The Occ Health Group Privacy Policy

The Occ Health Group, comprising Bodycare Injury Management Pty Ltd, Bodycare Injury Management (New Zealand) Pty Ltd, Bodycare Health & Wellbeing Pty Ltd, My Occ Health Record Pty Ltd, Healthbook Pty Ltd and Bodycare Work Pty Ltd, respects your privacy.

We primarily use the information you provide to undertake the client Services we offer (see our Services link on our sites: and (the Website) for a list of our services (the Services). We will only collect Personal Information that is reasonably necessary to achieve this and the other purposes set out in this Privacy Policy.

We may also disclose your information to our service providers, contractors, IT providers, lawyers, auditors, accountants, and in the case of contact details, to contracted marketing agents.

This Privacy Policy contains further details regarding, among other things, how you can request access to, or correction of, information we hold about you, how you can make a privacy related complaint, how that complaint will be dealt with and the extent to which your information may be disclosed to overseas recipients.

We may change our Privacy Policy from time to time by publishing changes to it on our Website. We encourage you to check our Website periodically to ensure that you are aware of our current Privacy Policy.


The Occ Health Group respects and upholds your rights contained in the Privacy Act 1988 (Cth) and the Privacy Act 2020 (Privacy Act), including those rights under the Australian and New Zealand Privacy Principles. This Privacy Policy lets you know what Personal Information of yours we hold, what we do with it, who we will disclose it to and how you can request access to the Personal Information we hold about you. You can also find out here how to request correction of inaccurate Personal Information and how to opt out of receiving communications from us.

While this Privacy Policy has been developed to comply with the Privacy Act we have also taken steps to ensure that, if you tell us you are located in the European Union, we will seek to give you the protections available to you under the General Data Protection Regulation (“GDPR”). We set out later in this policy those additional rights.


The following terms have the following meanings:

Information means either Personal Information or Non-personal Information.

Non-personal Information means any information that is not Personal Information.

Personal Information has the same meaning as under the Privacy Act and may include information such as:

A) name;
B) postal address or street address;
C) email address;
D) telephone number and other contact details;
E) age or date of birth;
F) credit card information;
G) your device ID, device type, geo-location information; and
H) other information you provide to us in using our Services.


The Occ Health Group primarily collects Personal Information for the purposes of conducting the Services. The Personal Information The Occ Health Group collects from you will include Personal Information you give us when you:

  • register or subscribe to the Website;
  • communicate with us through correspondence, chats, emails or when you share information with us from other social applications, services or websites;
  • interact with our Website, Services, app content and advertising;
  • complete a transaction with us; or
  • contact us.

The Occ Health Group may collect, hold, use and disclose your Personal Information for any of the purposes set out in this Privacy Policy, including, but not limited, to the following:

  • to enable you to access and use our Services or Website;
  • to operate, protect, improve and optimise our Services, Website, business and our users’ experience, such as to perform analytics, conduct research and for advertising and marketing;
  • to send you service, support and administrative messages, reminders, technical notices, updates, security alerts and information requested by you;
  • to send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting;
  • to administer rewards, surveys, contests, or other promotional activities or events sponsored or managed by us or our business partners;
  • to comply with our legal obligations, resolve any disputes we may have with any of our users or customers, and enforce our agreements with third parties; and
  • to consider your employment application.

The Occ Health Group only collects Personal Information in circumstances where you consent to or authorise (as necessary) the collection of this Personal Information, or it is reasonably necessary for, or directly related to, the purposes outlined above and elsewhere in this Privacy Policy.


The Occ Health Group will generally collect your Personal Information directly from you (unless otherwise permitted by law). We may also collect Personal Information from publicly available sources, our Website, direct sales and service enquiries or events through which you request further information.

At times, your Personal Information may be processed via a third-party plugin or integrated third party gateway provider(s).


The Occ Health Group collects two distinct types of Personal Information:

  1. information relating to our commercial clients/suppliers and the contact people in those organisations; and
  2. information about individuals who consent to or authorise (as necessary) providing Personal Information to us (including sensitive information) as part of The Occ Health Group providing Services to its commercial clients (such as from employees or prospective employees of those clients).

We may also collect Personal Information, including sensitive information, from you if required by the Services we are performing for our clients. This can include health information which will be only collected with your consent or authorisation (as necessary).

For commercial clients, credit information may also be collected for establishing a client account with us.


