchange services, when we dispense an eScript
- other health professionals involved in your care, with your consent or where the law permits
- courts, regulators and other bodies where the law requires or authorises it
Service providers and overseas disclosure
Some of the technology we use to run the website and receive enquiries is based overseas, mainly in the United States. Your enquiry may be handled by these providers:
| Provider | What it does for us | Information it handles |
|---|---|---|
| Netlify | Hosts this website and runs the enquiry form | Everything you submit in the form, in transit |
| Resend | Sends the enquiry to us by email | Everything you submit, including your prescription file |
| Google (Gmail) | Receives and stores our enquiry emails | Everything you submit, including your prescription file |
| Cloudflare Turnstile | Checks that the form is submitted by a person, not a bot | Technical information from your browser, such as your IP address |
By ticking the consent box and submitting the form, you agree to your information being disclosed to these providers. We choose providers that have their own security and privacy commitments, but we cannot control how overseas providers operate.
Email is not a fully secure way to send sensitive information. If you would rather not use the form, you can phone us on (02) 9235 0406 or bring your prescription into the pharmacy.
Storage, security and how long we keep it
Enquiry emails are kept for 2 years, then securely deleted. Access is limited to Citymed pharmacy staff, who are all pharmacists or pharmacy students trained in handling patient information. Enquiries are normally actioned by a pharmacist. The website uses an encrypted (HTTPS) connection, so your form submission is protected on its way to us.
| Information | How long we keep it |
|---|---|
| Enquiry emails and attached prescription files | 2 years, then securely deleted |
| eScript tokens | Used by our dispensing software to dispense your medication. Once dispensed, the token is void and cannot be used again. The copy in the enquiry email is deleted with it after 2 years. |
| Paper prescriptions brought in when you collect your medication | Kept at the pharmacy for 2 years, then securely destroyed |
We may keep dispensing and other records for longer where the law requires. We take reasonable steps to protect information from misuse, loss and unauthorised access.
Access and correction
You can ask to see the information we hold about you, or ask us to correct it, by contacting us on (02) 9235 0406 or citymedcompounding@gmail.com. We may ask you to confirm your identity first, and we will respond within a reasonable time, normally within 30 days.
If we cannot give you access or make a correction, we will tell you why in writing, unless the law does not allow us to. You can also ask us to delete an enquiry, but we may need to keep some records to meet our legal obligations.
Complaints and data breaches
If you have a privacy concern, contact us first. We will investigate and reply in writing, normally within 30 days.
If you are not satisfied with our response, you can contact:
- the Office of the Australian Information Commissioner (OAIC), for complaints under the Privacy Act: oaic.gov.au, 1300 363 992
- the NSW Information and Privacy Commission, for complaints about health information under NSW law: ipc.nsw.gov.au, 1800 472 679
If a data breach is likely to cause you serious harm, we will tell you and the OAIC as the Notifiable Data Breaches scheme requires.
Website, cookies and changes to this policy
This website does not use analytics, advertising cookies or tracking tools. Cloudflare Turnstile runs on the enquiry form only, to block spam.
The site links to other services, such as our online booking page (MedAdvisor) and Google Maps. Those services have their own privacy policies, and this policy does not cover them.
We may update this policy from time to time. The current version is always on this page.