Privacy Policy
- Introduction
This privacy policy is to provide information to our patient’s, on how your personal information is collected and used within our practice, and the circumstances in which we may share it with third parties.
- Company statement
TFG Medical PTY LTD (ABN 95 6023 97624) (“My Medical and Dental Centre”) is subject to the Privacy Act 1988 (Cth) (as from 21 December 2001). My Medical and Dental Centre is also subject to similar State legislation operating in some States and Territories of Australia. This document sets out My Medical and Dental Centre’s privacy policy.
By attending this medical centre, you consent to your personal information being collected, stored and used in accordance with this Privacy policy.
- Health service providers are independent
My Medical and Dental Centre is in the business of providing exceptional clinical care for all those who require general practice and dental services. In conducting its business My Medical and Dental Centre makes its premises available to health service providers.
The health service providers and My Medical and Dental Centre are not partners and are not in an employee-employer relationship and therefore each health service provider, in providing health services and doing other things, is at all times an independent medical consultant and not doing so as the servant or agent or otherwise on behalf of My Medical and Dental Centre.
- Patient records
All patient records are the property of My Medical and Dental Centre (and not the property of either the patient or the health service provider).
This requirement assists other health service providers in the medical centre in continuing the management of a patient’s needs and healthcare.
- Why and when your consent is necessary
When you register as a patient of our practice, you provide consent for our GPs and practice staff to access and use your personal information so they can provide you with the best possible healthcare. Only staff who need to see your personal information will have access to it. If we need to use your information for anything else, we will seek additional consent from you to do this.
- What type of personal information is collected and
The information we collect about you includes:
- names, date of birth, addresses, contact details
- contact details for your next of kin and emergency contact person
- medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors
- Medicare number (where available) for identification and claiming purposes
- details of concessional health entitlements (where applicable) for identification and claiming purposes
- healthcare identifiers
- private health insurance fund details.
- How is it collected?
Commonly, this is collected by the administrative staff of the practice.
Other personal information, particularly health information, is collected by the independent health service providers in a medical centre and recorded on the patient records that belong to My Medical and Dental Centre.
Sometimes health information is received, and placed on those patient records, from health service providers who are external to the medical centre. Examples of this are records of specialists or pathology reports.
- Purposes of having your personal information
The importance of health service providers sharing personal information about a patient, during the provision of health services to that patient, is widely accepted by the community. Under this approach health service providers share necessary information to deliver optimum patient care. The use and disclosure of personal information is already bound by codes of practice of their professions e.g. health service providers.
My Medical and Dental Centre’s purpose in holding your personal information (including health information) is:
- Provision of health services to you
- to enable that information to be available to those health service providers (whether in the medical centre or external to it) who need access to the information in order for such health service providers to provide health services to you; and
- Administration
- to enable My Medical and Dental Centre to charge, bill and collect fees, on behalf of health service providers, in respect of the health services those health service providers provide you; and
- to enable My Medical and Dental Centre to charge, bill and collect fees from health service providers in respect of the non-health services My Medical and Dental Centre provides to those health service providers; and
- to enable My Medical and Dental Centre to gain an understanding of the types of health services, in general, that are needed by patients at large so that the health services available at a medical centre keep meeting patient needs; and
- to enable My Medical and Dental Centre to implement management functions in respect of the medical centre, including service-monitoring, quality assurance activities, complaint handling, planning, evaluation and accreditation activities.
- Regulatory purposes
- to fulfil all legal and other regulatory requirements of My Medical and Dental Centre, including disclosure to a court or similar body, lawyers or insurers, where court or similar proceedings are on foot or anticipated ; and
- to hold patient records available for health service providers where they are required to maintain such records under legal and other regulatory requirements.
- Supplying bulk de-identified health information
- to enable My Medical and Dental Centre to provide third parties with a quantity of de-identified health information.
- Before any health information is provided to a third party it is de-identified, that is, the name and address of the patient and any other information that could otherwise allow an individual to be identified, is removed from the health information.
- How do we store and protect your personal information?
Your personal information may be stored at our practice in various forms. These may include, but not limited to:
- paper records
- electronic records,
- as visual i.e. X-rays, CT scans, MRIs, videos and photos records
My Medical and Dental Centre stores all personal information securely. For records in an electronic format, the information is protected by electronic information systems requiring passwords, and for paper records they are stored in a secured environment, with restricted access.
- Furthermore, all staff and health service providers sign confidentiality agreements, which clearly outline the protection measures in place for patient information, as well as code of conduct statements for their actions and behaviours.
- Disclosure of personal information
My Medical and Dental Centre will not disclose your personal information to any third party, except in the following circumstances:
- it is for the purpose of provision of health services to you, as described above; or
- it is for a regulatory purpose described above; or
- it is part of bulk de-identified health information, as described above; or
- it is otherwise required by law.
