Privacy Policy

Why and when your consent is needed

When you register as a patient, you provide consent for our doctors, practitioners and staff to access and use your personal information so they can provide you with the best possible care. Only staff who need to see your information will have access to it. If we need to use your information for anything else, we will seek additional consent from you.

Why we collect, use, hold and share your information

We collect, use, hold and share your personal information to manage your health. This includes providing healthcare services, and directly related business activities such as financial claims and payments, practice audits and accreditation, and business processes such as staff training.

What information we collect

The information we collect about you includes:

• your name, date of birth, address and contact details
• medical information, including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors
• Medicare number (where available) for identification and claiming purposes
• healthcare identifiers
• health fund details

Dealing with us anonymously

You have the right to deal with us anonymously or under a pseudonym, unless it is impracticable for us to do so or we are required or authorised by law to only deal with identified individuals.

How we collect your information

We may collect your personal information in several ways:

• When you make your first appointment, our staff will collect your personal and demographic information through your registration, either in person or through our online booking system (HotDoc).
• During the course of providing medical services, we may collect further personal information, including through electronic transfer of prescriptions (eTP) and My Health Record.
• We may also collect your personal information when you visit our website, send us an email or SMS, telephone us, make an online appointment or communicate with us using social media.
• In some circumstances, information may be collected from other sources, such as your guardian or responsible person, other healthcare providers (for example specialists, allied health professionals, hospitals and pathology and diagnostic imaging services) and your health fund, Medicare or the Department of Veterans' Affairs, as necessary.

When, why and with whom we share your information

We sometimes share your personal information:

• with third parties who work with our practice for business purposes, such as accreditation agencies or information technology providers. These third parties are required to comply with the Australian Privacy Principles and this policy
• with other healthcare providers involved in your care
• when it is required or authorised by law (for example, court subpoenas)
• when it is necessary to lessen or prevent a serious threat to a patient's life, health or safety, or to public health or safety, or it is impractical to obtain the patient's consent
• to assist in locating a missing person
• to establish, exercise or defend an equitable claim
• for the purpose of confidential dispute resolution
• when there is a statutory requirement to share certain information (for example, some diseases require mandatory notification)
• during the course of providing medical services, through eTP, My Health Record and other secure electronic channels

Only people who need to access your information will be able to do so. Other than in the course of providing medical services or as described in this policy, we will not share your personal information with any third party without your consent. We will not share your information with anyone outside Australia unless you have consented or it is otherwise permitted by law. We will not use your personal information for marketing any of our goods or services directly to you without your express consent. You may opt out of direct marketing at any time by notifying us in writing.

Recalls, reminders and communication

We may contact you by phone, SMS, email or letter to remind you about appointments, follow-up of results, immunisations, screening and other health matters. If you would prefer not to receive reminders, or would like us to use a particular contact method, please let reception know. Please be aware that email and SMS are not always fully secure; we will take reasonable steps to protect your information when using them.

How we store and protect your information

Your personal information may be stored at our practice in various forms, including electronic records, visual records (X-rays, CT scans, photos) and audio recordings. We store all personal information securely, using password-protected electronic systems with restricted access, secure servers, and confidentiality agreements for staff and contractors. Records are kept for at least the period required by NSW law.

How you can access and correct your information

You have the right to request access to, and correction of, your personal information. Please make your request in writing to reception@legacyclinic.com.au or in person at the practice, and we will respond within a reasonable time, usually 30 days. A fee may apply for providing copies of records. If you are moving to another practice, a $30 fee applies for transferring your records and a transfer form is required.

We will take reasonable steps to correct your personal information where it is not accurate or up to date. From time to time we will ask you to confirm that your details are correct when you visit. You may also ask us to correct or update your information at any time by contacting reception.

Privacy concerns and complaints

We take complaints and concerns about privacy seriously. Please put your concern in writing to the Practice Manager at reception@legacyclinic.com.au, or by post to Suite 3, Level 1, 9 Railway Street, Chatswood NSW 2067. We will acknowledge your complaint and aim to resolve it within 30 days.

If you are not satisfied with our response, you can contact:

• the Office of the Australian Information Commissioner (OAIC) on 1300 363 992 or at www.oaic.gov.au
• the Information and Privacy Commission NSW on 1800 472 679 or at www.ipc.nsw.gov.au
• the Health Care Complaints Commission on 1800 043 159 or at www.hccc.nsw.gov.au

Our website

This website does not collect personal information unless you choose to contact us. Online appointments are booked through HotDoc, which has its own privacy policy.

Policy review

This policy is reviewed regularly to make sure it stays in line with any changes. Updates will be published on this page and are available from reception.