At MEd2door, we are committed to protecting your personal and medical information. As a platform facilitating Home Medication Review (HMR) and script fulfillment [cite: 41], we adhere strictly to the Australian Privacy Act and healthcare compliance frameworks[cite: 226, 231]. This page outlines exactly how we collect, use, and secure your phone number and notification data when you interact with our platform online or via our self-serve kiosks located in partner clinics and shops[cite: 194].
1. Information We Collect for SMS & Notifications
To provide secure and timely access to your medication and health services, we collect:
- Mobile Phone Numbers: Provided by you during account registration or when verifying an eScript token[cite: 90].
- Interaction Logs: We maintain heavy audit logs of API calls, payment attempts, and token entries for compliance[cite: 223].
2. How We Use Your Phone Number
We strictly use your phone number for operational and security purposes. Because script traffic routing is illegal, the patient must always choose where to fulfill their script[cite: 89]. Your information is used to facilitate that choice securely:
- Multi-Factor Authentication (MFA): We use your phone number to send secure, one-time SMS codes to verify your identity when logging in, updating medical profiles, or authorizing payments.
- Order & Dispensing Notifications: We will send SMS notifications to update you on the status of your script fulfillment or HMR bookings.
- Security Alerts: We will notify you immediately via SMS if we detect suspicious login attempts or unauthorized changes to your account.
3. Data Security & Kiosk Privacy
Whether you access MEd2door on your personal device or through one of our physical iPad kiosks, your data is protected:
- Zero Local Storage: If you use a MEd2door self-serve kiosk, absolutely zero medical data, eScript tokens, or personal information is stored on the physical device's local drive or cache[cite: 219].
- Cloud Encryption: All SMS logs and phone numbers are securely transmitted and stored in our encrypted cloud databases.
- Aggressive Session Management: Kiosk sessions are designed to time out quickly to ensure the next patient in line cannot view your data[cite: 206].
4. NSW Pharmacy Compliance & Data Retention
Under NSW Pharmacy regulations and AHPRA/TGA guidelines, we are legally required to retain dispensing records and script logs[cite: 181].
- If you have placed an order through MEd2door, your user ID and associated order logs are permanently retained to maintain legally compliant medical records[cite: 182].
- We cannot "hard delete" accounts with active medical profiles or dispensing histories, as this violates compliance[cite: 184]. Instead, accounts can be safely suspended.
5. Consent and Opting Out
- Mandatory MFA: For your security and to protect your medical data, SMS Multi-Factor Authentication cannot be disabled while your account is active.
- Notification Preferences: You may opt out of non-critical SMS notifications (such as general platform updates) at any time through your MEd2door user dashboard. Standard data and messaging rates from your carrier may apply to all SMS communications.