Queensland Heart Specialists Privacy Policy

Current as at 26.05.24 

Introduction 

This privacy policy provides information on how we collect and use your personal information, including health information, within our practice, and the circumstances under which we may share it with third parties. 

 Why and When Your Consent is Necessary

Due to the Federal Privacy Act 1988, we require your written consent to collect personal information about you.

We require you to provide us with your personal details and a full medical history so that we may properly assess, diagnose and treat you. We may need to collect information from previous doctors, health care workers, pathology or x-ray services that you have consulted with, for the primary purpose of providing quality healthcare. 

You have the right to see any health information we hold about you as well as the ability to correct any details that are not accurate. Only staff who need to see your personal information will have access to it. If we need to use your information for any other purpose, we will seek additional consent from you. 

Why Do We Collect, Use, Hold, and Share Your Personal Information? 

Queensland Heart Specialists collects your personal information to provide healthcare services. Our main purposes are to manage your health and for directly related business activities such as financial claims and payments, practice audits and accreditation, and staff training. This assists us in the following ways:

• To best assess your health care needs and provide medical treatment.
• Administration purposes in running our practice. We may need to contact you using phone numbers provided by you. We may need to send documents, pathology and radiology referrals or letters to the email address provided by you.
• Billing purposes and debt collection, including compliance with Medicare and Health Insurance Commission requirements.
• Disclosure to others involved in your care, including treating doctors, specialists and hospital booking staff outside this practice. This may occur through referral to other doctors, surgery at hospitals, for medical tests and in the reports or results returned to us following the referrals.
• Collection of data for research purposes. This information is used to improve our treatment protocols, which will enable us to improve our quality of care. The data is kept in a secure manner and only staff involved in the research has access to them. You may be contacted at some time in the future for follow up purposes. No information that can be used to identify you will be included in any publication of the research results. You may withdraw from the research at any time.
• You may be contacted for follow up in the future to ensure the long-term results of your procedure.

What Personal Information Do We Collect?

We may collect the following information about you:

– Name, date of birth, address, contact details, emergency contact, and next of kin contact details.

– Medical information including medical history, medications, allergies, adverse events, immunisations, social history, family history, and risk factors.

– Medicare number (where available) for identification and claiming purposes.

– Healthcare identifiers.

– Health fund details. 

How Do We Collect Your Personal Information?

 Queensland Heart Specialists may collect your personal information in several ways:

1. Initial Appointment: During your first appointment, our staff will collect your personal and demographic information via a paper or online registration form.
2. Medical Services: We may collect additional personal information during the provision of medical services, including through electronic transfer of prescriptions (eTP) and My Health Record (e.g., via Shared Health Summary, Event Summary).
3. Communication: Personal information may also be collected when you visit our website, send us an email or SMS, telephone us, or make an online appointment. Due to security concerns, we request that you do not send private medical information to us.
4. Other Sources: Sometimes, we may collect personal information from other sources when it is not practical or reasonable to collect it directly from you. This may include information from your guardian, other healthcare providers, or your health fund.

When, Why, and With Whom Do We Share Your Personal Information?

We sometimes share your personal information:

– With third parties who work with our practice for business purposes, such as accreditation agencies or IT providers.

– With other healthcare providers.

– When required or authorised by law.

– When necessary to prevent a serious threat to life, health, or safety.

– To assist in locating a missing person.

– For legal claims and dispute resolution.

– For statutory requirements, such as mandatory disease notification.

– Through eTP and My Health Record during medical services.

We will not share your personal information with anyone outside Australia without your consent, unless permitted by law. We do not use your personal information for marketing without your express consent, and you can opt out of direct marketing at any time by notifying us in writing.

How Do We Store and Protect Your Personal Information? 

Your personal information is stored securely in electronic format. Any paper documents are scanned into your records and then shredded. X-rays, CT scans, and other images are the patient’s responsibility. Our electronic records are protected with individual passwords and confidentiality agreements signed by all staff and contractors. Daily encrypted backups are maintained securely. 

How Can You Access and Correct Your Personal Information? 

You have the right to request access to and correction of your personal information. Requests must be made in writing, and we will respond within a reasonable time, generally within 30 days. There will be a fee for the doctor’s time during your appointment to review your records. Requests must include a statement that they are not for legal purposes.

We take reasonable steps to ensure your information is accurate and up to date. You may request updates to your information in writing to The Practice Manager at Queensland Heart Specialists, Wesley Medical Centre, Suite 40 / 40 Chasely Street, Auchenflower QLD 4066, or via email at admin@qheart.org.

Health Information of Minors

Patients under 18 who are judged to be ‘mature minors’ can legally consent to their own treatment. Generally, patients aged 14 and over have the right to privacy and confidentiality. To access information from a minor’s file, the minor must sign a consent form for their parent.

How Can You Lodge a Privacy-Related Complaint? 

We take privacy complaints seriously. Please express any concerns in writing. We will attempt to resolve them in accordance with our resolution procedure. Contact us via:

1. Postal: Practice Manager, Queensland Heart Specialists, Wesley Medical Centre, Suite 40 / 40 Chasely Street, Auchenflower QLD 4066
2. Email: manager@qheart.org
3. Phone: 07 3007 9195 during business hours

Allow 30 days for a response. You may also contact the Office of the Australian Information Commissioner (OAIC) or the Office of the Health Ombudsman for further assistance.

 Privacy and Our Website

Our website is https://www.qheart.org/. Please do not send private medical information via email due to security risks. We will not send private health information to you via email without your express written consent. Our social media pages are for information and advertising only; please contact the surgery through the website or by phone. 

Cookies and Pixels 

Our website uses cookies to analyse traffic and improve the visitor experience. Cookies do not access personal information stored on your computer. You can choose to reject cookies by changing your browser settings, but this may limit website functionality. We may also use cookies and pixels for relevant ads through services like Google AdWords and Facebook. 

Policy Review Statement 

This privacy policy is reviewed annually and updated on our website. Patients will be informed of updates via the website, newsletters, or practice notifications. Printed copies are available upon request.