Throughout this policy, an individual that we use and disclose personal and health information about will be referred to as ‘you’ and ‘your’, including a patient, a patient’s carer, a patient’s dependant, a staff member or a contractor.
Statement of confinement
National Skin Repair Centres is committed to protecting your privacy and any personal information we collect. We comply with the Privacy Act 1988 (Cth). This policy explains how we collect, use, disclose and otherwise handle personal and sensitive information.
National Skin Repair Centres is committed to safeguarding personal privacy. We recognise that individuals have a right to control how their personal information is collected and used. Providing personal information is an act of trust and it is taken seriously. Unless given consent to do otherwise, we will only collect and use personal information as set out below.
For the purposes of this policy, personal information may mean some or all of the following: a patient’s name, contact details, date of birth, emergency contact details, bank account and/or credit card details, other identification details, payment history, treatment details, before and after photographs and other sensitive information.
Collecting personal information
National Skin Repair Centres will not collect or monitor any personal information about an individual without their consent. The only personal information collected is what is provided voluntarily by a patient or prospective patient.
National Skin Repair Centres collects personal and health information about individuals for the principle purpose of assisting patients manage their health and improving patient health outcomes generally (APP6).
When a treatment or product is purchased, personal information will be requested in order to provide the treatment or product, provide updated information, and advise of other treatments and products which may be of interest. You are not obligated to provide personal information, but failure to do so may result in us being unable to provide services or products to you.
You don’t need to identify yourself when you deal with us. However, in certain situations we will only deal with individuals who have identified themselves to us.
Collecting sensitive information
For the purposes of this policy, sensitive information means the information a patient has disclosed to us about their physical and mental health and well-being.
Use of tracking technologies
National Skin Repair Centres uses tracking technologies such as cookies to make use of the website and services as convenient as possible. Cookies are pieces of information that a website transfers to a computer’s hard disk for record-keeping purposes. Most web browsers are set to accept tracking technologies such as cookies. These tracking technologies do not themselves personally identify users, although they do identify a user’s browser. These tracking technologies allow us to monitor our website and record how people are using the site. It is possible to set the browser to refuse tracking technologies such as cookies, but this may limit the services provided by our website.
Using and disclosing your personal information
National Skin Repair Centres may disclose personal and health information to other health care providers in line with our principle purpose. Some information is collected as part of the necessary process of running a business in Australia (e.g. staff personal information collected in staff files).
We must take steps to ensure that the personal and health information that we use and disclose about you is accurate, up-to-date and complete (APP13). We will ask you repeatedly to supply the same personal information (APP10).
Personal information will be used for the following primary purpose:
National Skin Repair Centres may employ other companies or service providers to assist us in providing our services, including (but not limited to) marketing, market research, mail-house services, hosting and product development services, analysis of patient lists and/or consulting services. Third parties may have access to personal information needed to perform their specific function. They cannot use that information for other purposes.
As a health provider, we are required to use various government identifiers (APP9). For patients, these identifiers include Individual Healthcare Identifiers, Medicare card numbers, Department of Veterans Affairs file numbers, concession card details, and Safety Net Numbers. For staff, suppliers and contractors, these government identifiers include Tax File Numbers and Australian Business Numbers.
We may disclose personal information about you to various government departments and other entities for the purpose of billing those entities for the health services that we provide to you. We may also be required to disclose personal information to other government departments. For example, TFNs and ABNs are provided to the Australian Taxation Office as a normal part of doing business in Australia.
Patients can obtain an official pseudonym (APP2) in the form of an Individual Healthcare Identifier, by application to the Department of Health. We are required to identify patients either by Individual Healthcare Identifier or some other form of identification. We are required to identify staff and contractors for many reasons, including taxation purposes, and we will conduct police checks where appropriate.
Most of the information that we use or disclose will be provided by you or your carer (APP3 and APP5). Some personal and health information will be collected from other health care providers. There may be occasions where we are provided personal or health information that we did not request (APP4). On a case-by-case basis we will determine whether this becomes personal or health information that we use and disclose as per this policy, or whether this information is deleted.
We will not sell or otherwise use or disclose your personal or health information unless authorised by you, except where the use or disclosure is required by law or where the disclosure of your health information is reasonably required due to a permitted health situation. We may charge these other entities for our intellectual property (the health information collected by us, and the clinical management, thoughts and processes associated with that health information).
Cross-border disclosure of personal information
We will not disclose any personal or health information to any overseas entity (APP8). Information kept by National Skin Repair Centres is stored securely. All access to information is protected by individual usernames and passwords (APP11).
Contact by National Skin Repair Centres
National Skin Repair Centres does not send advertising information without obtaining prior consent. If an individual receives communications from National Skin Repair Centres which they do not wish to receive, they may remove their name from the marketing database by contacting us via the contact page on the website.
We may send a copy of a regular newsletter to your email address or your home address. We may write to you at your home address or contact you via telephone or SMS to remind you of appointments or to contact you about some results, or to suggest preventative health options (APP7).
In the case of staff and contractors, we may contact you in the normal process of running our business.
Individuals’ right of access
Information may be reviewed by submitting a written request for such access. Individuals have the right to review personal and/or sensitive information that may be recorded on the National Skin Repair Centres database. This will take the form of you sitting with a doctor or practice manager and viewing information held by us. You may elect to bring someone with you. This does not mean that a copy of the information that we hold about you will be automatically provided to you or your lawyer or your insurance company.
If you request in writing for information about you to be disclosed to third parties, we may elect to do that, and we may charge the third party for this information.
Excluding children, we are unable to provide information about any patient to their immediate family without prior written consent. We will use / disclose information about child patients to their parents / guardians, except where a child is determined to be a ‘mature minor’ by the doctor, and then that ‘mature minor’ requests that their personal health information be kept from their parents.
A request may be made to delete or amend personal and/or sensitive information, and all reasonable steps to delete the information will be made, except where it is required for legal reasons, which includes but is not limited to the proper maintenance of medical and health records. Deletion or amendment of information may result in us being unable to sell products directly and/or provide services including after sales services (APP12).
If we hold personal or health information about you that is incorrect, we will take reasonable steps to correct this information. If there is any contentious information, especially health information, both the information that we have collected and your version of that same information will be kept. Please contact us if we hold inaccurate information, and we will discuss it. Often, inaccurate information is easily updated.
Storage and security of personal and or sensitive information
National Skin Repair Centres takes all reasonable steps to keep secure personal information recorded and to keep this information accurate and up to date. Personal information is stored on secure servers if in digital format or in locked areas if in hardcopy format: these are protected in controlled facilities. National Skin Repair Centres employees and data processors are obliged to respect the confidentiality of any personal and/or sensitive information held by us. We only permit authorised personnel to access your information and information will only be disclosed to third parties where they have the appropriate authority. We destroy or de-identify personal information we no longer need, or we are no longer required by law to keep, wherever possible.
National Skin Repair Centres and links to other websites
National Skin Repair Centres provides links to websites outside of our site. These sites are not under our control, and we are not responsible for the conduct of companies linked to the website, or for the performance or otherwise of any content and/or software contained in such external websites.
Problems, queries or complaints
If you are not satisfied with the result, you can refer your complaint to:
Office of the Australian Information Commissioner
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001
Online Form: www.oaic.gov.au