Privacy Policy

1. Privacy Commitment

This Privacy Policy represents how Dr Geoffrey Ryan manages your personal information in accordance with the Privacy Act 1988 (Cth) (Act). Our Privacy Policy seeks to safeguard the privacy of your personal information in accordance with the Australian Privacy Principles contained within the Act. This Privacy Policy sets out the kind of information we hold and how we collect, hold, use and disclose that information (including personal and sensitive information, which includes health information).

This Privacy Policy may be amended or revised at any time. The revised Privacy Policy will take effect when it is uploaded on our Website. This Privacy Policy represents the latest version of Dr Geoffrey Ryan’s Privacy Policy.

2. Kinds of Personal Information collected

2.1. Dr Geoffrey Ryan may collect both personal and sensitive information from you.

2.2. Personal information is any information about you that identifies you or by which your identity may be reasonably determined. The kinds of personal information that may be collected from you includes, but is not limited to, your full name, address, phone number, email address and payment details. By collecting this personal information, we are able to contact you when necessary, identify and protect your information from unauthorised use and provide the best possible service.

2.3. Sensitive information is a subset of personal information and includes information or an opinion about an individual’s race, religion, political or trade association, criminal record or health information about an individual.

2.4. Health information is one kind of sensitive information and includes information or an opinion:

2.4.1. about an individual’s health or disability at any time (that is, past, present or future);

2.4.2. about an individual’s expressed wishes regarding future health services;

2.4.3. about health services provided, or to be provided, to the individual;

2.4.4. collected while providing a health service; and

2.4.5. collected in connection with the donation or intended donation of body parts and substances.

This means that personal details related to a patient’s attendance (e.g. name, address, Medicare number, billing information), medical information, notes made by healthcare personnel, identifiable biological specimens or samples, or genetic information all constitute “health information”.

3. How Personal Information is collected

3.1. Dr Geoffrey Ryan may collect personal information from a variety of sources, including the individuals to whom the information relates, family members and associates, other health care providers, community service organisations, insurance companies and other individuals and/or entities who may have information relevant to Dr Geoffrey Ryan’s activities. As a general principle, where personal information is not collected directly from the individual concerned, Dr Geoffrey Ryan will take reasonable steps to ensure that the individual is informed about the collection unless the individual has previously expressly or impliedly consented to the collection. Personal information will only be collected in a manner that is lawful and fair.

3.2. Dr Geoffrey Ryan must:

3.2.1. Only collect health information necessary for its functions or activities;

3.2.2. Use fair and lawful ways, that are not unreasonably intrusive, to collect health information;

3.2.3. Collect health information directly from an individual if it is reasonable and practicable to do so (there is an exception where it is necessary to obtain an individual’s family, social or medical history, which may contain information relating to other persons);

3.2.4. Take reasonable steps, at the time of collecting health information or as soon as practicable afterwards, to make an individual aware of why the information is being collected, who it may be disclosed to, how it can be accessed etc;

3.2.5. Take reasonable steps to ensure the individual is aware of the above points even if the information is collected from someone else; and

3.2.6. Only collect health information with the express or implied consent of the individual concerned, unless collection is required by law or it is necessary to prevent a serious threat to the life or health of any person.

3.3. Through your use of our Website, we may automatically record details including your internet address, domain name and the date and time of your visit to our Website (including the web pages viewed), your browser and operating system. If you link to our Website from another website then that information may also be recorded.

3.4. Dr Geoffrey Ryan collects Personal Information for the purposes of carrying out its functions as a health services provider, employer and other associated functions. Information may also be collected where a Permitted Health Situation or Permitted General Situation exists as defined under the Act.

4. Use and disclosure of Personal Information

Dr Geoffrey Ryan may use or disclose an individual’s health information where use or disclosure is:

4.1. for the primary purpose for which it was collected (eg. provision of medical care and treatment; health fund claims);

4.2. for a directly-related secondary purpose that would have been within the reasonable expectations of the patient at the time (eg quality improvement activities);

4.3. with the consent of the individual;

4.4. required or authorised by law; and/or

4.5. necessary to prevent serious and imminent threat to an individual or to public health.

5. Access to and correction of information

Patients have the right to access health information held about them, unless:

5.1. It would pose a serious threat to the life or health of any individual;

5.2. It would have an unreasonable impact on the privacy of others;

5.3. The request for access is frivolous or vexatious; and/or

5.4. Denying access is required or authorised by law.

Access may be provided in a number of different ways. For example the patient (or his/her authorised representative) may view and discuss their records with a health service provider and/or obtain a copy of the information or a summarised report. Access requests or related queries should be directed to reception@qei.org.au. We will endeavour to process access requests within a reasonable time.

If a person requests a correction to their health information, Dr Geoffrey Ryan must either make the correction, where appropriate, or add a note to the records with details of the request. Requests for correction should be directed to reception@qei.org.au.

6. Holding and security of Information

6.1. Dr Geoffrey Ryan endeavours to take all reasonable steps to keep secure any personal or sensitive information which we hold about you, and to keep this information accurate and up to date. The security and privacy of your personal information is our priority. We may store your personal information in hard copy or electronic format.

6.2. Dr Geoffrey Ryan must take reasonable steps to:

6.2.1. Ensure that the health information it collects, uses or discloses is relevant, accurate, complete and up-to-date;

6.2.2. Protect the health information it holds from misuse and loss, and from unauthorised access, modification or disclosure; and

6.2.3. Destroy or permanently de-identify health information when it is no longer needed or required to be kept.

7. Overseas transfer

Your personal information will not be disclosed to recipients outside Australia unless you expressly request us to do so. If you request us to transfer your personal information to an overseas recipient, the overseas recipient will not be required to comply with the Australian Privacy Principles and we will not be liable for any mishandling of your information in such circumstances.

8. Third party websites

When you leave our Website, you will be going to websites that are beyond our control. Our Policy does not apply to third party websites and we encourage you to review the privacy policies which apply to third party websites.

9. Changes to policy and complaints

9.1. If you are unsatisfied with the manner in which we have dealt with your personal information, you may make a complaint by emailing us at reception@qei.org.au. We will, within fourteen days, respond to you and attempt to resolve with you your issues as they pertain to your personal information.

9.2. If you are still unsatisfied, you may wish to direct your complaint to the Office of the Australian Information Commission:

Website: https://www.oaic.gov.au/
Phone: 1300 363 992

In writing: The Office of the Australian Information Commissioner
GPO Box 5218, Sydney NSW 2001