DermaCare Family Health respects your privacy and is committed to handling personal information, including sensitive health information, openly and securely. This policy explains the kinds of information we collect, why we collect it, how it may be used or disclosed, and how you can access, correct or raise concerns about your information.
1. Our privacy obligations
We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Health Records and Information Privacy Act 2002 (NSW), including the Health Privacy Principles.
2. Information we collect
The information we collect depends on your relationship with us and the services you receive. It may include:
- your name, date of birth, address, telephone number, email address and emergency contact details;
- Medicare, Department of Veterans’ Affairs, private health insurance and billing details;
- medical history, symptoms, diagnoses, medications, allergies, treatment plans, test results, referrals and consultation notes;
- information supplied by your authorised representative, carer, referring practitioner or another healthcare provider;
- appointment, communication, consent, feedback and complaint records;
- information submitted through our website forms; and
- limited technical information about website use, such as browser, device and IP information, where collected by our website or service providers.
Please do not send urgent or emergency medical information through a website form or ordinary email.
3. How we collect information
We generally collect information directly from you during registration, appointments, consultations, telephone calls, emails and website interactions. With your consent, or where authorised by law, we may also collect information from a parent or guardian, authorised representative, referring practitioner, specialist, allied health provider, pathology or imaging provider, hospital, pharmacy, insurer or government agency.
4. Why we collect, use and disclose information
We collect, use and disclose information where reasonably necessary to:
- provide, coordinate and manage healthcare services;
- identify you, communicate with you and manage appointments;
- obtain and review referrals, test results and relevant clinical information;
- process accounts, Medicare or other claims, payments and insurance matters;
- support clinical safety, quality assurance, accreditation, training and practice administration;
- respond to enquiries, feedback or complaints;
- meet legal, regulatory, professional and public-health obligations; and
- manage recruitment, contractors and other business relationships where relevant.
5. Who we may share information with
Where permitted and appropriate, we may disclose information to members of your treating team and to organisations involved in your care or the administration of our services. These may include medical practitioners, specialists, allied health providers, pathology and imaging providers, hospitals, pharmacies, Medicare, the Department of Veterans’ Affairs, insurers and payment processors.
We may also use trusted providers for practice-management systems, secure data storage, IT support, communications, document destruction, professional advice and other administrative services. Providers are only given the information reasonably required for their role and are expected to protect it. We may disclose information where you consent, where required or authorised by law, or where necessary to lessen or prevent a serious threat to life, health or safety.
6. Overseas handling
We do not routinely send patient health records to overseas recipients. Some technology or communications providers may process limited information using infrastructure outside Australia. Where an overseas disclosure is likely and the destination is known, we will take reasonable steps required by law and update this policy where appropriate. You may contact us for current information about the providers used by the practice.
7. Data quality, security and retention
We take reasonable steps to keep information accurate, complete and up to date, and to protect it from misuse, interference, loss and unauthorised access, modification or disclosure. Safeguards may include access controls, staff confidentiality obligations, secure systems, backups and secure disposal processes.
We retain health records and other information for the periods required by applicable law, professional standards and legitimate clinical or administrative needs. When information is no longer required, we take reasonable steps to destroy or de-identify it, unless retention is required by law.
8. Accessing or correcting your information
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact the Practice Manager using the details below. We may need to verify your identity before acting on a request.
Access will usually be provided unless an exception under applicable law applies. If we cannot provide access or make a requested correction, we will explain the reason where the law permits. A reasonable administrative fee may apply where permitted, and we will advise you before proceeding.
9. Website, cookies and third-party links
Our website may use essential cookies and third-party services to support security, functionality, maps, forms or performance. These services may receive technical information from your browser. You can control cookies through your browser settings, although disabling them may affect website functionality.
Links to external websites are provided for convenience. Their privacy practices are governed by their own policies, and we are not responsible for how those organisations handle information.
10. Privacy questions and complaints
If you have a privacy question or believe your information has been handled incorrectly, please contact our Practice Manager. Tell us what happened and how you would like the matter resolved. We will acknowledge and assess your concern, investigate where appropriate, and respond within a reasonable period.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner or the Information and Privacy Commission NSW.
11. Contact us
Practice Manager
DermaCare Family Health
102 Shellharbour Road, Warilla NSW 2528
Phone: 02 4210 7785
Email: info@dermacareandfamilyhealth.com.au
12. Changes to this policy
We may update this policy when our practices, services or legal obligations change. The latest version will be published on this page with its updated date.