Privacy Policy
Last updated 15 June 2026
Reyah respects your privacy. This policy explains how Reyah ("Reyah", "we", "us" or "our") collects, uses, discloses and protects personal information, including information we process on behalf of the medical clinics we work with. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Who we are
Reyah builds and operates done-for-you GP headhunting systems for Australian medical clinics. We design outbound infrastructure (email, SMS and voicemail), build a database of relevant doctors from publicly available sources, run the first outreach campaign, and then hand the system over to the clinic to operate. In this policy, a clinic that engages us is a Client, and a doctor or other individual contacted through a campaign is a Contact.
If you have any questions about this policy, contact us at privacy@reyah.ai.
2. The personal information we collect
Website visitors and enquirers
When you visit reyah.ai, book a call, or contact us, we may collect your name, email address, phone number, clinic name and role, the details you choose to share about your hiring needs, and technical information such as your IP address, browser type and pages viewed.
Clients
When you engage Reyah, we collect the information needed to deliver the service and administer our agreement, including contact and billing details, the role and clinic details for your campaign, your sender identity and sign-off, and correspondence with you.
Information we process on behalf of Clients
To run a campaign, we compile and process information about Contacts (doctors) such as name, specialty, practice location, professional registration status, business email address and mobile number. This information is sourced from publicly available sources and cross-referenced against the AHPRA register for registration and fellowship status. When we process this information to run a campaign, we generally do so on behalf of, and under the instructions of, the relevant Client.
3. How we use personal information
We use personal information to:
- respond to enquiries, schedule calls and provide information about our services;
- build, operate, optimise and hand over a Client's outreach system;
- compile and enrich Contact data, deliver outreach, classify replies and alert the Client;
- administer our agreement with a Client, including invoicing and support;
- maintain suppression and do-not-contact lists and honour opt-out requests;
- improve our website and services, and keep records for compliance and audit purposes; and
- comply with our legal obligations.
4. Outreach to doctors, and how we keep it compliant
Reyah's outreach is designed to be compliant by design. We use only publicly available data, screen every send against do-not-contact and suppression lists, comply with the Spam Act 2003 (Cth) by identifying the sender and including a functional unsubscribe in commercial electronic messages, and process opt-out and STOP requests promptly. If you are a Contact and wish to be removed, you can use the unsubscribe link in any message, reply STOP to an SMS, or email privacy@reyah.ai and we will suppress your details across our systems.
5. Cookies and analytics
To understand how our website is used and to optimise its performance, we use Google Analytics 4, provided by Google. Google Analytics uses cookies to measure how visitors use the site and to support analytics and advertising, including remarketing. It is gated behind your consent: no analytics or advertising cookies are set until you click "Accept" on our cookie banner. If you decline, Google Analytics stays disabled and no analytics or advertising cookies are set. Where Google Analytics is enabled, IP addresses are anonymised before being processed.
You can withdraw your consent at any time by declining on the banner, or by clearing this site's stored preferences and cookies in your browser, which will stop Google Analytics from running again until you choose to accept. Google acts as our data processor for Google Analytics; you can read how Google handles this data in Google's privacy policy.
Separately, our website may use cookies or similar technologies that are strictly necessary for essential functions. These are not used for analytics and remain in place so the site works as intended; you can still disable them in your browser settings, although some parts of the site may not work correctly.
6. Who we share information with
We do not sell personal information. We may disclose personal information to:
- Service providers and sub-processors that help us operate, such as CRM and automation platforms (for example, GoHighLevel), email and SMS delivery providers, data-enrichment and verification providers, hosting and analytics providers;
- The relevant Client, where information is collected or processed for that Client's campaign;
- Professional advisers such as our lawyers and accountants; and
- Regulators or other parties where required or authorised by law.
We require our service providers to handle personal information consistently with this policy and applicable law.
7. Overseas disclosure
Some of our service providers may store or process information outside Australia. Where they do, we take reasonable steps to ensure the information is handled in a manner consistent with the APPs.
8. Data security and retention
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including access controls, bounce suppression across sending domains, and an audit trail of campaign activity. We retain personal information only for as long as needed to provide our services, meet our legal obligations, resolve disputes and enforce our agreements, after which we delete or de-identify it.
9. Your rights
Subject to the Privacy Act, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date or incomplete. To make a request, contact privacy@reyah.ai. Where information is held on behalf of a Client, we may refer your request to that Client. We will respond within a reasonable period and may need to verify your identity first.
10. Children
Our website and services are intended for clinic owners, practice managers and medical professionals, and are not directed at children. We do not knowingly collect personal information from children.
11. Third-party links
Our website may link to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
12. Changes to this policy
We may update this policy from time to time. The current version is always posted on this page with its "last updated" date. Material changes will take effect when posted.