Privacy Policy: North Rocks Medical Centre

Introduction
North Rocks Medical Centre is committed to protecting the privacy of your personal information, including your sensitive health information. We have developed this policy in compliance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs). This policy details how we collect, use, store, and disclose your personal information.
1. What information do we collect and hold?
To provide you with the best possible healthcare, we must collect and hold your personal and health information. This information may include:
  • Personal details: Your name, date of birth, address, and contact information.
  • Health information: Medical history, test results (e.g., blood tests, imaging), medications, allergies, and diagnoses.
  • Billing details: Your Medicare number, health fund details, and billing information.
  • Third-party records: Relevant information from other healthcare providers, such as specialists or hospitals.
2. How do we collect your personal information?
We primarily collect your personal information directly from you. This occurs when you:
  • Make an appointment or register with us as a patient.
  • Provide your information during consultations.
  • Submit information through electronic forms or apps.
  • Provide it by phone, email, or in person.
In certain circumstances, we may also need to collect information from other sources, such as:
  • Other healthcare providers, with your consent.
  • Publicly available sources.
  • Your family members or carers if they are involved in your care and we have your consent or it is impractical to get it directly from you.
3. Why do we collect, hold, use, and disclose your personal information?
We collect your information for the primary purpose of providing you with comprehensive healthcare services. This includes:
  • Diagnosing and treating your medical conditions.
  • Managing your ongoing healthcare.
  • Communicating with you about your health and appointments.
  • Administrative tasks related to managing your health record.
  • Billing and debt recovery.
  • Communicating with other healthcare professionals involved in your care (e.g., specialists, pathologists).
4. How do we store and protect your personal information?
We take all reasonable steps to ensure your personal and health information is protected from misuse, loss, and unauthorised access. Our security measures include:
  • Password-protected electronic records.
  • Secure offsite storage for paper-based records.
  • Confidentiality agreements signed by all staff and contractors.
  • Restricting access to your information on a “need-to-know” basis.
5. Your rights to access and correct your information
  • Access: You have the right to request access to your personal and health information. Requests must be made in writing and will be processed within a reasonable timeframe.
  • Correction: We take all reasonable steps to ensure your information is accurate and up-to-date. We will correct any inaccurate or incomplete information upon request.
6. Data breaches and complaints
  • Data breach response: In the event of a data breach, we will respond according to our Data Breach Response Plan and notify you if your information is at risk.
  • Making a complaint: If you have concerns about our privacy practices, please contact us. If you are not satisfied with our response, you may lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC).
7. Disclosure to overseas recipients
We will only disclose your personal information to overseas recipients with your informed consent or where required or authorised by law. If we do, we will take all reasonable steps to ensure the recipient handles the information in accordance with Australian privacy laws.
8. Website privacy
When you visit our website, we may collect non-identifying data for analytics purposes. Our website does not use cookies to collect sensitive personal information.
Contact information
For any privacy-related queries or requests, please contact our Practice Manager at:
  • Address: 5 Pembury Ave, North Rocks NSW 2151
  • Phone: +61 2 9871 1756
  • Email: info@northrocksmedicalcentre.com.au