We may use your Personal Information for any purpose set out in this Privacy Policy, including, but not limited to :

a) to provide functionality of our Services and related support, including to provide our contracted Services or receive products or services from you;

b) to provide you with marketing and promotional materials and opportunities;

c) to provide administrative information to you, for example, information regarding our Services and changes to our terms, conditions and policies;

d) to further our reporting and trending, to improve our products and Services;

e) to accomplish our business purposes, including:

  • ensuring our internal processes function as intended and are compliant with legal, regulatory and contractual requirements;
  • ensuring that fraud and security monitoring processes are effective in detecting and preventing cyberattacks or attempts to commit identity theft;
  • responding to legal duties, such as requests from public and government authorities.

If you no longer wish to use our Services, you can cease to provide us with your Information.

Your Information will normally be stored in our internal database and our domestic IT system.


The Occ Health Group may disclose your Personal Information:

a) to our employees and related bodies corporate and entities (wherever incorporated);

b) to our affiliates for any purpose set out in this Privacy Policy;

c) to third-party service providers or suppliers who provide services such as website hosting, data analysis, payment processing services, order fulfilment, information technology and related infrastructure provision, customer service, email delivery, credit card processing, auditing and other similar services;

d) to professional advisers, dealers and agents;

e) to third parties to permit them (or their own customers) to send you marketing communications;

f) to you, through message boards, chat, profile pages, blogs and other services to which you are able to post information and materials;

g) where you use our app to meet the public health monitoring requirements of a client of ours, we may provide details collected about your health to that client;

h) to business partners in the context of a corporate transaction. If The Occ Health Group is involved in a sale or business transaction, The Occ Health Group will retain a legitimate interest in disclosing or transferring your Personal Information to a third party in the event of reorganisation, merger, sale, joint venture, assignment, transfer of other disposition of all or any portion of our business, assets or stock or shares (including in connection with any bankruptcy or similar proceedings). Such third parties may include, for example, an acquiring or target entity and its advisers; and

i) as required by law.

With your consent or authorisation (as necessary), sensitive information may be provided to health services providers, your employer and/or prospective employer or where otherwise required by law.


You may request to access, correct, object to the use of, restrict or delete Personal Information (including your credit information) we hold about you by contacting the Privacy Officer at the address below. Where we provide access to Personal Information we hold, we will endeavour to provide you with a suitable range of choices as to how access is provided (e.g., emailing or mailing it to you). A fee may be charged to cover the cost of retrieval. For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you used to send us your request, and we may need to verify your identity before implementing your request. We will try to address your request as soon as reasonably practicable.

If at any time you believe that Personal Information we hold about you is incorrect, incomplete or inaccurate, then you may request amendment of it and we will either amend the information or make a record of your comment, as we think appropriate.

We may need to retain certain Information for record keeping purposes (including to comply with legal requirements relating to record retention) and/or to complete any transactions that you began prior to requesting a change or deletion. There may also be residual Information that will remain within our databases and other records, which will not be removed (to the extent permitted by law).

If you are under 18 years of age, you may also be entitled to ask us to remove content or Information that we hold about you by contacting the Privacy Officer. Please note that your request does not ensure complete or comprehensive removal of the content or Information.


Where we have obtained your consent to do so, or in circumstances where you would reasonably expect that your Personal Information would be used or disclosed for this purpose, we may contact you from time to time with marketing material about our other products or Services (note: this only applies to commercial clients and prospective clients, not individuals who provide sensitive information as part of our Services to our clients). At any time, you may opt out of receiving this material including  by using the method of communication that was used to send the principal message, by contacting us by email to or on the contact numbers below:


Phone: 1300 222 639


The Occ Health Group may collect Non-personal Information on the Website including but not limited to, which sections of the Website are most frequently visited, how often the Website and Website sections are visited, and for how long the Website is visited. This data is always used in an aggregated form and may be shared with The Occ Health Group agents and employees to provide them with information relating to how The Occ Health Group visitors access and use the Website. This is done for the purpose of providing you with the best and most efficient Services.


