Privacy Policy
KINGSTON BEACH PHYSIOTHERAPY
PRIVACY POLICY
2021
KINGSTON BEACH PHYSIOTHERAPY IS A RESPONSIBLE HEALTH PROVIDER AND WE ARE COMMITTED TO PROTECTING YOUR PERSONAL AND HEALTH INFORMATION.
Physio on Hawthorn Pty Ltd ACN 167 721 208 trading as ‘Kingston Beach Physiotherapy’ (KBP) is a private sector health provider. As a health provider, KBP complies with the provisions of the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). Because KBP operates in Tasmania, KBP also complies with the provisions of the Health Records Act 2001 (Tas) (HRA) and the Health Privacy Principles (HPPs).
This Privacy Policy explains how KBP will use and deal with your personal and health information, and how we will comply with our obligations under the Privacy Act, HRA, APPs and HPPs. KBP may amend this Privacy Policy from time to time, including to reflect changes in laws.
If you have any questions about this Privacy Policy, or our use of your personal and health information generally, please contact KBP using the contact details provided at the end of this Privacy Policy.
1. Collection of personal and health information
KBP provides physiotherapy and related goods and services to the general public. In the course of its business KBP will collect personal and health information. If you have any dealings with KBP, including through use the website operated by KBP which is accessible at www.kingstonbeachphysio.com.au (Website), it is very likely that KBP will collect, hold, and use your personal and health information.
You may choose not to provide your personal and health information to KBP, in which event KBP may be unable to provide some or all of its services to you. You should tell KBP if you do not consent to KBP collecting your personal and health information.
2. What is personal and health information?
For the purposes of the Privacy Act and the HRA, personal information is generally any information, or an opinion, about a person who is identified or who can be identified. Personal information would include name, date of birth, and contact details. Health information would include information or an opinion about a person’s physical, mental or psychological health, medical history, medications or treatment information, or health services provided, or proposed to be provided, to a person.
KBP will collect the following kinds of personal and health information:
a) full name, date of birth, address, telephone number(s) and email address(s);
b) lifestyle information that is relevant to services provided, or proposed to be provided, by KBP including employment / ergonomic details, usual physical activities and levels, proposed activities and health and wellbeing objectives;
c) Medicare number, private health insurance details, referring health practitioners, or details of other health practitioners and providers to a person;
d) medical history details, family and social history details and details of current medications and treatments;
e) financial information such as credit card or bank account numbers;
f) records and content of communications between you and KBP including through your use of the Website including specifically content which you upload to the Website;
g) personal and health information based on your activities on the Website;
h) personal and health information you provide to KBP through any discussions boards, correspondence, disputes, or which is shared by you from social media applications, services or websites;
i) to the extent permitted by law, other personal and health information provided to KBP by, or obtained from, third parties (such as a credit bureau) including credit check information;
j) personal and health information from your interaction with the Website and its content and advertising, including device identifiers, device type, geo-location information, connection information, statistics on page views, traffic to and from the Website, mobile network information, time, date, referring URL, the type of operating system and browser, ad data, IP address and standard web log data.
3. Why does KBP collect and hold personal and health information?
KBP collects personal and health information because it is reasonably necessary to conduct its business, and provide its services. Many services provided by KBP, including certain features of the Website, could not be provided if KBP did not collect personal and health information.
KBP does not collect personal or health information for the purposes of selling it.
4. How does PBP collect personal and health information?
KBP collects personal and health information in a number of ways, including:
a) when you provide information directly to KBP in person, by phone, or in writing (including email);
b) when you use a website operated by KBP from time to time including the Website, in which case KBP may record, in addition to information you specifically provide (e.g. typed information and uploaded content), information sent to us by your computer, mobile device or other access device, including cookies;
c) from other health practitioners / providers; and
d) from third parties such as entities related to and/or associated with KBP, service providers to KBP, operators of websites or servers linked to or from the Website, and applications used on or in connection with the Website.
5. How does KBP use / disclose personal and health information?
KBP may use / disclose your personal and health information in the ordinary course of its business as a health provider, including to:
a) communicate with you to provide you with general information about your health and wellbeing;
b) with the exception of your sensitive information, communicate with you to provide you with information about services (or goods) which KBP may provide;
c) provide you with services (or goods) from time to time;
d) research, develop and improve services (or goods) provided by KBP from time to time;
e) to conduct surveys to determine the use of, and satisfaction with, services (and goods) provided by KBP;
f) liaise with third parties on your behalf including but not limited to Medicare, private health insurers (or intermediaries through which they may operate), and other health practitioners / providers;
g) refer you to other health practitioners;
h) make such mandatory disclosures, or otherwise provide such information, as KBP is required to make by law;
i) liaise with third party providers to KBP including internet service and associated providers;
j) detect, investigate and prevent potentially unlawful acts or omissions or acts or omissions with the potential to breach any of KBP terms of service, website terms, this Privacy Policy or any other policies of KBP from time to time;
k) verify information for accuracy or completeness (including by way of verification with third parties);
l) combine or aggregate personal and health information with information collect by KBP from third parties; and
m) collect fees, resolve disputes and to identify, test and resolve problems.
