Privacy Policy

Introduction

I am committed to protecting the privacy of the personal and health information I collect and to handling your information responsibly in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), relevant cybersecurity legislation, and applicable state and territory privacy legislation.

This Privacy Policy explains how I collect, use, disclose, and store your personal information, how you may access or seek correction of your information, and how you may make a complaint if you believe your privacy has been breached.

From time to time, I may update this Privacy Policy to reflect changes to legislation, technology, systems, or practice processes. The current version will be available on request, and a copy of Neighbourhood Medical's Privacy Policy is available on the practice website.

This Privacy Policy also addresses the responsible use of Artificial Intelligence (AI) technologies within my practice.

Why and when is your consent necessary?

When you first attend or register as a patient, I will ask you to provide personal information, including contact and health information, and confirm your consent to its collection and use.

By registering as a patient, you consent to me and authorised practice staff accessing and using your personal information to provide healthcare services to you. Your personal information will only be accessed by people who require it for the purpose of providing healthcare or supporting practice operations.

If I need to use your information for any purpose not directly related to your healthcare, I will seek your express consent where required.

Collection of Personal and Health Information

I collect personal and sensitive health information necessary to provide healthcare services. This may include (but is not limited to):

• personal identifiers such as your name, date of birth, address, telephone number, and email address
• medical history, consultation notes, diagnostic results, referrals, and treatment plans
• medications, allergies, immunisations, and family history
• Medicare, Government Pension and private health insurance details
• healthcare identifiers
• information generated or processed through AI-enabled tools used in clinical or administrative contexts

From time to time, I may also take clinical photographs or images with your consent obtained at the time, including on a personal device where clinically appropriate.

I primarily collect information directly from you. In some circumstances, and with appropriate authority, I may also collect information from:

• other treating healthcare providers
• hospitals
• pathology and diagnostic imaging providers
• My Health Record
• Medicare or the Department of Veterans’ Affairs
• your guardian, carer, relative, or authorised representative

If I practise within Neighbourhood Medical, additional information may also be collected by the clinic, including:

• CCTV footage collected from the premises for security and safety purposes

A note on website data collection and analytics

If you interact with my website or a clinic website through which I practise, certain information may be collected automatically through website hosting and analytics providers. This may include, but is not limited to:

• browser, device, and network information
• pages visited before and during website use
• IP address information

Neighbourhood Medical may also utilise analytics tools such as Google Analytics and Meta to collect de-identified usage information to help improve website functionality and business operations.

Use and Disclosure of Personal Information

I may use or disclose your personal and health information for purposes including:

• providing medical treatment and healthcare services
• communicating with other healthcare providers involved in your care
• referrals, prescriptions, investigations, and care coordination
• billing, Medicare claims, and administrative functions
• legal and regulatory compliance obligations
• accreditation, quality assurance, and staff education activities

I may communicate with or about you using SMS/text messaging, email, secure messaging platforms, or encrypted communications. These communications may include personal or health information where appropriate.

I do not disclose personal information to overseas recipients unless it is necessary for your care and appropriate safeguards are in place in accordance with Australian Privacy Principle 8.

I may also disclose information where required or authorised by law, including mandatory reporting obligations or court orders.

Research, Education, Quality Improvement and Marketing

Quality Improvement and Staff Education

I may use patient information for internal audits, clinical review, accreditation activities, and staff training. Where practicable, information used for these purposes will be de-identified.

Research

From time to time, I may participate in health research projects.

If identifiable information is required for research purposes, I will seek your express consent before sharing your information unless otherwise authorised by law and approved by a Human Research Ethics Committee. You will not be contacted directly by researchers without your consent.

De-identified Data Sharing

I may contribute de-identified health information to quality improvement programs, registries, or population health initiatives. This information cannot reasonably identify you and is stored securely within Australia. You may request that your information not be included in de-identified datasets by notifying the practice.

Marketing

I will not use your personal information to market goods or services directly to you without your express consent. If you consent to receiving marketing communications, you may opt out at any time by notifying me in writing or using the unsubscribe function where available.

Use of Artificial Intelligence

I may use Artificial Intelligence (AI) technologies to support healthcare delivery.

Examples may include:

• automated transcription of clinical consultations
• AI-assisted clinical guideline and evidence-based literature seraches

Neighbourhood Medical may use AI technologies to improve administrative efficiency and enhance patient engagement.

Examples may include:

• AI-assisted triage or appointment scheduling tools
• chatbot technologies
• administrative workflow support

Governance of AI Use

When using AI technologies:

I will use AI tools in accordance with the Australian Privacy Principles and relevant ethical standards. Personal information will not be used to train AI systems without express consent. AI-generated outputs remain subject to human review and clinical oversight, I do not use any fully automated clinical decision-making systems within my practice.

Anonymity and Pseudonymity

You may request to interact with me anonymously or using a pseudonym where lawful and practical. However, due to the nature of healthcare services, it may not always be practical or lawful to provide care without identifying information.

Data Security and Retention

I take reasonable steps to ensure your personal information is accurate, complete, current, and secure. Your information is protected through measures including:

• secure electronic medical record systems
• password protection and role-based access controls
• cybersecurity safeguards
• regular software updates and security monitoring
• staff training regarding privacy and confidentiality obligations
• secure storage of paper records where applicable

Information is retained in accordance with legal and professional obligations.

When information is no longer required and minimum retention periods have expired, records will be securely destroyed or de-identified in accordance with privacy legislation.

Access to and Correction of Information

You have the right to request access to your personal information and request corrections where information is inaccurate, incomplete, or out of date.

Requests should be made in writing to the practice. It is reasonable to expect a response within 30 days.

A reasonable administrative fee may apply for the provision of records, where permitted by law.

Privacy Enquiries and Complaints

If you have questions or concerns about how your personal information is handled, or wish to request access or correction of your information, please contact:

Practice Manager
Neighbourhood Medical
Suite 1, 530 Milton Road
Toowong QLD 4066

Phone: (07) 3519 6963

Email: admin@neighbourhoodmedical.com.au

If you are not satisfied with the response provided, you may contact the Office of the Australian Information Commissioner:

OAIC Website

Phone: 1300 363 992

You may also contact the Office of the Health Ombudsman:

Office of the Health Ombudsmen

Phone: 133 646

Policy Review Statement

This Privacy Policy was updated on 14 May 2026.

This Privacy Policy will be reviewed at least annually, or sooner if there are changes to legislation, technology, systems, or practice operations.

Significant changes may be communicated via email, in the practice, or on the practice website.