Gentle Procedures Clinic

1. About Us (APP 1)

This Privacy Policy outlines how Gentle Procedures Clinic collects, uses, stores, and discloses your personal and health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We are committed to protecting your privacy and ensuring all personal information is handled securely, lawfully, and transparently.

2. Contact Details

Gentle Procedures Clinic
Brett Street Medical Precinct
Suite 6, 2 Brett Street
Revesby NSW 2212

Phone: 02 8211 8888
Email: drsharier@gentleprocedures.com.au

3. Collection of Personal Information (APP 3 & 5)

We collect personal and health information that is reasonably necessary to provide safe and effective healthcare services.

This includes:

• Personal details (name, date of birth, address, contact details)
• Parent/guardian information (for minors)
• Medical history, medications, allergies, and risk factors
• Clinical notes and procedural records
• Medicare and health fund details
• Clinical photographs or medical images (with consent)

We collect information directly from you, your guardian, or from other healthcare providers involved in your care.

4. Purpose of Collection (APP 6)

Your information is collected and used for:

• Providing medical care and treatment (including procedures)
• Maintaining accurate health records
• Communication with other healthcare providers
• Billing and Medicare claims
• Legal and regulatory compliance
• Clinical audits, accreditation, and quality improvement

We will not use your information for other purposes without your consent unless required by law.

5. Data Quality (APP 10)

We take reasonable steps to ensure your personal information is accurate, complete, and up to date.
You may request corrections at any time.

6. Disclosure of Information (APP 6)

We may disclose your information to:

• General practitioners, specialists, and hospitals
• Pathology and diagnostic services
• Medicare, DVA, and health insurers
• IT service providers (who comply with privacy obligations)
• Regulatory bodies where required by law

We do not disclose personal information to third parties without consent unless authorised or required by law.

7. Overseas Disclosure (APP 8)

We do not disclose your personal information overseas without your consent.

8. Clinical Photography & Medical Imaging

Clinical photographs or images may be taken only with your explicit consent for medical documentation and treatment purposes. These images are:

• Captured using a secure, access-controlled practice mobile device
• Stored in a password-protected Microsoft OneDrive account located within Australia
• Accessible only by authorised personnel

Images are not used for teaching, publication, or marketing without additional written consent.

9. Digital Systems & AI Use

We use secure clinical software systems for patient management.
Where applicable:

• AI-assisted tools may support documentation
• These tools are used only for clinical purposes
• Patients may opt out of AI-assisted documentation

10. Data Security (APP 11)

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
Security measures include:

• Password-protected systems
• Role-based access controls
• Secure servers located within Australia
• Staff confidentiality agreements

CCTV is used in public areas for security (not in consultation rooms).

11. Use for Marketing (APP 7)

We do not use your personal information for marketing without your express consent.
You may withdraw consent at any time.

12. Use of De-identified Data

We may use de-identified data for:

• Clinical audits
• Accreditation
• Training and quality improvement

You may opt out by informing our clinic.

13. Access and Correction (APP 12 & 13)

You have the right to:

• Request access to your personal information
• Request correction of inaccurate or incomplete information

Requests should be made via email.
We will respond within 30 days.
A reasonable administrative fee may apply.

14. Data Breach Response

We maintain a data breach response procedure.
In the event of a data breach:

• We will assess and contain the breach
• Notify affected individuals where required
• Report to relevant authorities in accordance with legal obligations

15. Complaints Handling

If you have concerns about your privacy, please contact us.
If unresolved, you may contact:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au

Phone: 1300 363 992

16. Anonymity and Pseudonymity (APP 2)

You may interact with us anonymously or using a pseudonym where practical. However, this may not be possible when providing medical care.

17. Policy Review and Updates

This policy is reviewed annually or when required due to:

• Legislative changes
• Changes in practice operations

Updates will be published and communicated where necessary.