Privacy Policy

Our Commitment to Your Privacy

My Integrated Health is committed to providing quality services to you. This policy outlines our ongoing obligations to you in respect of how we manage your Personal Information.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act), as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information.

A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner (OAIC) at: https://www.oaic.gov.au/

What is Personal Information and Why Do We Collect It?

Personal Information is information or an opinion that identifies an individual. We collect your Personal Information for the primary purpose of providing our services to you. This information allows our practitioners to properly assess, diagnose, treat and be proactive in your health care needs, and to contact you in regard to your appointments and care.

We also use Personal Information for business purposes directly related to the primary purpose, such as administrative and billing purposes, practice audits and business processes including staff training. We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure.

You may unsubscribe from our mailing/marketing lists at any time by contacting us in writing or the unsubscribe feature.

When we collect Personal Information we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it.

What Type of Personal Information Is Collected?

The type of Personal Information collected and held by My Integrated Health about you includes:

  • Your name, address, date of birth, email and contact details
  • Medicare number, DVA number and other government identifiers (not used as a primary identifier within our practice)
  • Information concerning your current health and past medical history
  • Notes of your symptoms, diagnosis and treatment
  • Specialist reports and test results
  • Appointment and billing details
  • Prescriptions and other pharmaceutical information
  • Your Individual Healthcare Identifier (IHI)
  • Information about your race, sexuality or religion, where collected in the course of providing a health service

We will generally collect Personal Information from you directly. This might be via:

  • A face-to-face discussion, telephone conversation, registration form, online form or email
  • From a person responsible for you
  • From third parties where the Privacy Act or other law permits — this may include other members of your treating team, diagnostic centres, specialists, hospitals, the My Health Record system, electronic prescription services, Medicare, your health insurer, and the Pharmaceutical Benefits Scheme

Sensitive Information

Sensitive information is defined in the Privacy Act to include information or opinion about an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive information will only be used by us:

  • For the primary purpose for which it was obtained
  • For a secondary purpose that is directly related to the primary purpose
  • With your consent; or where required or authorised by law

Confidentiality, Security and Accuracy

All staff and practitioners at My Integrated Health are obliged to maintain the confidentiality of the information you provide and to ensure that Personal Information is not disclosed unnecessarily or irresponsibly.

Due to the sensitive nature of the information you provide, precautions are taken to safeguard and secure the information we collect. Your information will be stored electronically with password protection to restrict unauthorised access, and regular data backups are performed.

All patient files are the property of My Integrated Health. All practitioners and administrative staff have access to your records only for the purposes specified in this policy. Administrative staff will limit their access to your personal health information to the minimum necessary to perform their duties.

How Do We Hold Your Personal Information?

Our staff are trained and required to respect and protect your privacy. We take reasonable steps to protect information held from misuse, loss, and unauthorised access, modification or disclosure. This includes:

  • Holding your information on Zedmed, our clinical practice management software. All computers are password protected.
  • Scanning all paperwork, which is then securely destroyed via a shredding service.
  • Requiring all staff to sign confidentiality agreements.
  • Implementing technical and organisational measures to protect personal information, consistent with our obligations under the Privacy Act.

Third Parties

Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we may be provided with information by third parties. In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party.

Disclosure of Personal Information

There are situations in which we will sometimes need to share your personal information with third parties:

  • When communicating with other healthcare providers involved in your care
  • When required by law
  • When necessary to lessen or prevent a serious threat to a patient’s life, health or safety, or public health or safety, or when it is impractical to obtain the patient’s consent
  • To assist in locating a missing person
  • To establish, exercise or defend a legal claim or complaint
  • For the purpose of a dispute resolution process
  • When there is a statutory requirement to share certain personal information (for example, mandatory notification of certain diseases)
  • During the course of providing medical services or through electronic transfer of health records, such as the My Health Record system
  • When the information is necessary to obtain Medicare payments or other health insurance rebates

Other than in the course of providing My Integrated Health services or as otherwise described in this policy, My Integrated Health will not disclose your Personal Information to a third party without your consent. Our practitioners and administrative staff will only disclose to third parties the minimum information required.

Security of Personal Information

Your Personal Information is stored in a manner that reasonably protects it from misuse, loss, and unauthorised access, modification or disclosure.

When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify it. However, most Personal Information is stored in client files which will be kept by us for a minimum of 7 years, or as required by applicable law.

