Privacy Policy

Purpose

At Lawnton Medical Centre, we are committed to protecting your privacy and maintaining the confidentiality and security of your personal information. In this Privacy Policy, ‘we’, ‘us’ and ‘our’ refer to Lawnton Medical Centre, and ‘you’ and ‘your’ refer to the individuals whose personal information we handle. It outlines how we collect, use, and safeguard your data in accordance with the Privacy Act 1988 (Cth), the Privacy Amendment (Enhancing Privacy Protection) Act 2012, and the Australian Privacy Principles. Updates to this policy will be made as necessary and communicated through our website and practice.

Collection of personal information

We gather personal information to provide you with comprehensive healthcare services, and the information we collect may include:

• Personal details. Name, date of birth, address, and contact information.
• Health information. Medical history, medications, allergies, immunisations, and family health history.
• Identifiers. Medicare number and healthcare identifiers.
• Next of kin and attorney. Emergency contact details, relationship to the patient, consent for communication preferences, and details of any power of attorney or other authority to act on the patient’s behalf.

Where a patient is a child or is otherwise unable to provide consent, we may seek consent from their parent, guardian or other authorised representative, as required by applicable privacy laws.

Information may be collected through various means, including:

• Registration. Personal information is collected during your first appointment.
• Healthcare services. Additional information may be gathered during consultations or through electronic health records or communication, including My Health Record, where applicable.
• Third parties. Where appropriate and permitted by law, we may obtain information from other healthcare providers, your authorised representatives, your emergency contacts or other relevant third parties.

Use of personal information

Your personal information is primarily used for:

• Delivering quality healthcare services, including assessing, diagnosing, treating, and managing your health and maintaining your medical records.
• Managing appointments, referrals, billing processes, and other administrative processes associated with your care.
• Conducting practice audits and ensuring compliance with health regulations.
• Enhancing the quality of our services through research and data analysis, using de-identified data where appropriate.

Disclosure of personal information

Your personal information will not be shared with third parties without your explicit consent, except in specific circumstances, such as:

• Legal obligations or requirements. Where disclosure is required or authorised by law, including in response to court orders or other legal requirements.
• Serious health or safety risk. Where disclosure is reasonably necessary to lessen or prevent a serious risk to the health or safety of an individual, or to public health or safety.
• Medicare or health funds. Necessary disclosures to Medicare or health funds for claims, rebates, billing and payment purposes.
• Other healthcare providers. Communication with other healthcare providers involved in your care, including specialists, allied health professionals, pathology and diagnostic imaging providers, where necessary to provide or coordinate your healthcare.

Access and correction of information

You have the right to access your personal records and request corrections. Requests for access should be made in writing to our Practice Manager. We will endeavour to respond to your request within a reasonable timeframe, typically within 30 days. If we decline your request for access or correction, we will provide you with written reasons for our decision. There may be a fee associated with retrieving your records.

Security of information

We implement robust measures to secure your information from misuse, loss, unauthorised access, modification or disclosure, including:

• Physical security. Maintaining appropriate security measures for our premises and storage areas where personal information is stored.
• Electronic security. Using password protection, restricted access and other appropriate safeguards to protect electronic records.
• Secure destruction. Securely destroying personal information for outdated or unnecessary information, utilising certified services where appropriate.

Complaints and enquiries

If you have any concerns regarding your privacy or wish to make a complaint, please contact our Practice Manager at:

• Address: 5/718 Gympie Road, Lawnton, QLD 4501
• Email: reception@lawntonmedicalcentre.com.au
• Phone: 07 3205 6094

Alternatively, you may reach out to the Office of the Australian Information Commissioner (OAIC) for further guidance.

Anonymity and pseudonyms

You have the right to interact with us anonymously or under a pseudonym unless it is impractical or legally required to identify yourself.

Review of policy

We will regularly review this privacy policy to ensure compliance with legal requirements and best practices. Any updates will be made available on our website and at our practice.

This policy is intended to ensure that patients at Lawnton Medical Centre are informed about how their personal information is collected, used, disclosed and protected, in accordance with applicable privacy laws and regulations.