Privacy, Confidentiality, and IT Security Policy

Introduction

 

This privacy policy is to provide information to SA Homecare Therapies’ (SAHCT) clients about how personal information (which includes health information) is collected and used within SAHCT, and the circumstances in which we may share it with third parties

 

References

 

  1. Privacy Act 2008

  2. Health Records (Privacy and Access) Act 1997

  3. Public Advocate Act 2005

  4. Australian Privacy Principles (2014)

 

Why and when your consent is necessary

 

When you register as a client with SA Homecare Therapies, you provide consent for SAHCT’s staff to access and use your personal information so they can provide you with the best possible healthcare. Only staff who need to see your personal information will have access to it. If we need to use your information for anything else, we will seek additional consent from you to do this.

 

Why does SA Homecare Therapies collect, use, hold and share your personal information?

 

SA Homecare Therapies will need to collect your personal information to provide healthcare services to you. The main purpose for collecting, using, holding, and sharing your personal information is to manage your health. We also use it for directly related business activities, such as financial claims and payments.

 

What personal information do we collect?

 

The information we will collect about you includes:

 

  1. Names, date of birth, addresses, contact details
  2. Health information including medical history, medications, social history, and your connection with other health and wellbeing service providers
  3. Medicare number, National Disability Insurance Scheme (NDIS) number, My Aged Care number, or other government agency number for identification and claiming purposes
  4. Health fund details, and
  5. Credit card details (upon your express consent and completion of a separate agreement)

 

How do we collect your personal information?

 

SA Homecare Therapies will collect your personal information:

 

  1. When you make your first appointment, we will collect your basic personal and demographic information over the phone. We will collect additional information via our new patient details form.
  2. During the course of providing services, we may collect further personal information.
  3. We may also collect your personal information when you send us an email, telephone us, or communicate with us using social media.

 

In some circumstances personal information may also be collected from other sources. Often this is because it is not practical or reasonable to collect it from you directly. This may include information from:

 

  1. Your guardian or responsible person
  2. Other involved healthcare providers, such as doctors, allied health professionals, hospitals, community health services and community support services
  3. Your health fund, community funding agency, Medicare, the National Disability Insurance Scheme, or My Aged Care

 

How do you ensure informed consent is given?

 

There may be times when a client is unable to provide informed consent to receive SA Homecare Therapies’ services. This means that the person is unable to understand the service that SA Homecare Therapies intends to provide.

 

SA Homecare Therapies checks a client’s capacity for informed consent prior to providing healthcare services. If there is any question about a client’s capacity to give informed consent, SA Homecare Therapies will seek a signature from the client’s legally appointed guardian. Inability to provide informed consent is not a barrier to receiving SA Homecare Therapies services.

 

Who do we share your personal information with?

 

We sometimes share your personal information:

 

  1. With third parties who work with our practice for business purposes, such as accreditation agencies or information technology providers – these third parties are required to comply with this policy
  2. When it is required or authorised by law (e.g., court subpoenas, we are providing services under a government program e.g., NDIS, My Aged Care, GP Care Plan)
  3. When it is necessary to lessen or prevent a serious threat to a patient’s life, health or safety or public health or safety, or it is impractical to obtain the patient’s consent
  4. To establish, exercise or defend an equitable claim
  5. For the purpose of confidential dispute resolution process

 

Only people that need to access your information will be able to do so. Other than situations as listed above, SA Homecare Therapies will not share personal information with any third party without your consent.

 

We will not share your personal information with anyone outside Australia (unless under exceptional circumstances that are permitted by law) without your consent.

 

SA Homecare Therapies will not use your personal information for marketing any of our services directly to you without your express consent. If you do consent, you may opt-out of direct marketing at any time by notifying us in writing.

 

How do we store and protect your personal information?

 

Your personal information may be stored by SA Homecare Therapies in various forms.

 

  1. Electronic records
  2. Visual forms (photos)
  3. Hard copy documents and photographs are scanned and converted into electronic format then destroyed.
  4. Electronic records containing personal information is stored securely in cloud-based software, which:
  • Is password protected
  • Does not allow browsers to remember a user’s password and be accessed by another person
  • Prompts regular changing of passwords

 

Your personal information is not stored locally on personal electronic devices or in personal email accounts

 

How can you access and correct your personal information?

 

You have the right to access and correct your personal information.

 

SA Homecare Therapies acknowledges clients may request access to their health records. We require you put this request in writing and email it to us at: hello@sahomecaretherapies.com.au, or post it to: U5/259 Glen Osmond Road, Frewville SA 5063 and we will respond within 30 days. Charges may apply.

 

SA Homecare Therapies will take reasonable steps to correct your personal information where the information is not accurate or up to date. From time to time, we will ask you to verify that your personal information held by us is correct and up to date. You may also request that we correct or update your information, and you should make such requests in writing to our email address or via post.

 

How can you lodge a privacy related complaint, and how will the complaint be handled?

 

We take complaints and concerns regarding privacy seriously. You should express any privacy concerns you may have in writing. We will then attempt to resolve it in accordance with our resolution procedure. Please put your complaint in writing and email it to us at: hello@sahomecaretherapies.com.au, or post it to: U5/259 Glen Osmond Road, Frewville SA 5063 and we will respond within 30 days.

 

You may also contact the Office of the Australian Information Commissioner (OAIC). Generally, the OAIC will require you to give them time to respond before they will investigate. For further information visit www.oaic.gov.au or call the OAIC on 1300 336 002.

 

Privacy and our website

 

We respond to enquiries and requests through our email address: hello@sahomecaretherapies.com.au. Information such as your email address, time and date of email, and message content will be stored.

 

Personal information is not obtained through our website: www.sahomecaretherapies.com.au. We use Google Analytics to give us summarised information about the number of visits to our webpage. We do not use cookies or tracking software.

 

Policy review statement

 

This policy, and effectiveness of controls, will be reviewed annually.

 

Distribution

 

All SAHCT Workers read and acknowledge this policy.