Highfields Medical Privacy Policy

Introduction

​

This privacy policy explains how Highfields Medical collects, uses, stores and shares your personal information (including your health information), and the circumstances in which it may be disclosed to third parties.

​

Why and when your consent is necessary

​

When you register as a patient of Highfields Medical, you provide consent for our Doctors and practice staff to access and use your personal information so we can provide you with the highest standard of healthcare. Only staff who require access to your personal information in order to perform their duties will be able to access it.

​

If we need to use your information for any purpose other than providing your healthcare or managing our practice, we will seek your additional consent.

​

Why do we collect, use, hold and share your personal information?

​

Highfields Medical collects your personal information so we can provide healthcare services to you.

​

Our primary purpose for collecting, using, holding and sharing your information is to manage your healthcare. We also use it for directly related business activities including:

​

• Financial claims and payments

• Practice audits

• Accreditation requirements

• Business operations and staff training

​

What personal information do we collect?

​

The information we collect may include:

​

• Name, date of birth, address and contact details

• Next of kin, emergency contacts and ethnicity

• Medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors

• Medicare number (where applicable) for identification and claiming purposes

• Healthcare identifiers

• Health fund details

​

Dealing with us anonymously

​

You have the right to deal with Highfields Medical anonymously or using a pseudonym where practical and where we are not required by law to identify you.

​

Please note that if you do not provide the requested personal information, we may be unable to provide healthcare services to you, or the care we provide may be incomplete or less effective.

​

How do we collect personal information?

​

We collect your personal information in a number of ways, including:

​

• When you book your first appointment and complete a registration form

• During the course of providing medical care

• Through My Health Record where applicable (including Shared Health Summaries and Event Summaries)

• When you visit our website

• When you contact us by phone or email

• When you make appointments online

​

In some circumstances we may collect information from other sources where it is not practical to collect it directly from you, including:

​

• Your guardian or responsible person

• Other healthcare providers such as specialists, hospitals, allied health professionals, pathology and diagnostic imaging providers

• Medicare, the Department of Veterans' Affairs or your health fund where required

​

Who do we share your personal information with?

​

Your personal information may be shared:

​

• With third parties who provide services to Highfields Medical, such as accreditation bodies and IT service providers. These providers are required to comply with Australian Privacy Principles (APPs).

• With your employer (where appropriate), government agencies, legal representatives or insurance companies where authorised or required.

• With other healthcare providers involved in your care.

• Where required or authorised by law (such as court subpoenas).

• Where necessary to prevent a serious threat to your life, health or safety, or to public health or safety.

• To assist in locating a missing person.

• To establish, exercise or defend a legal claim.

• During confidential dispute resolution processes.

• Where legislation requires certain information to be reported.

• Through My Health Record and Electronic Transfer of Prescriptions (eTP) where applicable.

​

Only people who need access to your health information will be able to do so.

​

If you choose to transfer your medical care to another doctor, we can provide a summary of your medical record. A written request and appropriate consent are required before records are released. A full copy of your medical record may require an administration fee or consultation.

We will not disclose your information outside Australia unless permitted by law or with your consent.

​

Highfields Medical will not use your personal information for direct marketing without your express consent. If you consent, you may opt out at any time by notifying us in writing.

​

We may send appointment reminders and recall notices. If you do not wish to receive these, please notify your Doctor in writing.

​

How do we store and protect your personal information?

​

Your personal information may be stored in paper and electronic records. Highfields Medical takes reasonable steps to ensure your information is stored securely.

​

Health records are retained:

​

• For adults: a minimum of 7 years from the last consultation.

• For patients under 18 years of age: until the patient reaches 25 years of age.

• ​

Records no longer required will be securely archived or destroyed in accordance with legislative requirements.

​

Accessing and correcting your personal information

​

You have the right to request access to and correction of your personal information.

​

Requests must be made in writing. Highfields Medical will respond within 30 days.

​

A reasonable administration fee or consultation fee may apply for copies of medical records. Medicare rebates do not apply to these fees.

​

We will take reasonable steps to correct any inaccurate or outdated information. Patients are encouraged to advise us of any changes to their personal details.

​

Privacy complaints

​

We take privacy concerns seriously.

​

If you have a privacy complaint, please write to:

​

Practice Manager

Highfields Medical

Suite 5 /2 Plaza Circle
Highfields, QLD 4352

(07) 4630 8800

​

We will investigate and attempt to resolve your complaint in accordance with our complaints procedure.

​

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

​

Website: https://www.oaic.gov.au

Phone: 1300 363 992

​

Privacy and our website

Highfields Medical takes reasonable steps to ensure our website is secure. However, the internet is not a secure medium, and users should be aware that information transmitted online may not always be secure.

Highfields Medical accepts no responsibility for any interference or damage to a user's computer system, software or data arising from use of this website.

​

Our website may contain links to external websites for your convenience. Once you leave our website, this Privacy Policy no longer applies. The opinions or information contained on external websites may not necessarily reflect those of Highfields Medical.

​

Policy review

​

This Privacy Policy is reviewed regularly to ensure compliance with current privacy legislation and best practice. Previous versions are archived or securely destroyed as appropriate.