Privacy Policy
Introduction
The purpose of this privacy policy is to provide you with information on how your personal and health information is collected and used and the circumstances in which we may share your information with third parties.
Why and when your consent is necessary
When you become a patient of One 1Medical, you provide consent for our practitioners and administrative staff to access and use your personal and health information. Your personal information is only accessed by practitioners and staff in order to provide you with the highest level of healthcare. There are certain circumstances we may be required to share your personal information with third parties which are covered by this policy. If we need to use your information for anything else, we will seek additional consent from you to do this.
Why do we collect, use, hold and share your personal information?
Our main purpose for collecting, using, holding and sharing your personal information is to provide you with a high level of healthcare and inform you about the healthcare services we offer. We also use it for activities directly related to the supply of healthcare services, such as Medicare claims and payments, clinic audits and accreditation.
What personal information do we collect?
For the purposes of this Privacy Policy, personal information may mean some, or all of the following: patient’s name, contact details, date of birth, other identification details, emergency contact details, medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors; Medicare number (where available) for identification and claiming purposes; healthcare identifiers; health fund details; bank account and/or credit card details, and payment history.
How do we collect your personal information?
We collect your personal information in the following ways:
- When you become a patient of One 1Medical you will be required to supply personal and demographic information, as well as health information such as allergies, health and family history.
- We may also collect your personal information when you visit our website, send us an email or SMS, phone us, make an online appointment or communicate with us using social media.
- In the course of providing you health services, we may collect further personal information relevant to the supply of healthcare services.
- Personal information may also be collected from other sources when it is not practical or reasonable to collect it from you directly. This may include information from:
- your guardian or responsible person;
- other involved healthcare providers, such as specialists, allied health professionals, hospitals, community health services, and pathology and diagnostic imaging services;
- your health fund, Medicare, or the Department of Veterans’ Affairs (as necessary).
Sharing your personal information
In some circumstances, we may be required to share your personal information. However, only people who need to access your information will be able to do so. Other than in the course of providing healthcare services, or as otherwise described in this policy, One 1Medical will not share personal information with any third party without your consent.
We may be required to share your personal information in the following instances:
- To communicate with other healthcare providers and prepare relevant healthcare documentation including but not limited to My Health Record and related to the supply of healthcare services to you;
- In emergency situations to lessen or prevent a serious threat to you or another patient’s life, health or safety or public health or safety, or if you are unable to act on your own behalf due to a health condition, we may need to discuss your health information with relatives or emergency contacts, to ensure you receive necessary care;
- If required or authorised by law (e.g. Court subpoenas);
- If needed to assist in locating a missing person;
- To establish, exercise or defend an equitable claim;
- For the purpose of confidential dispute resolution process;
- If there is a statutory requirement to share certain personal information (for instance in the case of mandatory notification of certain diseases);
- Where One 1Medical is required to work with third parties for business purposes, such as accreditation agencies, or information technology providers. All third parties are required to comply with Australian Privacy Principles and this policy;
- We will not disclose your personal information with anyone outside Australia (unless under exceptional circumstances that are permitted by law) without your consent.
How do we store and protect your personal information?
Your personal and health information may be stored in various forms, but is primarily retained in your secure electronic health record. One 1Medical maintains the highest level of confidentiality.
How can you access and correct your personal information at our clinic?
You have the right to request access to your personal information. All requests for access to personal information must be made in writing via email, and we will respond within a reasonable time.
One 1Medical takes all reasonable steps to maintain the accuracy of your personal information and from time to time, we may ask you to verify that the personal information we hold about you is correct and current. You may also request that we correct or update your information, and you should make such requests in writing.
How can you lodge a privacy-related complaint, and how will the complaint be handled?
If you have any concerns about the privacy of your information, please send us an email outlining your concerns.
If you are not happy with the response you may also contact the OAIC regarding privacy concerns. For further information visit www.oaic.gov.au or call the OAIC on 1300 363 992.
Privacy and our website
Any information collected through our website is treated as confidential information and is stored securely.