Privacy policy

Last updated 20 October 2026

DocLink (doclink.au) is run by Dr Stuart Arbuckle in Perth, Western Australia. This policy explains what personal information DocLink handles and why. We aim to follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

The short version

• You can use DocLink without an account. We don't run analytics, advertising or tracking cookies.
• If you create an account, we keep your name, email address, the role you choose and your favourites. That's it.
• We never sell or share your information, and it stays in Australia.
• You can delete your account, and everything attached to it, from your account page at any time.

What we collect

• Account details: your name, email address, the role you select (for example GP registrar), a scrambled (hashed) version of your password, and an authenticator secret if you turn on two-step verification.
• Favourites: the links and conditions you star.
• Messages: anything you send through the suggestion or contact forms, with the name and email address you give.
• Technical information: your IP address and browser type. These are recorded with logins, form submissions and in the web server's logs, which are kept for a few weeks for security and troubleshooting.

DocLink is not a clinical system. Please don't send patient information through any form.

Cookies

DocLink uses only the cookies it needs to work: one that keeps you logged in, and one that protects forms against forgery. Your light or dark mode choice is stored in your own browser. There are no third-party cookies.

How we use it

We use your information to run your account, show your favourites, send account emails (confirming your address, resetting your password) and respond to messages. If you agree, we may also tell you when a link you suggested is published. We don't send marketing email.

Where it's kept and who sees it

DocLink's server and its mail server are in Perth, Western Australia. Only the site administrator can see account details and messages. We don't disclose personal information to anyone else unless the law requires it. Links on DocLink go to other websites, which have their own privacy policies.

Security

Passwords are stored only as a salted scrypt hash. Connections are encrypted (HTTPS), and administrator access requires two-step verification.

Access, correction and deletion

You can change your details on your account page and delete your account there too. Deletion removes your favourites and your account immediately. Messages you sent stay with the administrator but are no longer linked to an account. To ask for a copy of your information, or anything else, use the contact form.

Complaints

If you're concerned about how we've handled your information, contact us first through the contact form and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.