If you have any questions about this Privacy Policy or believe that we have at any time failed to keep one of our commitments to you to handle your Personal Information in the manner required by the Privacy Act, then we ask that you contact us immediately using the following contact details:

Matthew Fishman
Privacy Officer
The Occ Health Group
Email: or Telephone: 1300 222 639

We will respond and advise whether we agree with your complaint or not.  If we do not agree, we will provide reasons.  If we do agree, we will advise what (if any) action we consider it appropriate to take in response.  If you are still not satisfied after having contacted us and given us a reasonable time to respond, then if you are based in Australia we suggest that you contact the Office of the Australian Information Commissioner by:

Phone: 1300 363 992 (local call cost, but calls from mobile and pay phones may incur higher charges). If calling from overseas (including Norfolk Island): +61 2 9284 9749
TTY: 1800 620 241 (this number is dedicated to the hearing impaired only, no voice calls)
TIS: Translating and Interpreting Service: 131 450 (If you don’t speak English or English is your second language and you need assistance and ask for the Office of the Australian Information Commissioner)

Post: GPO Box 2999 Canberra ACT 2601
Fax: +61 2 9284 9666

If you are based in New Zealand we suggest that you contact the Office of the Privacy Commissioner. Visit for more information on how to contact the Office of the Privacy Commissioner.


When visiting the Website, the Website server makes a record of the visit and logs the following Information for statistical and administrative purposes: the user’s server address – to consider the users who use the Website regularly and tailor the site to their interests and requirements;

  • the date and time of the visit to the Website – this is important for identifying the Website’s busy times and ensuring maintenance on the Website is conducted outside these periods;
  • pages accessed and documents downloaded – this indicates to The Occ Health Group which pages or documents are most important to users and also helps identify important information that may be difficult to find;
  • duration of the visit – this indicates to us how interesting and informative the Website is to people; the type of browser used – this is important for browser specific coding; and
  • in order to optimize the Website and better understand it’s usage, we collect the visiting domain name or IP address, computer operating system, browser type and screen resolution.


The Occ Health Group will destroy or de-identify your Personal Information as soon as practicable once it is no longer needed for the purpose for which it was collected. However, we may be required by law to retain your Personal Information after your relationship with us has expired. In this case your Personal Information will continue to be protected in accordance with this Policy. If we destroy Personal Information we will do so by taking reasonable steps and using up-to-date techniques and processes.


Failure to provide necessary Information when requested may result in us not being able to provide you with Services and/or products, and may result in you not being able to access certain features of the Website.


The Occ Health Group will take reasonable steps to protect your Personal Information as you transmit your information from your computer to our Website and to protect such information from loss, misuse, and unauthorised access, use, modification, disclosure, alteration, or destruction.

However, you should keep in mind that the transmission of information over the Internet is not completely secure or error-free. In particular, e-mail sent to or from this Website may not be secure, and you should therefore take special care in deciding what information you send to us via e-mail.


Our Website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites.


For the purpose of section, Personal Data means any information relating to an identified or identifiable natural person in accordance with Article 4(1) of the EU General Data Protection Regulation.

We may disclose Personal Data and/or Personal Information outside of Australia or New Zealand to third party suppliers, contractors or cloud providers located in various countries.

When you provide your Personal Data and/or Personal Information to us, you consent to the disclosure of your information outside of Australia and New Zealand. We will, however, take reasonable steps to ensure that any overseas disclosure is completed in accordance with applicable law, and any overseas recipient will deal with such Personal Information in a way that is consistent with the Australian and New Zealand Privacy Principles.

Personal Data collected in relation to resident individuals within the European Union may, for example, be transferred to and processed by third parties located in a country outside of the European Union. In such instances, The Occ Health Group shall ensure that the transfer of your Personal Data is carried out in accordance with applicable privacy laws and, in particular, that appropriate contractual, technical and organisational measures are in place such as the Standard Contractual Clauses approved by the EU Commission.

Should you wish to:

  1. receive the Personal Data collected within the European Union;
  2. have your Personal Data erased from the database of transferrable data to the European Union; or
  3. object to your Personal Data being transferred to the European Union,

please contact the Privacy Officer.


We may also use ‘cookies’ or other similar tracking technologies on our Website that help us track your Website usage and remember your preferences. Cookies are small files that store information on your computer, TV, mobile phone or other device. They enable the entity that puts the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. You can disable cookies through your internet browser but our Website may not work as intended for you if you do so.

We may also use cookies to enable us to collect data that may include Personal Information. We will handle any Personal Information collected by cookies in the same way that we handle all other Personal Information as described in this Privacy Policy.

You may delete or decline cookies by changing your browser settings. If you do so, some of the features and Services of our Website/App may not function properly.