Privacy and Confidentiality
At Hey Stacey Occupational Therapy, we value your privacy and respect your right to control how your personal information is collected and used. This Privacy Policy aligns with the Australian Privacy Principles (APP) outlined in the Privacy Act 1988 (Cth) and the National Disability Insurance Scheme (NDIS) guidelines. It explains how we collect, hold, and disclose personal information.
Collection of Personal Information
To deliver our services, we collect personal information, including:
- Contact details (name, email address, telephone number)
- Payment and billing information (for service billing and payment processing)
- Records of conversations and any other relevant information
We may also collect sensitive information with your consent if it is necessary for providing our services, particularly in relation to your health and disability needs.
Use and Disclosure of Personal Information
The personal information we collect will generally be used and disclosed for the purpose for which it was collected. This includes:
- Maintaining your contact details
- Providing our services
- Processing payments
We may disclose your personal information to third parties or contractors essential to service delivery. This may include sharing health information with other medical providers (e.g., your GP, specialists, and allied health professionals). Such disclosures will only occur with your consent or when required for health service delivery, including:
- Referrals to other health service providers
- Billing and liaising with government agencies regarding entitlements and payments
- Situations where it is necessary to prevent or lessen a serious threat to your life, health, or safety
- Other legal obligations
We may also use your personal information for other purposes that you would reasonably expect or as permitted by the Privacy Act. This includes:
- Effectuating or enforcing transactions
- Obtaining advice from legal and accounting firms, auditors, and other consultants
- Complying with legal requirements
NDIS Participant Rights
As an NDIS participant, you have the right to:
- Access your personal information held by us
- Request corrections to your information if it is inaccurate or outdated
- Be informed about how your information is used and disclosed
Informed Consent
We will obtain your informed consent before collecting and using sensitive information related to your health and disability. You have the right to withdraw your consent at any time.
Risk Management
We are committed to protecting your personal information from unauthorised access, loss, or misuse. We have established procedures to manage risks related to privacy breaches and will notify you promptly in the event of a breach that affects your personal information.
Contact Information
If you have any questions, concerns, or complaints regarding your privacy or this policy, please contact us.
Review Process
This Privacy Policy will be reviewed regularly to ensure compliance with current regulations and NDIS requirements. We may update it as necessary, and we will notify you of any significant changes.