At Granada Medical Practice, we are committed to protecting the privacy and confidentiality of our patients’ personal and medical information. This policy outlines how we collect, use, store, and disclose your data in compliance with applicable privacy laws.

Your Consent

By registering as a patient at our practice, you consent to our healthcare providers and authorised staff accessing and using your personal and medical information to deliver the highest standard of care. Access to your data is restricted to only those who require it for your treatment. If we need to use your information for any purpose beyond healthcare services, we will seek your additional consent.

Why We Collect and Use Your Information

We collect, hold, and share your personal data primarily to:

• • Provide comprehensive healthcare services.

• • Manage and oversee your medical treatment.

• • Process financial claims and payments (e.g., Medicare, health fund billing).

• • Conduct practice audits, accreditation, and quality improvement.

• • Facilitate staff training and professional development.

What Information We Collect

We may collect the following details:

• • Personal details – Name, date of birth, address, contact information.

• • Medical history – Allergies, medications, immunizations, family and social history, risk factors.

• • Government identifiers – Medicare number, healthcare identifiers, health fund details (where applicable).

How We Collect Your Information

Your information may be obtained through:

• • Directly from you (e.g., during registration, consultations, or online interactions).

• • Third parties, where necessary, such as:

• • Family members, guardians, or emergency contacts.

• • Other healthcare providers (specialists, hospitals, pathology services).

• • Government agencies (Medicare, Department of Veterans’ Affairs).

When and With Whom We Share Your Information

We only disclose your information when necessary, including with:

• • Healthcare providers involved in your treatment.

• • Third-party service providers (IT support, accreditation agencies) under strict confidentiality agreements.

• • Government authorities, where legally required (e.g., mandatory disease reporting, court orders).

• • Emergency situations, where there is a serious threat to health or safety.

• • We may engage administrative support services located overseas to assist with appointment scheduling and patient communication.

    All reasonable steps are taken to ensure that overseas providers comply with the Australian Privacy Principles and maintain strict confidentiality and data security standards.

    No clinical or sensitive health information is disclosed overseas.

Data Security and Storage
Your information is securely stored in:

• • Electronic medical records.

• • Paper files (securely archived).

• • Visual/audio records (e.g., X-rays, scans, consultation notes).

We implement robust security measures to prevent unauthorized access, loss, or misuse of your data.

Accessing and Correcting Your Information
You have the right to:

• • Request access to your medical records (in writing).

• • Ask for corrections if your information is inaccurate or outdated.

• • We may periodically verify your details to ensure accuracy.

Making a Privacy Complaint
If you have concerns about how we handle your data, please submit your complaint in writing. We will address it promptly through our resolution process.

Our Website and Online Privacy
When you visit our website:

• • We may use cookies to analyze site traffic (no personal identification is stored).

• • Any information you voluntarily submit (e.g., appointment requests) is transmitted securely.

• • While we employ encryption and security measures, internet-based data transfer carries inherent risks.

• • For further questions about this policy or your privacy rights, please contact us at:

Practice Manager

Granada Medical Practice

70 Attfield Street Maddington WA 6109 WA