In the ordinary course of its business, KBP may release personal or health information to recipients located outside of Australia, but only to recipients who are bound by obligations of confidentiality to KBP. Information so released would not usually contain anything other than limited contact information, and it would be released only for the purposes of enabling KBP to effectively communicate with you, for instance, via an email marketing campaign.
6. Your consent for KBP to collect, use and disclose your personal and health information
You agree that KBP may collect, use and disclose your personal and health information for all purposes reasonably necessary in the course of its business as a health provider, including to:
a) provide services (and/or goods) to you;
b) enforce the KBP terms of service, website terms, this Privacy Policy or any other policies of KBP from time to time;
c) comply with any applicable law, request by a governmental agency, regulatory authority or a legally binding order of a court or tribunal;
d) respond to or resolve claims that a person with whom KBP has had contact (including by that person accessing the Website) has violated the rights of others;
e) protect a person’s rights, property or safety;
f) directors, staff, contractors, professional advisers to, and related entities of, KBP;
g) service providers to KBP;
h) third parties to whom you expressly ask KBP to send, or consent to KBP sending, your personal information;
i) credit agencies in relation to missed and late payments or other defaults or breaches of your obligations to KBP; and
j) entities with whom KBP proposes to merge with or be acquired by and, in such case, KBP will use its best endeavours to ensure that the relevant entity materially adheres to this Privacy Policy.
7. Accessing and correcting your personal information
You are entitled to request access to the personal and health information which KBP holds about you. You may request such access by contacting KBP in writing using the contact details provided below. KBP will comply with your request unless, in the reasonable opinion of KBP, there is a proper and lawful basis for not doing so (for example, if KBP reasonably believes that giving access would pose a serious threat to your health or wellbeing, or the health, wellbeing or safety of another person), in which case KBP will advise you of its decision in relation to your request for access.
KBP will take reasonable steps to ensure that the personal and health information it holds is accurate, up-to-date and complete and, for this purpose, KBP may seek to confirm your personal and health information with you from time to time. If you believe that personal and health information which KBP holds about you is inaccurate, out-of-date or incomplete, you may request KBP to correct the personal and health information it holds in relation to you. You can make the request by contacting KBP in person or writing to us using the contact details below.
8. Complaints about the collection, storage and use of personal and health information by KBP
KBP aims to comply with its obligations in relation to your personal and health information to your absolute satisfaction. If you are not satisfied with the way in which KBP has collected, stored or used your personal or health information, we encourage you to contact us in the first instance using the contact details below. You should tell KBP why you are not satisfied, and what KBP can do to resolve any concerns that you have relating to your personal and health information. KBP will, as soon as reasonably practicable after your contact, use its best efforts to resolve your reasonable concerns, including taking steps to identify and rectify any possible breach by KBP of the Privacy Act, HRA, APPs, HPPs or this Privacy Policy. KBP will advise you, in writing, of the steps it has taken (if any) to resolve your concerns.
If you are not satisfied with the steps taken by KBP (if any), you may contact one or both of the following for further assistance:
Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
Tel: 1300 363 992
Web: www.oaic.gov.au
Health Services Commissioner
26th Floor 570 Bourke Street Melbourne VIC 3000 Tel: 1300 582 113
Web: www.health.vic.gov.au
9. Storage and security of personal and health information
PBP stores personal and health information:
a) physically and electronically, at the business premises of KBP from time to time;
b) physically at storage facilities owned, leased or licensed to KBP from time to time;
c) electronically on servers owned and operated by KBP and also on servers hosted by third party providers to KBP, which may be located both in and outside of Australia.
KBP takes reasonable steps to protect personal and health information from misuse, interference, loss and from unauthorised access, modification and disclosure. Steps taken by KBP may include:
a) the employment of reasonable security measures at the business premises of KBP;
b) the use of such software and hardware as is reasonably necessary to secure electronic devices owned and operated by KBP;
c) ensuring employees of KBP are subject to obligations of confidentiality and that they are appropriately trained to deal with personal and health information; and
d) engaging third party providers to KBP on terms which create in the provider obligations that are materially consistent with the obligations of KBP in relation to personal and health information.
10. Contacting KBP about your personal and health information
You can contact KBP using the following details:
Attn: Practice Manager
Kingston Beach Physiotherapy
2 Recreation Street Kingston Beach, Tasmania 7050
Tel: 0487 002 089
Email: kingstonbeachphysio@gmail.com