Privacy policy

A/Prof Viraj Kariyawasam is a health service provider. Health service providers are covered by the Privacy Act 1988 and the Australian Privacy Principles whatever the size of the practice, and health information is treated as sensitive information under that Act. In New South Wales the Health Records and Information Privacy Act 2002 applies as well.

This page is about the website. It was last updated on 4 October 2026.

What this website collects from you

One thing only: the appointment request form on the booking page, if you choose to use it. It asks for your first and last name, a phone number, an email address (needed for the Norwest and Rouse Hill rooms, whose patient portal runs on email, and optional otherwise), which rooms you would like to be seen at, whether you have a referral, whether you have private health cover and an optional one-line note. It is delivered by Web3Forms, a form delivery service that passes the message on rather than keeping a store of submissions, and it is answered by the Complete Health Australia team on behalf of all four locations. The form carries a spam check from hCaptcha, which receives your IP address when the check runs and sets no advertising cookies. The form is for appointments only and asks you not to include medical details: the right place for those is the consultation.

There is no online booking calendar, no newsletter sign-up and no account to create. Referrals arrive from your GP, and anything clinical is handled by phone or in person.

Visit statistics

The site uses Google Analytics to count visits. It records which pages are opened, roughly where in the world the visitor is, which browser and device were used and which site or search they arrived from. It does this with a cookie stored in your browser, and Google receives your IP address as part of the request.

What it is used for is simple and worth stating: to see which patient guides are being read, so that time goes into the ones people actually want. It is not used for advertising. No advertising or remarketing features are enabled, nothing on this site is linked to a Google Ads account, and no information from the site is combined with anything held by the practice. There is no way to identify an individual from it, and no attempt is made to.

If you would rather not be counted, you can turn it off. Most browsers offer a “do not track” or tracking protection setting, browser extensions that block analytics work on this site, and Google publishes an opt-out add-on that applies across every site you visit. None of these affects anything else on the site.

Other services these pages load

• Google Fonts. The two typefaces are served by Google, which receives your IP address when the font file is requested. No cookie is set.
• Doctify. The patient feedback ratings on the contact page are displayed in a panel served by Doctify, which collects the feedback independently and verifies that each review comes from someone who attended an appointment. Opening that page loads the panel from Doctify, and what Doctify does with that request is governed by its own privacy policy rather than this one.
• Links out. Pages link to journals, guidelines and patient organisations. Once you follow a link you are on someone else's site and their policy applies.

Where your medical record actually lives

Your record is not held by this website. It is held by the practice where you are seen, and each of them has its own privacy policy, its own staff and its own obligations under the Acts above. If you want to see your record, correct something in it, or ask who it has been shared with, ask the rooms where you were seen rather than through this site. The numbers and addresses are on the contact page.

The same goes for anything you say on the phone when you book, and for the referral your GP sends. None of it passes through this website.

Asking about privacy, or complaining

If you have a question about how your information has been handled, raise it first with the practice where you were seen. Most things are resolved that way and quickly. If you are not satisfied with the answer, you can take the matter to the Office of the Australian Information Commissioner, which handles privacy complaints about health service providers, or in New South Wales to the Information and Privacy Commission.

Changes

If what the site does changes, this page changes with it and the date at the top is updated. There is no mailing list to notify, because the site does not keep one.