Privacy Policy

Introduction

Wallarah Bay Medical Centre privacy policy is to provide information to you, our patient, on how your personal information (which includes your health information) is collected and used within our practice, and the circumstances in which we may share it with third parties.

Why and when your consent is necessary

When you register as a patient of our practice, you provide consent for our GPs and practice staff to access and use your personal information so they can provide you with the best possible healthcare. Only staff who need to see your personal information will have access to it. If we need to use your information for anything else, we will seek additional consent from you to do this.

Why do we collect, use, hold and share your personal information?

Our practice will need to collect your personal information to provide healthcare services to you. Our main purpose for collecting, using, holding and sharing your personal information is to manage your health. We also use it for directly related business activities, such as financial claims and payments, practice audits and accreditation, and business processes (eg Staff Training).

The Definition of a Patient Health Record

A patient health record is a compilation of pertinent facts of an individual health history. The primary purpose of a clinical health record is to hold the information about a patient that is required for effective care. Good patient information supports appropriate clinical decisions.

Patient Health record is Information, held about a patient, in paper form or electronic form, which may include:

• Contact and demographic information
• Medical history
• Notes on treatment
• Observations
• Correspondence
• Investigations
• Test results and photographs
• Prescription records
• Medication charts
• Insurance information
• Legal information

Consent and Authority to collect information

We collect personal information with your consent. You will be asked for consent in writing when you first register as a patient at the practice. Your consent is required to allow us to treat you and manage your health appropriately.

Collection of health information

We collect health information:

• Directly from you at your appointment
• During investigations and tests
• From letters from other medical practitioners
• From healthcare providers
• From an emergency contact or carer if you are unable to communicate with us

Use and Disclosure of Your Information

We will only use and disclose your personal information for the purpose for which it was collected or a directly related secondary purpose. We will not use or disclose your personal information for any other purpose unless:

• You have consented to the use or disclosure
• We are required to do so by law
• We believe in good faith that disclosure is necessary to prevent or lessen a serious threat to the health or safety of any person

Who do we share your information with?

We may share your information with:

• Healthcare providers involved in your care
• Medical specialists and allied health professionals you are referred to
• Hospitals and emergency departments
• Other general practices
• Pathology and imaging providers
• Organisations involved in payments and claims (Medicare, Private Health Funds, WorkCover)
• Our accountants and lawyers
• Government and regulatory bodies as required

Overseas Disclosure

We will not disclose your personal information overseas without your consent unless we are required to do so by law.

Data Security

We are committed to protecting your personal information. We maintain physical, electronic and procedural safeguards to protect the security and confidentiality of personal information. These safeguards include secure storage of records, password protection of electronic systems, and training of staff on privacy and confidentiality.

Access to Your Information

You have the right to access your personal information held by us. If you would like to access your medical records, please contact our practice. We will provide you with access as soon as reasonably practicable. We may charge a reasonable fee for providing access to your records.

Correction of Your Information

If you believe that personal information held by us is inaccurate, out of date, incomplete, irrelevant or misleading, you may request that we correct it. We will take reasonable steps to correct the information where reasonable.

Complaints

If you have a concern about how we handle your personal information, you can lodge a complaint with us. Please contact our Privacy Officer, Karen, to discuss your concerns. We will endeavour to resolve your complaint promptly.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

Privacy Officer Contact

Our Privacy Officer is Karen. For any privacy-related enquiries, please contact our practice:

• Phone: (02) 4394 0866
• Email:
• Address: 1-3 Hay Street, Gorokan NSW 2263

Review of this Policy

This privacy policy was last updated on 13th August 2026 and will be reviewed on 13th August 2027. We may update this policy at any time. We recommend that you review this policy regularly to stay informed about how we protect your personal information.