Privacy

Current as of: 1 July 2026

Introduction

This Privacy Policy explains how our practice collects, uses, stores, protects and discloses your personal information, including your health information.

We are committed to protecting your privacy and complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and all applicable health records legislation.

This policy applies to all personal information collected by our practice in the course of providing healthcare services.

Why and when your consent is necessary

When you register as a patient of our practice, you consent to our doctors, nurses and authorised practice staff collecting, using and disclosing your personal information for the primary purpose of providing healthcare to you.

If we wish to use or disclose your information for any purpose not directly related to your healthcare, we will seek your consent unless otherwise authorised or required by law.

Only authorised personnel who require access to your information to perform their duties will be permitted to access your records.

Why do we collect, use and hold your personal information?

Our primary purpose for collecting, using and holding your personal information is to provide healthcare services to you.

We also use your information for purposes directly related to operating our practice, including maintaining your medical record, communicating with other healthcare providers, processing Medicare, DVA and health fund claims, managing appointments, meeting legal and accreditation requirements, quality improvement activities and operating our clinical information systems.

What personal information do we collect?

The personal information we collect may include your identifying and contact details, Medicare and healthcare identifiers, health fund information, medical history, medications, allergies, investigation results, specialist correspondence, clinical notes, billing information and any other information relevant to providing your healthcare.

Dealing with us anonymously

Where lawful and practicable, you may choose not to identify yourself or to use a pseudonym when making general enquiries to our practice.

However, to provide safe and appropriate healthcare services, we generally need to accurately identify our patients. This means that, in most circumstances involving the provision of healthcare, we will require sufficient personal information to verify your identity and create or access your medical record.

How do we collect your personal information?

We collect personal information directly from you when you register with our practice, attend consultations or communicate with us by telephone, email, SMS, our website or online booking systems.

We may also collect information from other healthcare providers involved in your care, including specialists, hospitals, pathology and imaging providers, My Health Record (where authorised), Medicare, the Department of Veterans’ Affairs and your authorised representative where appropriate.

Use of cloud services and AI-assisted technologies

To assist in providing efficient and secure healthcare services, our practice uses electronic medical record systems, secure cloud-based technologies and AI-assisted administrative tools.

These technologies may assist with functions such as processing and indexing clinical documents, appointment management and practice administration. They do not replace the clinical judgement of your healthcare practitioner.

Where third-party technology providers process information on our behalf, they do so under strict contractual, privacy and security obligations and are not permitted to use your personal information to train publicly available AI models.

When do we disclose your personal information?

We may disclose your personal information where necessary to provide your healthcare or to operate our practice. This may include disclosure to other healthcare providers involved in your care, pathology and imaging providers, hospitals, pharmacies, Medicare, the Department of Veterans’ Affairs, My Health Record (where applicable), government agencies where required by law, and contracted service providers, including information technology providers who assist us in operating our practice.

We will only disclose information that is necessary for the relevant purpose.

Overseas disclosure

Where possible, your personal information is stored and processed within Australia.

If a service provider stores or processes information outside Australia, we will only do so where:

you have consented;

the disclosure is permitted by Australian privacy legislation; or

appropriate contractual safeguards are in place to protect your personal information.

Direct marketing

We will not use your personal information to market our services without your consent.

You may withdraw your consent at any time.

This does not apply to appointment reminders or communications relating to your ongoing healthcare.

How we protect your personal information

We take reasonable steps to protect your personal information from misuse, interference, loss and unauthorised access, modification or disclosure. This includes the use of secure clinical systems, access controls, encryption, cybersecurity measures, staff confidentiality obligations and secure destruction of records when no longer required.

We retain health records in accordance with applicable legal requirements and professional standards.

Accessing and correcting your information

You have the right to request access to your personal information and to request that it be corrected if it is inaccurate, incomplete or out of date.

Requests should be made in writing to:

Email: admin@gpsonbayview.com.au

or

Practice Manager
GPs on Bayview
Unit 9, 20 St Quentin Avenue
Claremont WA 6010

We will respond within a reasonable period and in accordance with applicable legislation.

Privacy complaints

If you have concerns about how your personal information has been handled, please contact our Practice Manager.

Email: admin@gpsonbayview.com.au

Mail:
Practice Manager
GPs on Bayview
Unit 9, 20 St Quentin Avenue
Claremont WA 6010

We will investigate your complaint promptly and aim to resolve it fairly.

If you are not satisfied with our response, you may lodge a complaint with the:

Office of the Australian Information Commissioner (OAIC)
Phone: 1300 363 992

Office of the Australian Information Commissioner (OAIC)

The current version will always be available on our website and upon request.