Kurralta Park Surgery Privacy Policy

Introduction

This privacy policy provides information on how your personal information (including your health information) is collected and used within our practice, and the circumstances in which we may share it with third parties.

01. Why and When Your Consent is Necessary

When you register as a patient, you provide consent for GPs and staff to access and use your personal information to deliver healthcare. Only team members involved in your care access your information. For uses beyond healthcare provision, we will obtain your additional consent.

02. Why We Collect, Use, Hold, and Share Your Information

We collect your information to manage your healthcare safely and effectively. This includes medical services, records management, billing, and quality improvements like audits, training, and accreditation.

03. What Personal Information We Collect

• Names, date of birth, address, and contact details
• Medical history, medications, allergies, immunisations, social and family history, risk factors
• Medicare number (if available), healthcare identifiers, and health fund details

04. Dealing with Us Anonymously

You may remain anonymous or use a pseudonym unless impractical or legally prohibited.

05. How We Collect Your Personal Information

We collect information during registration, via website, email, calls, social media, or online booking. Additional data may be collected during consultations or from:

• Your guardian/responsible person
• Other healthcare providers and diagnostic services
• Health funds, Medicare, DVA, or insurers

While providing care, we may also collect information through:

• Electronic prescribing, My Health Record, or online appointments

Images collected may include:

• CCTV footage: for safety and security
• Medical images: captured via personal devices for care purposes

06. Sharing Your Information

• With third parties like accreditation agencies and IT providers
• With healthcare providers for referrals
• When legally required or in emergencies
• To locate missing persons or manage legal claims
• For My Health Record (e.g. Shared Health or Event Summary)

We do not share your data outside Australia unless legally permitted and with your consent.

07. Use of Information for Marketing

We will not use your information for marketing without your explicit consent. You can opt-out at any time.

08. Improving Services

We may use your data to improve services via research and training. We may share de-identified data for health outcomes improvement. Let us know if you prefer to opt-out.

09. Document Automation Technologies

We use secure systems to automate documents like referrals. Only relevant information is included. Access is restricted to authorised users. Our systems comply with privacy legislation and RACGP standards. See:

RACGP Privacy Guidelines
.

10. Use of AI Scribes

We use AI scribes to assist GPs by recording and transcribing consultations:

• Audio files are stored/destroyed after transcription
• Identifying information is retained/removed based on system design
• Data is used only for providing care

11. Storage and Security of Information

Personal information is securely stored in electronic or physical formats, and protected in accordance with best practices.

12. Access and Correction of Your Information

Patients can request access to or correction of their information via written request, email, or HotDoc. We regularly verify and update your records.

13. Complaints

Please raise privacy concerns in writing. We will address them promptly. If unresolved, you may contact the Office of the Australian Information Commissioner at
www.oaic.gov.au or call 1300 363 992.

14. Website Privacy

Your online interactions via our website, email, or social media are secure and confidential. Our site may use analytics and cookies.