Our Privacy Policy
(Effective June 2025)

___

​

Sunshine Primary Health Pty Ltd (ABN [insert ABN]) ("we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By accessing our services or using our website, you consent to the collection, use, and disclosure of your information as set out in this Privacy Policy.

​

​

1. Collection of Personal and Health Information

​

We collect personal, sensitive, and health information that is necessary to provide you with high-quality healthcare services and to meet our legal obligations. This includes, but is not limited to:

• Full name, date of birth, contact details

• Medicare number, health fund or insurer information

• Medical history, treatment notes, referrals, and diagnostic results

• Information collected from third-party providers with your consent (e.g., GPs or allied health)

Information may be collected directly from you, from your authorised representative, or from third parties with your express consent.

​

2. Use of Information

​

Your information will be used solely for purposes directly related to:

• The provision and coordination of healthcare and treatment

• Internal record-keeping and compliance with clinical, legal, or regulatory requirements

• Communication with other healthcare providers, insurers, or third-party payers where appropriate

• Appointment reminders, administrative correspondence, and billing

• Quality assurance, auditing, or incident investigation

We do not use your information for unrelated secondary purposes unless legally permitted or you provide informed consent.

​

3. Disclosure of Information

​

We will only disclose your personal or health information to third parties where:

• You have provided written or verbal consent;

• Required or authorised by law (e.g., court orders, public health reporting);

• Necessary for the prevention or mitigation of serious threats to life, health, or safety;

• In the course of clinical referrals to other health providers involved in your care.

We do not sell, rent, or trade your personal information under any circumstances.

​

4. Data Security and Retention

​

We take all reasonable technical and organisational measures to protect your information from misuse, loss, unauthorised access, modification, or disclosure.

• Electronic records are stored in encrypted, access-controlled systems.

• Paper records are stored in secure, restricted-access areas.

• Our staff are bound by strict confidentiality obligations.

• We retain records in accordance with Health Records Act 2001 (VIC) and other applicable legislation.

Records are destroyed securely when no longer required by law or clinical necessity.

​

5. Access and Correction

​

You have the right to request access to, or correction of, the personal information we hold about you, subject to legal and clinical limitations.

• Requests must be made in writing and may require verification of identity.

• We reserve the right to refuse access where permitted by law and will provide written reasons if so.

• Corrections will be made where data is shown to be inaccurate, incomplete, or out of date.

​

6. Website Use and Analytics

​

When you use our website, we may collect non-identifiable data for statistical purposes using cookies and tracking technologies.
This may include:

• Browser type, IP address, visit duration, and pages viewed

• Device type and location data (if enabled)

Cookies may be disabled via your browser settings. Third-party services used on our site are bound to privacy and security compliance, but we do not accept liability for misuse of your information by those providers beyond our control.

​

7. Third-Party Providers and Data Transfers

​

We may engage secure third-party service providers (e.g. online booking, practice management software) who are contractually bound to meet Australian privacy standards. Where data is stored or processed offshore, we take reasonable steps to ensure compliance with applicable laws.

​

8. Making a Privacy Complaint

​

If you believe your privacy has been breached or mishandled, you may submit a written complaint to us. We will investigate and respond within 30 days.

​

Contact Details:
Sunshine Primary Health Pty Ltd
111 Durham Road, Sunshine VIC 3020
Phone: (03) 9310 2545
Email: pm@sphclinic.com.au

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) via www.oaic.gov.au.

​

___