Privacy Policy
1. Our Commitment
We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. What Information We Collect
We may collect the following types of personal information:
– Name, date of birth and contact details
– Medical and health information (sensitive information)
– Medicare and billing details
– Emergency contact details
– Referral letters and reports from other healthcare providers
3. How We Collect Information
We collect information:
– Directly from you (in person, phone, email or forms)
– Through our website or online systems
– From third parties (e.g. GPs, specialists, family members) with your consent or where permitted by law
4. Why We Collect and Use Your Information
We collect and use your information to:
– Provide healthcare services
– Communicate with you about your care
– Manage billing and Medicare claims
– Comply with legal and regulatory obligations
We will only use your information for other purposes with your consent or where permitted by law.
5. Disclosure of Information
We may disclose your information to:
– Other healthcare providers involved in your care
– Medicare, health insurers or government agencies
– IT service providers (e.g. secure cloud storage)
– Legal authorities where required
We take reasonable steps to ensure these parties protect your information.
6. Data Storage and Security
Your information may be stored electronically and in paper records.
We take reasonable steps to protect your information from misuse, loss, unauthorised access or disclosure, including:
– Secure systems and passwords
– Access controls
– Staff confidentiality obligations
If a data breach occurs, we will respond in accordance with the Notifiable Data Breaches scheme.
7. Overseas Disclosure
Some of our service providers may store data overseas. Where this occurs, we take reasonable steps to ensure your information is handled securely and in accordance with Australian privacy laws.
8. Access and Correction
You may request access to, or correction of, your personal information at any time by contacting us.
We will respond within a reasonable timeframe.
9. Data Retention
We retain medical records in accordance with legal requirements.
Generally, records are kept for at least:
– 7 years from the last consultation
– Until age 25 for children
10. Website and Cookies
Our website may collect limited information such as IP address and browsing behaviour using cookies or analytics tools to improve user experience.
11. Use of Artificial Intelligence (AI)
We may use AI tools to support administrative and clinical processes.
Where used:
– We take steps to protect your privacy
– Personal information is only used where appropriate and permitted
– Data may be de-identified where possible
12. Complaints
If you have a privacy concern, please contact us:
Concussion Matters
Admin@concussionmatters.onmicrosoft.com
We will respond promptly.
If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC):
13. Updates
We may update this policy from time to time. The latest version will always be available on our website.