Your privacy

Privacy Policy

Heal Medical Centre is committed to protecting the privacy and confidentiality of your personal and health information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Last updated: January 2026

What information we collect

To provide safe, high-quality medical care we collect personal and health information, including your name, date of birth, address, contact details and Medicare, DVA or health-fund numbers.

Clinical information includes your medical history, medications, allergies, test and imaging results, referrals, and notes from your consultations. Where relevant to your care, we may also record information about your family and social history.

How we use your information

Your information is used to manage and coordinate your healthcare, including consultations, prescriptions, referrals, recalls and reminders, and follow-up of results.

We may also use de-identified information for accreditation, quality improvement and practice management, and to meet our legal and regulatory obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

When we share your information

With your consent, we disclose information to other treating practitioners such as specialists, hospitals, pathology and diagnostic imaging providers, and allied health professionals involved in your care.

We may disclose information without consent where required or authorised by law, to lessen a serious threat to life or health, or to meet mandatory reporting obligations. We do not sell your personal information.

How we store and protect it

Health records are held electronically in our clinical software with role-based access controls, encryption, secure backups and audit logging. Any paper records are stored securely on site.

Our team is bound by confidentiality obligations, and access is limited to staff who need it to perform their role. We retain records for the periods required by law — generally 7 years from your last visit, or until age 25 for patients seen as children.

Accessing and correcting your records

You have the right to request access to your health information and to ask us to correct anything that is inaccurate, out of date or incomplete. Requests can be made in writing to our Practice Manager.

We will respond within a reasonable time. In limited circumstances permitted by law we may need to decline access, in which case we will explain why and outline your options.

Our website and cookies

Our website may use cookies and analytics to understand how visitors use the site and to improve its performance. This information is generally aggregated and does not identify you personally.

Online enquiry and feedback forms transmit the details you provide to our reception team. Please do not include sensitive clinical information in online forms — call us instead for anything urgent.

Overseas disclosure

Some of our service providers, such as cloud-based clinical or communication software, may store data on servers located outside Australia. Where this occurs we take reasonable steps to ensure your information is handled in line with the Australian Privacy Principles.

Concerns and complaints

If you believe your privacy has not been respected, please raise it with our Practice Manager so we can address it promptly. You may also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.