privacy policy.
Introduction
We are committed to protecting the privacy of patient information and to handling your personal information in a responsible manner in accordance with the Privacy Act 1988 (Cth), the Privacy Amendment (Enhancing Privacy Protection) Act 2012, the Australian Privacy Principles, and relevant State and Territory privacy legislation (referred to as "privacy legislation").
This Privacy Policy explains how we collect, use, and disclose your personal information, how you may access that information, and how you may seek its correction. It also explains how you may make a complaint about a breach of privacy legislation.
This Privacy Policy is current from 01/07/19 and is reviewed annually. From time to time, we may make changes to our policy, processes, and systems in relation to how we handle your personal information. We will update this Privacy Policy to reflect any changes. Those changes will be available on our website and in the practice.
Collection
We collect information that is necessary and relevant to provide you with medical care and treatment, and to manage our medical practice. This information may include your name, address, date of birth, gender, health information, family history, credit card and direct debit details, and contact details. This information may be stored on our computer medical records system and/or in handwritten medical records.
Wherever practicable, we will only collect information from you personally. However, we may also need to collect information from other sources such as treating specialists, radiologists, pathologists, hospitals, and other healthcare providers.
We collect information in various ways: over the phone, in writing, in person at our clinic, or online if you transact with us via digital channels. This information may be collected by both medical and non-medical staff.
In emergency situations, we may also need to collect information from your relatives or friends.
We may be required by law to retain medical records for certain periods of time, depending on your age at the time we provide services.
Use and Disclosure
We will treat your personal information as strictly private and confidential. We will only use or disclose it for purposes directly related to your care and treatment or in ways you would reasonably expect us to use it for your ongoing care. For example, disclosure of your physical outcome measures to your specialist or nominated doctor.
We may also use external service providers to carry out activities on our behalf, which may include the use of advanced technologies or data-processing tools. These providers are required to adhere to strict confidentiality and privacy obligations and are prohibited from using your personal information for any purpose other than the services we have engaged them to perform.
In certain circumstances, we may be permitted or required by law to disclose your personal information to third parties—for example, to Medicare, Police, insurers, solicitors, government regulatory bodies, tribunals, courts of law, hospitals, or debt collection agents. We may also, from time to time, provide statistical data to third parties for research purposes. Any research data shared will be de-identified to protect individual privacy.
Data Quality and Security
We will take reasonable steps to ensure that your personal information is accurate, complete, up to date, and relevant. Our staff may confirm your contact details when you attend a consultation, and we appreciate you notifying us if any of your details change.
Personal information that we hold is protected by:
-
Securing our premises
-
Placing passwords and varying access levels on databases to limit access and protect electronic information from unauthorized interference, access, modification, or disclosure
-
Providing locked cabinets and rooms for the storage of physical records
Where external data-processing services are utilized, we implement security measures such as encryption or secure access protocols to maintain confidentiality and data integrity.
Corrections
If you believe the information we have about you is not accurate, complete, or up to date, please contact us in writing (details below).
Access
You are entitled to request access to your medical records. We request that you put your request in writing, and we will respond within a reasonable time.
There may be a fee for the administrative costs of retrieving and providing copies of your medical records.
We may deny access to your medical records in certain circumstances permitted by law—for example, if disclosure may pose a serious threat to your health or safety. We will always inform you of the reason for any denial and any options available to you in response.
Complaints
If you have a complaint about the privacy of your personal information, please contact us in writing. Upon receiving a complaint, we will consider its details and attempt to resolve it in accordance with our complaints-handling procedures.
If you are dissatisfied with our handling of a complaint or the outcome, you may make an application to the Australian Information Commissioner or the Privacy Commissioner in your State or Territory.
Overseas Transfer of Data
We will not transfer your personal information to an overseas recipient unless we have your consent, are required to do so by law, or otherwise comply with the Australian Privacy Principles. Where overseas transfers are necessary, we ensure that appropriate data protection and confidentiality measures are in place.
Policy Review
All of our policies undergo periodic review to ensure they are up to date and best reflect the operations of the business. As a result, these terms and conditions may change without notice. The latest version of this Privacy Policy will always be available on our website, and your continued use of our site indicates your acceptance of any amendments.
Contact
Please direct any queries, complaints, or requests for access to medical records to:
Aston Vass
admin@lifestylehealthco.com
Effective Date: 01/01/25 (Last Reviewed: 23/03/25)