Nexrx Privacy

1. Who this policy applies to
This policy applies to two groups, and the distinction matters:

Clinician users.
Registered healthcare professionals who apply for and are granted access to NexRx. When we handle a clinician’s own details (name, email, professional registration number, clinic details), DOLA is the organisation responsible for that information.

Patients of clinician users.
NexRx is used by clinicians to capture assessment data and place orthotic orders for their own patients. Patients do not use NexRx themselves. For patient information entered into or captured through the App, the clinician (or their clinic) is responsible for that information and for having the appropriate consent from the patient. DOLA handles patient information on the clinician’s behalf in order to manufacture and supply the prescribed orthotics.

2. Information we collect

2.1 Clinician account information
When a clinician applies for and uses NexRx, we collect:

• Name
• Email address
• Phone number
• Professional registration number (e.g. AHPRA, HCPC or equivalent)
• Clinic name and address
• Country
• Account and login information

2.2 Patient information (collected by the clinician through the App)
To produce a prescribed orthotic, clinicians capture and submit:

• Patient name or identifier
• Weight and shoe size
• 3D foot scans
• Gait video and photographs
• Recorded pathologies and clinical notes
• Orthotic prescription details

2.3 Technical information
When NexRx is used, we may automatically collect device and technical information such as device type, operating system, app version and log data, for security, support and to keep the App working.

3. How we use information

Clinician information is used to: create and manage accounts; verify professional registration; provide access to the App; communicate about orders, accounts and service; and provide support.

Patient information is used solely to: fulfil the orthotic prescription the clinician has ordered; manufacture and supply the product; and provide related order support. We do not use patient information for marketing, and we do not use it for any purpose the clinician has not instructed.

4. The scanning technology
NexRx captures 3D foot scans using a third-party scanning technology (provided by SnugFit) integrated into the App. All scan processing happens on your device. Scan data is not sent to the scanning technology provider’s servers, and the provider does not receive your scan data. The resulting 3D model is used to generate the measurements needed to manufacture the orthotic.

5. How we store and protect information
We use appropriate technical and organisational measures to protect information against unauthorised access, alteration, disclosure or destruction. These include access controls and restricting access to information to those who need it. Information collected through NexRx is stored using established cloud infrastructure providers on our behalf.

6. Third parties who process information
We use external service providers to operate NexRx and to fulfil orders. These include:

• Cloud hosting, database, authentication and file storage services, which store the information collected through the App on our behalf; and
• Our order-processing and communication systems, which handle order data and send account and service emails.
• The third-party 3D scanning technology processes scan data on the device only and does not receive it.

Each provider handles information only as needed to provide its service to us, and is bound to protect it. Some of these providers are located outside Australia, so some information may be processed overseas (see “Cross-border data transfers” below).

We do not sell, rent or trade any information collected through NexRx.

7. Cross-border data transfers
Because DOLA operates laboratories and distribution in multiple countries and because some of our service providers, including our cloud infrastructure, are located or process data outside Australia, information collected through NexRx, including patient information, may be transferred to, stored in or accessed from countries other than the one in which it was collected, including Australia, the United States and the European Union. Scan processing happens on the device and is not transferred to the scanning provider. Where we or our providers transfer information across borders, we take reasonable steps to ensure it remains protected in a manner consistent with this policy and applicable law.

8. Retention
We keep information for as long as needed to provide the App and fulfil orders, to meet our legal, professional and record-keeping obligations, and as instructed by the clinician. Patient information is retained in line with the clinician’s instructions and applicable healthcare record-keeping requirements.

9. Rights and choices
Clinicians may access or correct their account information, or request account closure, by contacting us using the details below.

Patients who wish to access, correct or delete their information should contact the clinician who treated them, as the clinician is responsible for that information. Where we handle patient information on a clinician’s behalf, we will support the clinician in responding to such requests.

10. Data breaches
If a data breach occurs that is likely to result in serious harm, we will respond in accordance with our obligations, including notification to affected parties and regulators where required.

11. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify clinician users. Continued use of NexRx after changes take effect constitutes acceptance of the updated policy.

12. Contact us
Questions about this policy, or about how information is handled in NexRx, can be directed to:
Digital Laboratories Australia Pty Ltd
PO Box 3242 Australia Fair QLD 4215 Australia
Email: privacy@dolaorthotics.com

Effective date:
25 September 2026

Last updated:
25 September 2026