- Sharing personal information
We sometimes share your personal information:
- with third parties who work with our practice for business purposes, such as accreditation agencies or information technology providers – these third parties are required to comply with Australian Privacy Principles and this policy
- with other healthcare providers
- when it is required or authorised by law (e.g. court subpoenas)
- when it is necessary to lessen or prevent a serious threat to a patient’s life, health or safety or public health or safety, or it is impractical to obtain the patient’s consent
- to assist in locating a missing person
- to establish, exercise or defend an equitable claim
- for the purpose of confidential dispute resolution process
- when there is a statutory requirement to share certain personal information (e.g. some diseases require mandatory notification)
- during the course of providing medical services, through our participation in eHealth services i.e. Electronic Transfer of Prescriptions (eTP), MyHealth Record system (formerly known as PCEHR) e.g. via shared health summary, event summary.
We will not share your personal information with anyone outside Australia (unless under exceptional circumstances that are permitted by law) without your consent.
Our practice will not use your personal information for marketing any of our goods or services directly to you without your express consent. If you do consent, you may opt-out of direct marketing at any time by notifying our practice in writing.
- How can you access your personal information?
As a patient of My Medical and Dental Centre, you have the right to request access to your personal information held by the practice, except in circumstances where access may be denied under the Privacy Act or other law.
Examples of these circumstances include:
- where providing access will pose an unreasonable impact on the privacy of another individual; or
- where your request for access is frivolous or vexatious; or
- where the information relates to existing or anticipated legal proceedings between My Medical and Dental Centre and you, and the information would not be accessible by the process of discovery in those legal proceedings; or
- where providing access would be unlawful, would pose a threat to the life or health of an individual, may prejudice an investigation of possible unlawful activity, may prejudice enforcement of laws, or denying access is specifically authorised by law.
To make a request for your personal information, please contact the Privacy Officer of My Medical and Dental Centre in writing.
My Medical and Dental Centre will endeavour to acknowledge a request for access to personal information within 14 days and provide the information requested within 30 days.
If personal information is provided to you as the result of a request, you will be charged a fee for costs incurred in providing that information such as photocopying, the administration time involved in processing your request, and postage.
If access is denied, My Medical and Dental Centre will provide you with reasons for its decision.
- How can you correct your personal information?
Our practice aims to ensure that your personal information is accurate and up-to-date. Upon arrival at the practice, each visit our reception staff will ask you to verify the personal information held by the practice is correct.
Alternatively, if you believe that the personal information we hold about you is not accurate, complete or up-to-date, please notify as soon as possible. Provided My Medical and Dental Centre agrees with you, My Medical and Dental Centre will correct it.
In the case of health information, you allege is incorrect, My Medical and Dental Centre will consult relevant health service providers about the matter. Furthermore, if My Medical and Dental Centre does not agree with you, the practice will place a statement of what you allege is correct, where that information is kept and accessed.
- Privacy and electronic communications
To ensure the security of your information and privacy, all documents emailed from My Medical & Dental Centre will be password protected.
- Website cookies
The practice does not collect any specific personal information via our website, or social media channels, however cookies may be used by your website browser.
A “cookie” is a small file sent from a web server to your computer whenever you visit a website.
Some cookies are strictly necessary in order to enable you to move around the website and use its features e.g. online bookings. However, other cookies help to improve the performance of the practice, providing a better user experience, as well as improved programs and services to you.
Cookies cannot contain viruses nor install spyware or malware on your computer.
- Electronic access
This policy is available to view on our website, in addition to the physical copies available in the practice. It may also be published on our social media channels intermittently.
- Dealing with us anonymously
You have the right to deal with us anonymously or under a pseudonym unless it is impracticable for us to do so or unless we are required or authorised by law to only deal with identified individuals.
- Lodging a privacy related complaint
My Medical and Dental Centre take complaints and concerns regarding privacy seriously. You should express any privacy concerns you may have in writing. We will then attempt to resolve it in accordance with our resolution procedure.
Alternatively, you may also contact the following government agencies:
- the Office of the Health Ombudsman – for further information visit www.oho.qld.gov.au or call 133 646.
- the Office of the Australian Information Commissioner – for further information visit www.oaic.gov.au or call 1300 336 002.
- How to contact us
To request a copy of your information, or if you have any queries or complaints with regard to our collection, use or management of your personal information, please contact the practice in writing.
In person | Privacy Officer (Practice Manager) – My Medical and Dental Centre Shop 223 – Next to Aust. Post) Orion Springfield Shopping Centre 1 Main Street, Corinda Qld 4075 |
By email | Attention: Privacy Officer (Practice Manager) springfieldorion@mymedicaldental.com.au |
- Currency of this privacy policy
This privacy policy will be reviewed regularly to ensure it is in accordance with any changes that may occur.
My Medical and Dental Centre reserves the right to change this Privacy policy at any time. The varied policy terms will be made available to all patients at the reception counter of the medical centre. They will apply to each patient from the date that patient next visits the medical centre after the new policy was made available. You accept that by doing this, My Medical and Dental Centre has provided you with sufficient notice of the variation and agree you will be provided with no separate notification.
This privacy policy was created on 1 May 2017 and has been reviewed on 19 October 2022.