Jubi Clinic Privacy Policy
Last Updated: 01.10.2024
Introduction
Personal information is any information that identifies you and all personal information collected in the course of providing a health service is considered health information under the Privacy Act 1988 (Cth) (Privacy Act). Health information is ‘sensitive information’ under the Privacy Act, which means that stricter requirements apply when handling such information. Jubi Clinic is committed to ensuring the confidentiality privacy and security of your personal and health information in accordance with all privacy laws, which includes, the Privacy Act, the Australian Privacy Principles (APPs), the Health Privacy Principles pursuant to the Health Records and Information Privacy Act 2002 (NSW) and such other privacy principles or legislative requirements relevant to the privacy of the personal and health information collected and stored by Jubi Clinic as may exist from time to time.
This Privacy Policy outlines the practices we follow when collecting, using, disclosing, and protecting your personal and health information. By using Jubi Clinic’s services or otherwise providing us with any personal and health information, you consent to our collection, use, holding and disclosure of such information outlined in this Privacy Policy.
1. Why we collect personal and health information
Jubi Clinic collects personal and health information from you for the primary purpose of providing you with medical treatment.
Other reasons we collect personal and health information are to:
(a) to improve our service to you;
(b) to comply with our legal obligations;
(c) for administrative purposes to manage our business/practice;
(d) comply with our reporting and other obligations (as the case may be) to third party collaborators or facilities; and
(e) enable us to send correspondence and reports to and from our clinical desktop system to other healthcare providers.
2. How we collect this Information
Personal and health information is generally collected:
(a) when you complete the registration form online;
(b) during a consultation and in the course of providing you with medical treatment;
(c) when you send us an email;
(d) over the telephone;
(e) from a parent or guardian if you are under the age of 18;
(f) from other healthcare providers such as specialists, allied health professionals, hospitals, and community health services; or
(g) from other third parties on receipt of consent from you to do so or where it is not reasonable or practical for us to collect this information directly from you (for example, with respect to a patient, your life is at risk and we need to provide you with emergency treatment).
2.1 Privacy on the internet
Jubi Clinic may use websites to collect personal and health information from you. Your personal and health information will be kept confidential and secure at all times.
2.1.1 Cookies
These are text files stored on a person’s computer when they visit a website. Their sole purpose is to identify users and possibly prepare customised web pages or to save site login information.
Jubi Clinic may use cookies on our websites. Cookies can be purged from your browser after every use. This is generally a very simple procedure. Please refer to your browser’s help file for more information. Although Jubi Clinic strives to ensure your security, no data transmission over the internet can be guaranteed to be completely secure.
2.1.2 Links to third party websites
Jubi Clinic may provide links on our web pages to external parties. The content and views expressed on these third party websites are not the responsibility of Jubi Clinic. Further, these third party websites are not subject to our privacy standards, policies and procedures. You will need to contact or review those websites directly to ascertain their privacy standards, policies and procedures.
3. What personal and health information we collect and store
The personal and health information generally collected includes:
(a) your name, address, date of birth, email and contact details;
(b) notes of your symptoms or diagnosis and the treatment given to you;
(c) family medical history and their details;
(d) specialist reports and test results;
(e) appointment and billing details;
(f) prescriptions and other pharmaceutical purchases;
(g) your healthcare identifier;
(h) other personal information (such as information about your gender, race, sexuality or religion), collected for the purpose of providing our health service.
4. Disclosure of personal and health information
There may be cases where Jubi Clinic will need to disclose your personal and health information to third parties. This may include:
(a) disclosure to others involved in your treatment, including treating doctors and specialists outside Jubi Clinic;
(b) legal-related disclosure as required by a court of law;
(c) to comply with any legislative or regulatory requirements.
4.1 How we hold your personal and health information
Your hard copy and electronic records are stored in secure buildings and internal information systems.
4.1.1 Protecting personal and health information
Some security measures we take to protect your personal and health information include:
(a) firewalls and access logging tools that protect against unauthorised access to your data and our network;
(b) secure work environments and workflow systems that prevent unauthorised access and copying of your personal information;
(c) secure server and closed network environments;
(d) encryption of data;
(e) virus scanning tools;
(f) staff training; and
(g) management of access privileges, to ensure that only those who really need it can see your personal information.
Jubi Clinic will take reasonable steps to destroy or de-identify the personal information we hold once it is no longer needed for any purpose for which it may be used or disclosed.
5. Access to personal and health information
Generally, if you have provided personal and health information to Jubi Clinic you are able to access that information at any time subject to limited exceptions or required by law. The following factors will be considered:
(a) the information is related to a commercially sensitive decision making process;
(b) access would be unlawful;
(c) denying access is required or authorised by or under law;
(d) providing access would be likely to prejudice an investigation of possible unlawful activity;
(e) if your request is frivolous or vexatious; and
(f) if providing access would have an unreasonable impact on the privacy of others.
To access the information, you will need to contact the Privacy Officer as detailed in this policy.
You may be charged a small fee applicable to the collection and provision of your personal and health information but will be notified of this fee prior to processing their request. Jubi Clinic’s Privacy Officer will be able to advise you how long it will take to provide the information. Generally, you will receive the requested information within 14 days of the request. If you believe that the personal and health information we hold about you is incorrect, you have a right to request the information be corrected. Where we are unable to provide you with the information you have requested or correct your information, we will inform you and explain the reasons why.
6. Anonymity and pseudonymity
You may remain anonymous or use a pseudonym when dealing with us. However, it may not be possible for us to assist you with your request if you wish to use a pseudonym or remain anonymous.
7. Data Breach Response
Should any unforeseeable event occur which results in the loss, or unauthorised access or disclosure of your personal and health information, Jubi Clinic has processes and mechanisms in place to contain any breach, determine any impact and comply with any applicable notification laws. In the event that it is likely to result in serious harm to you, we will investigate the matter and aunotify you and the Office of the Australian Information. Commissioner pursuant to our obligations under the Privacy Act.
8. Complaints
Jubi Clinic has a Privacy Officer to handle any queries or issues related to privacy. We take your privacy seriously and any complaints you may have should be made in writing to Jubi Clinic’s Privacy Officer by emailing clinicalcompliance@jubiclinic.com.au and will be addressed through our complaints handling process. All complaints will be given fair consideration and we will aim to resolve them within 30 days of receipt of your complaint. Where it is found that we are unable to finalise the investigation of your complaint within 30 days, we will contact you to request an extension. If you believe you did not receive a satisfactory resolution to your concern, you may contact the Office of the Australian Information Commissioner (OAIC). You are able to do so by:
(a) Visiting www.oaic.gov.au and submitting an online form;
(b) Obtaining a hard copy form at www.oaic.gov.au/about-us/contact-us-page;
(c) Phone: 1300 363 992;
(d) Fax: 02 9284 9666; or
(e) Email: enquiries@oaic.gov.au.
The OAIC is also available via social media outlets. Please refer to the ‘contact us’ page via the website above.
Jubi Clinic reviews its policies, statements and procedures to keep up-to-date with changes in the law, technology and market practice. As a result, we may update and change this Privacy Policy from time to time. Please check this Privacy Policy from time to time so you are aware of any changes or updates to the Privacy Policy.