Privacy Policy
[Effective date: 4th December 2025]
This Privacy Policy explains how Joshua Leisk (“I”, “me”) collects, uses, stores and discloses personal information when you use JoshuaLeisk.com (the “Site”) or contact me.
What I collect
I aim to collect the minimum needed. Depending on how you interact with me, I may collect:
identity and contact details (name or alias, email, organisation, role),
message content you send (including attachments),
(if you choose to share it) health-related information (for example symptoms, diagnoses, lab results, medications), preferably de-identified,
website technical data (IP address, device and browser type, timestamps, pages viewed) via standard server logs.
I do not use behavioural advertising or analytics tracking beyond standard server logs.
De-identified by default
If you share health-related information, please remove direct identifiers by default (for example full name, date of birth, street address, phone number, Medicare details). If you send identifiable material anyway, you do so by choice and I will handle it under this policy.
Why I collect it, how I use it
I use personal information to:
respond to enquiries,
provide evidence synthesis, research translation, and advisory work (typically for clinicians, educators, organisations, and collaborators),
maintain continuity and basic records of communications relevant to the enquiry or work.
Who I share it with
I do not sell personal information.
I may disclose personal information:
to your nominated clinician or organisation, if you ask me to,
to service providers I use to operate the Site and communications (for example email, cloud file storage, security tools), only as needed for delivery of those services,
where required or authorised by law, or to reduce a serious threat to safety.
Overseas handling
Some service providers may store or process information outside Australia. If you contact me from outside Australia, your information will be handled in Australia and may be processed elsewhere depending on the services used.
Storage and security
I take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. No system is perfectly secure, especially when third-party platforms are involved.
Retention, deletion, de-identification
I keep personal information only as long as needed for the purposes above, then take reasonable steps to delete or de-identify it unless I’m required to retain it.
Deletion requests: You can request deletion at any time (see “Contact”, or use email). I will take reasonable steps to delete information I control. Some information may persist in backups or in long message threads where deletion is not practicable, in which case I will take reasonable steps to de-identify where feasible.
Access and correction
You can request access to personal information I hold about you and request correction if it is inaccurate, out of date, incomplete, irrelevant, or misleading.
Complaints
If you have a privacy complaint, please contact me first and I will respond within a reasonable time. If you’re not satisfied, you can escalate to the relevant privacy regulator.
Contact
Privacy contact: Joshua Leisk
Email: privacy [at] joshualeisk.com