Privacy
What Due collects, why, where it's kept, how long for, and how to have it deleted.
Last updated 1 October 2026.
Who this is about
Due is a preventive health review provided by Dr Praveen Jayarajan (AHPRA MED0001203687). Consultations are provided at Medical One QV, Melbourne. Due is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Health service providers are covered by that Act whatever their size.
Bookings are made by phone with Medical One QV. The practice keeps your booking and your medical record under its own privacy policy; this page covers what the Due website collects. That is the pre-appointment form, and a waitlist that ran until bookings opened and is now closed.
The waitlist, now closed
Until bookings opened on 1 October 2026, this site ran a waitlist. It no longer takes entries. Joining took an email address and your age, or just an email address for a referring GP, and three optional questions followed.
If you joined, Due holds:
| What | Why |
|---|---|
| Your email address (required) | To email you once, to say bookings have opened |
| Your age (required, except for referring GPs) | The review is built around age, so this shows whether the offer fits the people asking for it |
| Whether you're a referring GP (optional) | So you hear about referrals rather than appointments |
| Your gender (optional) | The review is currently for men; this shows who is actually interested |
| Your postcode (optional) | Where interest is coming from |
| Whether you'd pay the expected cost (optional) | Whether the review is worth running at that price |
| Which page you came from (automatic) | Only when a link says so — the GP page sets it. It shows which page brings people in |
Nothing else is stored against your entry. There is no name, no phone number, no street address, and nothing about your health. The optional questions are stored against your entry; leave any of them blank and nothing is stored for it.
Your IP address is used once, to stop the same connection submitting the form over and over. It is held for one hour and then deleted, it is never attached to your entry, and it is not used to identify you or to work out where you are.
Because Due is a health service, the fact that you joined this list is treated as health information — which means it is handled as sensitive information, not as a mailing list. Submitting the form was your consent to that; you can withdraw it at any time by asking for your entry to be deleted.
The pre-appointment form
Once you've booked, there is a form to fill in beforehand: family history, smoking, alcohol, activity, mood, sleep, sexual health and things you've noticed. That is health information, and it is used for one thing — so the doctor has it in front of them at your appointment.
It asks for your initials and appointment date, not your name, so the doctor can match it to you on the day.
When you send it, the clinic gets an email saying a form has arrived. That email carries your appointment date and a reference code. It does not carry your initials, your age or any of your answers.
Where it's kept, and for how long
- Where. In a managed database hosted in Sydney, Australia. It is not sent overseas.
- Waitlist entries: deleted twelve months after you joined, or sooner if you ask. That covers your address and any optional answers together. The address is used for the one email saying bookings have opened, and nothing else.
- Email to support@duehealth.com.au: held in Google Workspace, which may store it outside Australia. Kept for as long as it's needed to deal with what you wrote about, then deleted, or sooner if you ask.
- Pre-appointment answers: deleted thirty days after they're submitted. Once they're in your medical record, that record is kept under the usual rules for clinical records.
Who else sees it
Nobody. Your details aren't shared, sold, rented, or used to build advertising audiences.
This site uses Google Ads to measure which advertising leads to bookings. Google is told that the phone number on this site was clicked, and which link. It is not told whether you called or booked, anything you entered on the pre-appointment form, or anything about your health. Enhanced conversions, which would send a hashed copy of your details to Google, are deliberately switched off. Ad personalisation and remarketing signals are switched off.
The site is hosted by Vercel and the database is Upstash, both acting as service providers to Due rather than using the data themselves.
Seeing, correcting or deleting your details
Email support@duehealth.com.au and ask. You can ask for a copy of what's held about you, ask for it to be corrected, or ask for it to be deleted, and you don't have to give a reason. Deletion is immediate and final — there is no backup copy kept to restore from.
If you're unhappy with how a request was handled, tell us first and we'll try to sort it out. If that doesn't resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this policy changes, the date at the top changes with it. If a change affects what is collected or who sees it, anyone still on the waitlist will be told before it takes effect.