Privacy Policy
Protecting the Privacy of your Personal and Sensitive Information
Macleay Island Medical Centre is committed to protecting the privacy and confidentiality of all personal and health information entrusted to us. We comply with the Privacy Act 1988, the Australian Privacy Principles (APPs), and all relevant Queensland health privacy regulations.
1. What Information We Collect
We may collect the following types of information to provide safe, high-quality medical care:
Personal Information
- Name, date of birth, address, and contact details
- Medicare, DVA, pension, or concession details
- Emergency contact information
Health Information
- Medical history, medications, allergies, immunisations
- Consultation notes, pathology and imaging results
- Referrals, treatment plans, and specialist reports
- Information provided by other healthcare providers
Other Information
- Billing and payment information
- Information submitted through online forms or booking platforms
2. How We Collect Information
We collect information:
- Directly from you during appointments, phone calls, emails, or online bookings
- From other healthcare professionals or hospitals (with your consent)
- From My Health Record and secure clinical information systems
- When you engage with our website or online booking platforms
3. Why We Collect Your Information
Your information is used to:
- Provide safe and appropriate medical treatment
- Communicate with you about your healthcare
- Manage administrative, billing, and Medicare/DVA processes
- Coordinate care with specialists, allied health, and hospitals
- Meet legal, regulatory, and clinical safety obligations
We only collect information that is necessary for your care and operate strictly under the minimum-necessary principle.
4. How We Store and Protect Your Information
We take all reasonable precautions to secure your information, including:
- Encrypted clinical software (Best Practice)
- Secure password-protected systems and restricted staff access
- Staff confidentiality agreements and mandatory privacy training
- Secure disposal of paper records
- No acceptance of patient data via USB devices due to security risks
5. How We Share Your Information
We may share your information with:
- Your treating GP
- Specialists, allied health professionals, hospitals
- Pathology and imaging providers
- Medicare, DVA, and approved third-party billing platforms
- My Health Record (unless you opt out)
We will not share your information with anyone else unless:
- You have provided consent
- It is required by law (e.g., court order, mandatory reporting)
- There is a serious risk to your health or public safety
We do not sell, trade, or use your information for marketing.
6. Access to Your Information
You have the right to:
- Request access to your medical record
- Request corrections to inaccurate or incomplete information
Requests may take up to 30 days, and administrative fees apply $50 for printing or transferring records.
7. Transferring Your Medical Records
You may request that your medical records be transferred to another clinic.
We do not accept patient records via USB. All incoming records must be supplied in PDF, HTML, or XML format.
8. Website and Online Bookings
When using our website or online booking systems (HealthEngine):
- Basic personal information may be collected
- Cookies may be used for website functionality
- No medical advice is provided through the website
- Data is protected in accordance with relevant privacy laws
9. Complaints About Privacy
If you believe your privacy has been breached, you may lodge a complaint:
Practice Manager – Macleay Island Medical Centre
Email: manager@mimc.net.au
Phone: 07 3450 3704
Address: 14 Brighton Road, Macleay Island QLD
If unresolved, you can contact:
Office of the Australian Information Commissioner (OAIC)
www.oaic.gov.au
1300 363 992
10. Updates to This Policy
We may update this policy from time to time. The current version will always be available on our website or at reception.