Access to Your Personal Information

You may access the Personal Information we hold about you and request that it be updated and/or corrected, subject to certain exceptions. If you wish to access your Personal Information, please contact us in writing. We will acknowledge your request within 14 days and, provided we hold the information requested, access should usually be granted within 14 days. We will inform you if this timeframe is not achievable.

  • You will be asked to verify your identity
  • A fee may apply if the request is onerous or time-consuming
  • Depending on the circumstances, information may be provided by mail, email or in person

In some circumstances, My Integrated Health may not be in a position to provide access to your health record, including where:

  • Access would create a serious threat to your physical and/or emotional health and safety, or that of others
  • Providing access would have an unreasonable impact on the privacy of other individuals
  • Denying access is required or authorised by law
  • Legal proceedings have commenced

If access to your health record is denied, a reason will be provided in writing.

Your Right to Request Deletion

In accordance with the Privacy and Other Legislation Amendment Act 2024 (Cth), you may request that we delete your Personal Information in certain circumstances. We will consider your request and respond within a reasonable period. Note that certain information, including health records, may be required to be retained by law and deletion requests may be declined where this applies.

Automated Decision-Making

Where we use automated processes to make decisions that significantly affect you (for example, in administrative systems), we will take steps to disclose this in accordance with our obligations under the Privacy Act. You may contact us to request information about any automated decision-making processes that affect you.

Maintaining the Quality of Your Personal Information

It is important to us that your Personal Information is up to date. We will take reasonable steps to ensure that your Personal Information is accurate, complete and up-to-date. If you find that the information we hold is inaccurate or out of date, please advise us as soon as practicable so we can update our records and continue to provide quality services to you.

Privacy Related to Our Website

The My Integrated Health website and affiliated social media sites may contain links to other websites. My Integrated Health is not responsible for the privacy practices of any linked websites.

We encourage all users to read the privacy statements of linked websites they visit. My Integrated Health does not endorse the information, products or advertisements contained in linked sites and is not responsible for the content of such sites. By using the My Integrated Health website, you consent to the collection and use of your personal information as detailed in this policy.

My Health Record

For information relating to the My Health Record system, please visit: https://www.myhealthrecord.gov.au/

Policy Updates

This policy may change from time to time and is available on our website. We will notify you of any significant changes where required by law.

Privacy Complaints and Enquiries

If you have any questions about privacy-related matters or wish to complain about a breach of the Australian Privacy Principles or the handling of your Personal Information, please lodge your complaint in writing to us. We will normally respond within 30 days.

If you are dissatisfied with our response, you may refer the matter to the OAIC:

  • Phone: 1300 363 992
  • Email: enquiries@oaic.gov.au
  • Fax: +61 2 9284 9666
  • Post: GPO Box 5218, Sydney NSW 2001
  • https://www.oaic.gov.au/individuals/how-do-i-make-a-privacy-complaint

You may also contact us directly at: admin@myintegratedhealth.com.au

My Integrated Health – Shop

Order Information

When you place an order through our website, we collect certain personal information to fulfil your purchase and provide customer support.

Information Collected

  • Name
  • Billing and shipping address
  • Payment information (handled securely by Stripe — see below)
  • Email address
  • Phone number

Purpose of Collection

We collect this information to:

  • Provide products or services to you
  • Fulfil our contractual obligations
  • Process your payment
  • Arrange for shipping and delivery
  • Provide invoices and/or order confirmations
  • Communicate with you about your order
  • Screen orders for potential risk or fraud

Payment Processing — Stripe

We use Stripe to securely process payments. Stripe collects and processes your payment information in accordance with its own Privacy Policy. Stripe may collect your name, email address, billing and shipping address, payment method details, transaction amount and date, and device information. This data is used to process payments, prevent fraud and comply with legal obligations.

We do not store or have access to your full credit card details. All sensitive payment data is handled directly by Stripe. Stripe is certified to the PCI DSS (Payment Card Industry Data Security Standard), ensuring your payment data is encrypted and handled securely.

Stripe Privacy Policy: https://stripe.com/au/privacy

Shipping — Australia Post

We use Australia Post to fulfil the delivery of orders placed through our website. In order to arrange delivery, we may share your name, shipping address and contact details with Australia Post. Your personal information will be handled by Australia Post in accordance with their Privacy Policy.

Please note that Australia Post may share your information with third parties to facilitate delivery, and some information may be stored overseas. We encourage you to review the Australia Post Privacy Policy: https://auspost.com.au/privacy