Re:You Privacy Statement

1. Your personal information is important to us

Re:You recognises that you have rights to control your personal information, and that sharing it with us is an act of trust. We take that seriously and we are committed to protecting it at every stage of your care with us.

2. Privacy Statement

This Privacy Statement sets out Re:You’s policy concerning the collection, use, disclosure and storage of your personal information, and is designed to provide you with options on how to access and correct your personal information.

This Privacy Statement also sets out how we manage personal information to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We believe our Privacy Statement not only complies with relevant laws but also represents best practice.

3. Definitions

Personal information means information or opinions about a person from which that person is reasonably identifiable; personal information includes sensitive information.

Sensitive information includes information about a person’s beliefs, associations or health.

Health information means information or opinions about a person’s health, or collected in connection with a health service provided to them.

4. Collecting your personal information

During the course of your treatment, it will be necessary to collect personal information about you. This is collected by our practice team and is accessed by the practitioner and staff during the course of your care. Clinical records are stored for a minimum of 7 years, in keeping with legislative requirements, after which, they may be de-identified and/or destroyed. These details include your name, date of birth, address, phone number, Medicare number, private health fund, WorkCover details (if applicable), referring doctor and local doctor.

5. Use of your personal information

Re:You collects information from you for the primary purpose of providing quality health care, in compliance with the Privacy Act 1988. We require you to provide us with your personal details and a full medical history so that we may properly assess, diagnose and treat illnesses and be proactive in your health care.

Beyond your direct care, the information you provide may also be used in the following ways

• Administrative purposes in running our medical practice
• To review the quality of medical care in our practice
• Billing and medical rebate purposes
• To communicate with other health care professionals involved in your care (including treating doctors and specialists inside and outside this medical practice, hospitals to which you are admitted and providers of diagnostic services)
• To discuss difficult or rare problems with professional colleagues
• Disclosure for research and quality assurance activities to improve individual and community health care and practice management. Any information used outside of this practice would not identify you without your consent
• Professional accreditation, quality assessments and clinical auditing

Outside of the purposes above, we will not disclose information from your medical record to any third party without your written permission, other than in the following special exceptions, which are outside our control

• We have to report some illnesses to health departments and drivers' licence authorities
• We must respond when a court of law sends a subpoena to deliver case notes
• Government laboratories, as well as radiology services in public hospitals send all their reports (identifying you by name and date of birth) to a government database
• Some medicines are subsidised only if we obtain an authority. To do so, we must reveal your personal details to a government clerk or call centre and your diagnosis is entered in their database

6. Recovery of unpaid fees

Where an account remains unpaid, we may engage a third-party debt collection agency, or seek legal advice, to recover the outstanding account. This may require us to disclose limited personal information, such as your name, contact details and the amount owing, to that agency or legal representative, solely for the purpose of recovering the debt.

The debtor is liable for any reasonable costs incurred in recovering unpaid amounts. This may include debt collection fees, legal costs, or administrative expenses.

We will not disclose your clinical or health information to a debt collection agency for this purpose.

7. Storage and security of your personal information

We take all reasonable steps to keep your personal information secure, safe and protected from misuse, interference, loss or unauthorised access. Your information is held on password protected systems, hosted within Australia, and is accessed only by Re:You practitioners and staff. Our employees and contractors who provide services related to our information systems are obliged to respect the confidentiality of any personal information held by us.

8. Use of cookies on our website

Cookies are pieces of information that a website transfers to your computer’s hard disk, used for record-keeping purposes, website usage statistics or to provide enhanced functionality on the site. Generally, the information obtained by cookies is de-identified and does not constitute personal information, though it may include your computer's IP address. We may use this information for additional functionality or to analyse usage patterns.

You are ultimately in control of your browser's handling of cookies. Most browsers are by default set to accept cookies, but have the capacity to block or delete them. If you do not wish to receive cookies, you should set your browser to refuse them. In some instances, this may mean you will not be able to take full advantage of parts of Re:You's website.

By using our website, you accept the use and installation of these cookies to provide you with these services.

9. Accessing your personal information

You have the right to access the personal information we hold about you. If at any time you want to know what personal information we hold, please contact us via admin@reyouhealth.com.au

We will provide you with your information within a reasonable timeframe of your request, however where necessary we may require you to attend our offices. We will not generally charge for your access to your personal information.

We reserve the right to refuse you access to your personal information as permitted under the Privacy Act. For example, we may refuse access if your request would pose a serious threat to another person's health, would unreasonably impact on another person, or is frivolous or vexatious.

10. Correction of your personal information

We will take reasonable steps to ensure your personal information held by us is accurate, up-to-date, and complete. However, the personal information we hold may not be complete due to planned and periodic destruction.

If you wish to update or correct your personal information, please contact us via admin@reyouhealth.com.au

11. Data breaches

In the unlikely event of an eligible data breach involving your personal information, Re:You will comply with the obligations under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988. This includes notifying affected individuals and the Office of the Australian Information Commissioner (OAIC), where required.

12. Problems or queries

If you have a problem, query or complaint about the way in which we collect, use or disclose your personal information, please contact us via admin@reyouhealth.com.au. We take all aspects of privacy seriously, and welcome your feedback. Any concerns received will be reviewed internally and, where appropriate, investigated to ensure we continue to comply with the Privacy Act.

If you are not satisfied with our response, you have the right to lodge a complaint with the OAIC.

Website: www.oaic.gov.au, phone: 1300 363 992

13. Future changes

From time to time, our policies are reviewed and may be revised. We reserve the right to update or amend this statement at any time. We will notify you of any changes by posting an updated version of the Statement on our website. The amended Statement will be effective on and from its uploading.