Privacy Policy

Kings Langley Chiropractic Centre — ABN 41 206 347 476

144 James Cook Drive, Kings Langley NSW 2147 — Phone: (02) 9838 7739 | Mobile: 0407 669 166

Email: [email protected]

Andrew Lyell is a chiropractor registered with the Chiropractic Board of Australia (AHPRA) and has owned and operated the Practice since 1995.

As a health service provider in NSW, we are regulated by:

• the Health Records and Information Privacy Act 2002 (NSW) (HRIP Act), including the Health Privacy Principles (HPPs); and
• the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Both laws apply to our handling of your health information. Where both apply, we comply with the higher standard required.

We may collect:

• your name, date of birth, contact details and address;
• your health history, symptoms, examination findings, diagnoses and treatment records;
• information about medications, allergies, previous injuries and relevant lifestyle factors;
• Medicare, DVA, health fund and claim-related details (including claim numbers where applicable);
• payment information necessary to process fees, including through HICAPS;
• next of kin or emergency contact details;
• correspondence with your GP or other treating practitioners, where relevant to your care.

We collect information:

• directly from you, in person at the clinic, by phone, or by email or website contact if you choose to contact us that way;
• from your GP, specialists or other treating practitioners, with your consent;
• from Medicare, DVA, your health fund or an insurer, for the purpose of processing claims (including HICAPS, workers compensation, CTP and DVA claims).

We collect health information directly from you wherever it is reasonable and practicable to do so. Where we receive information about you from another practitioner or organisation, we will take reasonable steps to confirm the purpose for which it was provided.

We collect, use and store your information to:

• assess your condition and provide chiropractic care;
• maintain accurate and complete health records;
• manage appointments and send appointment reminders;
• process payments and claims through HICAPS, Medicare, DVA, health funds and insurers;
• communicate with other treating practitioners involved in your care;
• meet our legal and professional obligations, including record-keeping requirements under the Health Practitioner Regulation National Law and AHPRA registered practitioner standards.

We will not use your information for other purposes unless you consent, or the use is permitted or required by law (including where necessary to lessen or prevent a serious threat to someone’s health or safety).

Health information is sensitive information. Before we collect it, we will explain what we are collecting and why, and we will seek your consent.

You may ask questions, decline to provide information, or withdraw consent at any time. If you choose not to provide information reasonably needed for your care, this may limit our ability to assess or treat you safely.

We may disclose your information to:

• other health practitioners involved in your care (for example, your GP, a specialist or an allied health practitioner), with your consent;
• Medicare, DVA, your health fund, HICAPS, or a workers compensation or CTP insurer, for claim processing;
• anyone you authorise, or your emergency contact where appropriate;
• law enforcement or other bodies where required or authorised by law.

We do not sell your information, and we do not use it for marketing without your consent.

Your health information is stored using the Halaxy practice management platform, which hosts its data in Australia.

We do not currently disclose personal or health information to overseas recipients. If we begin to use a provider that stores or processes information overseas, we will take reasonable steps to ensure it is handled in accordance with applicable privacy laws, and this policy will be updated to identify the recipient and the country.

We take reasonable steps to protect your information against misuse, interference, loss and unauthorised access, modification or disclosure. Physical records are stored securely, and electronic records are protected by appropriate access controls.

We retain health records in accordance with the HRIP Act:

• for at least 7 years from your last attendance; or
• if you were under 18 at the time of your last attendance, until you turn 25;

whichever is longer. After that, records are securely destroyed or de-identified, and a disposal log is maintained.

You may ask to access the health information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete or misleading.

To make a request, contact the Practice using the details above. We will respond within a reasonable time. We generally do not charge for access or correction requests. In limited circumstances, access may be declined or provided in a particular way (for example, through your treating practitioner) where permitted by law — if so, we will explain why and note your request.

We maintain reasonable safeguards and an internal response process for data breaches. If an eligible data breach occurs under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act), we will assess the breach and, where required, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

If you have a privacy concern, please contact the Practice first so we can try to resolve it.

If you are not satisfied with our response:

• complaints under the HRIP Act may be made to the NSW Information and Privacy Commission (IPC) — ipc.nsw.gov.au; and
• complaints under the Privacy Act may be made to the OAIC — oaic.gov.au.

Where it is lawful and practicable, you may deal with us anonymously — for example, for general enquiries. It is not practicable to provide treatment anonymously, because we must be able to identify you and maintain accurate health records.

Our website provides general information about our services. You can browse it without providing personal information. If you contact us by email or through the website, we will use your details only to respond to your enquiry.

Our website uses Google Analytics to understand how visitors use the site. Google Analytics may collect information such as your IP address, device and browser information, pages visited and time spent on pages. This information is used for website statistics only and is not used to identify you. You can control or disable cookies through your browser settings. Google’s handling of this information is described in Google’s Privacy Policy.

Website information is general in nature and is not medical advice. It does not substitute for an individual clinical assessment. If you have a health concern, contact a health practitioner. In an emergency, call 000.

We may update this Privacy Policy from time to time. The current version will always be available on our website or from the Practice on request.

Privacy enquiries:

• Kings Langley Chiropractic Centre — (02) 9838 7739 | Mobile: 0407 669 166
• Email: [email protected]