How this website handles your information.
This notice covers the casenote.net website only. The CaseNote platform itself runs as an isolated environment for each customer organisation, and the personal and health information inside it is governed by that organisation and its own privacy obligations, not by this website.
What we collect
Our forms collect your organisation, name, role, sector, approximate workforce size and work email address, depending on the form. Our infrastructure also processes connection information, including IP addresses, to deliver requests and filter abuse. An enquiry notification includes the source IP address. We do not run advertising pixels or build profiles of visitors.
When you open or download a public document, we record the document, action, time, source IP address and browser details. We also look up the IP address's reverse-DNS hostname where available and check whether that hostname resolves back to the same address. IP addresses and hostnames may represent shared networks; they do not identify an individual reader. These details are encrypted and private. We record whether a request was counted or excluded, including recognised bots. We do not use tracking cookies. Counts measure requests, not unique readers or completed downloads; partial PDF requests are recorded but excluded from totals.
Why we collect it
To respond to your walkthrough or briefing request, correspond with you about CaseNote, protect the forms from abuse, exclude automated document requests from our counts and understand which documents are useful. We handle your details in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Where it goes
Form submissions are checked by Cloudflare Turnstile (to filter bots), then delivered to our inbox as email. Submissions are not written to a marketing database. Cloudflare processes website requests, abuse checks and document records and reverse-DNS lookups as our infrastructure provider. Resend delivers enquiry emails to our Microsoft 365 inbox. These providers may process information outside Australia; Resend processes email in the United States. Document request records are kept separately from the clinical platform and are not linked to clinical records or enquiries.
Who can see it
Authorised CaseNote team members and the providers needed to process requests and deliver email. Document totals and request records are not displayed publicly. Request details are encrypted with a separate key and available only through authorised private reporting protected by sign-in. We do not sell or rent your details, and we will not add you to a mailing list you did not ask for.
How long we keep it
As ordinary business correspondence, for as long as we are talking with you or your organisation about CaseNote. Ask us to delete it at any time and we will. Detailed document request records are kept for 90 days, with automatic daily deletion of older records. Aggregate document totals are retained for reporting without IP addresses, hostnames or browser details. Hosting backups may retain deleted records for a limited additional period under the provider's backup retention.
Access, correction and deletion
Email hello@casenote.net to see what we hold about you, correct it, or have it deleted. We reply within two business days.
This notice was last updated on 15 October 2026. If we change how this website handles information, we will update this page.