Privacy

​

This Privacy Policy explains how we collect, use and disclose your personal information, how you may access that information and how you may seek the correction of any information. It also explains how you may make a complaint about a breach of privacy legislation.

We take our commitment to securing patient privacy very seriously. Each physician and employee associated with the Practice is responsible for the personal information under his/her control. Our employees are informed about the importance of privacy and receive information periodically to update them about our Privacy Policy and related issues.

1.1       Purpose and objectives

We ask you for information to establish a relationship and serve your medical needs. We obtain most of our information about you directly from you, or from other health practitioners whom you have seen and authorized to disclose to us. You are entitled to know how we use your information, and this is described in our posted Privacy Statements. We will limit the information we collect to what we need for those purposes, and we will use it only for those purposes. We will obtain your consent if we wish to use your information for any other purpose.

2        Scope

Our Privacy Policy attests to our commitment to privacy and demonstrates the ways we ensure that patient privacy is protected. Our Privacy Policy applies to the personal health information of all our patients that is in our possession and control.

3        Definitions

Personal health information means identifying information about an individual relating to their physical or mental health (including medical history), the providing of health care to the individual, payments or eligibility for health care, organ and tissue donation and health number.

4        Policy Content

We collect information that is necessary and relevant to provide you with medical care and treatment, and manage our medical practice. This information may include your name, address, date of birth, gender, health information, family history, credit card, direct debit details, and contact details. This information may be stored on our computer medical records system and/or in handwritten medical records.

Wherever practicable we will only collect information from you personally. However, we may also need to collect information from other sources such as treating specialists, radiologists, pathologists, hospitals, other health care providers, and the Myhealth record system.

We collect information in various ways, such as our CannaBot, or in writing, over the internet if you transact with us online. This information may be collected by medical and non-medical staff.

In emergency situations, we may also need to collect information from your relatives or friends. We may be required by law to retain medical records for certain periods of time depending on your age at the time we provide services.

6        Dealing with us anonymously

You have the right to deal with us anonymously or under a pseudonym, unless it is impracticable for us to do so or unless we are required or authorised by law to only deal with identified individuals.

7        Policy Review Statement

This Privacy Policy is current from 01.01.2021 and is reviewed annually. From time to time we may make changes to our policy, processes, and systems in relation to how we handle your personal information. We will update this Privacy Policy to reflect any changes. Those changes will be available on our website and in the practice.

8        Use and Disclosure

We will treat your personal information as strictly private and confidential. We will only use or disclose it for purposes directly related to your care and treatment, or in ways that you would reasonably expect that we may use it for your ongoing care and treatment. For example, the disclosure of blood test results to your specialist or requests for x-rays.

There are circumstances where we may be permitted or required by law to disclose your personal information to third parties. For example, to Medicare, Police, insurers, solicitors, government regulatory bodies, tribunals, courts of law, hospitals, debt collection agents, the electronic transfer of prescriptions service or to the Myhealth record system. We may also from time to time provide statistical data to third parties for research purposes. We may disclose information about you to outside contractors, including parties outside of Australia, to carry out activities on our behalf such as and without limitation, an IT service provider, solicitor or debt collection agent. We impose security and confidentiality requirements on how they handle your personal information. Outside contractors are required not to use information about you for any purpose except for those activities we have asked them to perform. By providing us with personal information you consent to the disclosure of this personal information to these parties, including those parties who reside outside of Australia.

9       Data Quality and Security

We will take reasonable steps to ensure that your personal information is accurate, compete, up to date and relevant. For this purpose, our staff may ask you to confirm that your contact details are correct when you attend a consultation. We request that you let us know if any of the information we hold about you is incorrect or out of date.

Personal information that we hold is protected by:

• Securing our premises;

• Placing passwords and varying access levels on databases to limit access and protect electronic information from unauthorised interference, access, modification and disclosure; and

• Providing locked cabinets and rooms for the storage of physical records.

10       Access and Correction

With limited exceptions, we will give you access to the information we retain about you within a reasonable time, upon presentation of a written request and satisfactory identification. We may charge you a fee for this service and if so, we will give you notice in advance of processing your request.

If you find errors of fact in your personal health information, please notify us as soon as possible and we will make the appropriate corrections. We are not required to correct information relating to clinical observations or opinions made in good faith. You have a right to append a short statement of disagreement to your record if we refuse to make a requested change.

If we deny your request for access to your personal information, we will advise you in writing of the reason for the refusal and you may then challenge our decision.

11        Complaints

If you have a complaint about the privacy of your personal information (including complaints about our use of the Myhealth record system), we request that you contact us in writing. Upon receipt of a complaint we will consider the details and attempt to resolve it in accordance with our complaints handling procedures.

If you are dissatisfied with our handling of a complaint or the outcome you may make an application to the Australian Information Commissioner or the Privacy Commissioner in your State or Territory.

12     Overseas Transfer of Data

We use cloud computing providers and cloud computing services such as web-hosting servers, storage servers, databases, networking, software and analytics to operate our business and provide services to you. These providers often have data centres that are located outside of Australia and personal information that you provide to us is stored there.

By providing us with personal information you consent to the storage of this data with these providers. You also acknowledge that we cannot be held liable if one of these providers mishandles your personal information as we cannot guarantee these providers will comply with Australian privacy law.

13     Challenging Compliance

We encourage you to contact us with any questions or concerns you might have about your privacy or our Privacy Policy. We will investigate and respond to your concerns about any aspect of our handling of your information. In most cases, an issue is resolved simply by telling us about it and discussing it. You can reach us at info@cannascripts.com.au

If, after contacting us, you feel that your concerns have not been addressed to your satisfaction, you have the right to complain to the Office of the Australian

Information Commissioner:

Office of the Australian Information Commissioner
Level 3, 175 Pitt Street
Sydney NSW 2000