Subtotal $0.00
Your trusted healthcare partner dedicated to delivering exceptional medical care for you and your family.
- Phone:03 9794 0114
- Email:reception@dovecare.com.au
- Unit 3/18-20 Hawthorn Rd, Doveton, Victoria, 3177, Australia
Your trusted healthcare partner dedicated to delivering exceptional medical care for you and your family.
Dovecare Medical Centre is committed to protecting the privacy, confidentiality and security of your personal and health information in accordance with:
This policy explains how we collect, use, store, access, transfer and disclose personal information, and how you can access or correct your information.
We maintain appropriate administrative, technical and physical safeguards to protect patient information from unauthorised access, use, disclosure, alteration, loss or misuse.
A patient health record includes any information or opinion about your health, medical history or care that identifies you.
This may include:
Health information is sensitive information under Australian law and receives additional protection.
We collect personal and health information that is reasonably necessary to provide medical care and manage our practice.
This may include:
We generally collect information directly from you. Where appropriate and lawful, we may also collect information from:
We collect and use your information to:
We may disclose relevant information to:
We only disclose information where there is an appropriate lawful basis, including where it is necessary for your care, authorised by you, permitted under applicable privacy laws, or required by law.
All patient health information is treated as confidential.
Dovecare Medical Centre takes reasonable steps to ensure that patient information is only accessed, used or disclosed by authorised persons for legitimate clinical, administrative or legal purposes.
Team members are expected to maintain patient confidentiality and must not access, discuss, copy, disclose or use patient information unless they are authorised to do so as part of their role.
Patient information must not be discussed in public areas or in circumstances where it could be overheard by unauthorized persons.
Where required, we obtain your informed consent before disclosing your health information.
Informed consent means you understand:
You may withdraw your consent at any time, subject to legal or clinical limitations.
When patient health information needs to be transferred to another healthcare provider or authorised recipient, we take reasonable steps to ensure that the information is:
Where electronic communication is used, approved secure systems should be used wherever reasonably practicable.
Before sending clinical information, staff should verify the recipient and check that the information being transferred is appropriate and accurate.
Access to patient health records, prescription pads, clinical systems and other official practice documents is restricted to authorised team members.
Access is provided according to the person’s role and level of responsibility.
Team members must:
Prescription pads and other controlled or official documents must be stored securely and accessed only by authorised personnel.
Where lawful and practicable, you may choose not to identify yourself or to use a pseudonym when interacting with our practice.
However, for most medical services, it is not practical for us to provide appropriate care without identifying you.
We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification or disclosure.
Security measures include:
Patient health information must not be stored, displayed or left unattended in areas where members of the public or unauthorised persons could see or access it.
This includes taking reasonable care with:
Staff must position computer screens and documents appropriately and use password-protected screen locking when workstations are unattended.
Clinical software and electronic medical records are accessible only through unique individual identification assigned to authorised team members.
Each team member must use their own login credentials. Shared accounts or sharing of passwords is not permitted unless specifically authorised and technically required by the system.
Access permissions are assigned according to the person’s role and level of authorisation.
Team members must not access records outside the scope of their role or access information simply because they have technical access to it.
Access to clinical systems may be reviewed, monitored and audited to identify inappropriate or unauthorised access.
When a team member leaves the practice or no longer requires access, their access must be removed or amended as appropriate.
Our practice may use secure clinical software and document automation technology to generate referral letters and other clinical documents.
Where document automation tools are used, we take reasonable steps to ensure that:
We do not routinely disclose patient information overseas.
If we use cloud-based or other service providers that store or process information outside Australia, we take reasonable steps to ensure that appropriate privacy and security safeguards are in place and that any overseas disclosure complies with applicable Australian privacy requirements.
You have the right to request access to your personal or health information.
Requests should be made in writing to the Practice Manager.
We will respond within a reasonable timeframe in accordance with applicable legal requirements.
Access may be provided by:
Administrative fees may apply where permitted by law.
To obtain access to your information, you may be required to provide proof of identity.
If you believe your information is inaccurate, incomplete or out of date, you may request correction.
We will take reasonable steps to correct verified inaccuracies or attach a statement to your record where appropriate.
Any suspected privacy breach, unauthorised access, loss of patient information, incorrect disclosure or other information security incident must be reported to the Practice Manager as soon as practicable.
The practice will assess the incident and take appropriate steps to contain, investigate and manage it.
If you believe your privacy has been breached, you may lodge a complaint by contacting:
Practice Manager
Dovecare Medical Centre
Email: reception@dovecare.com.au
Phone: 03 9794 0114
We will:
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Website: www.oaic.gov.au
If a data breach occurs that is likely to result in serious harm, we will assess and manage the breach in accordance with the Notifiable Data Breaches Scheme and applicable privacy legislation.
Where notification is required, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.
This policy may be updated from time to time to reflect changes in legislation, technology, clinical systems or practice procedures.
The current version will be available at reception and on our website.