1. Introduction

1.1 Perth Health Collective (“we”, “us”, “our”) is committed to protecting the privacy and confidentiality of personal information that we collect, hold and manage.

1.2 This Privacy Policy outlines how we handle personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

1.3 This Privacy Policy applies to personal information collected in connection with:

(a) consultations and clinical services;

(b) appointment bookings and enquiries;

(c) intake forms and patient communications;

(d) our website and associated digital platforms; and

(e) our administrative and business operations.

2. definitions

2.1 Personal information has the meaning given in the Privacy Act 1988 (Cth) and includes information or an opinion about an identified individual, or an individual who is reasonably identifiable.

2.2 Sensitive information includes health information and other information subject to higher privacy protections under the Privacy Act 1988 (Cth).

3. personal information we collect

3.1 We may collect personal information reasonably necessary to provide our services, including but not limited to:

(a) name, residential address, email address and telephone number;

(b) date of birth;

(c) emergency contact details;

(d) appointment and booking information;

(e) clinical notes and treatment records;

(f) health history including symptoms, diagnoses, test results, allergies, medications and supplements;

(g) referral information and correspondence with other health professionals (where applicable); and

(h) billing and payment-related information (including invoices and transaction records).

3.2 Where permitted and applicable, we may also collect information required for operational, legal or professional obligations.

4. how we collect Personal Information

4.1 We aim to collect personal information directly from you wherever possible, including through:

(a) appointment bookings (online, telehealth, phone or in-person);

(b) pre-consultation and intake forms;

(c) consultations and follow-up appointments;

(d) communications via email, SMS or telephone; and

(e) our website enquiry forms.

4.2 In some circumstances, we may collect personal information from third parties, including:

(a) other healthcare providers (e.g. referrals, correspondence or test results);

(b) a parent, guardian, carer or authorised representative; or

(c) other parties where you have provided consent or where collection is authorised or required by law.

5. purposes of collection, use & disclosure

5.1 We collect, use and disclose personal information for the primary purpose of providing health services, including:

(a) assessing your needs and providing personalised care;

(b) developing treatment plans and providing follow-up care;

(c) maintaining accurate clinical records; and

(d) communicating with you about your care and appointments.

5.2 We may also use personal information for secondary purposes related to our operations, including:

(a) managing and administering our clinic;

(b) processing payments, accounts and invoicing;

(c) quality assurance, risk management and staff training; and

(d) meeting legal, regulatory, professional, insurance and taxation obligations.

5.3 Where required by law, we will obtain your consent for the collection, use or disclosure of sensitive information.

6. disclosure of Personal Information

6.1 We will only disclose your personal information:

(a) with your explicit consent; or

(b) where the disclosure is required or authorised by law; or

(c) in emergency circumstances where your health or safety (or the safety of another person) is at risk and you are unable to provide consent.

6.2 With your explicit consent, we may disclose your personal information to:

(a) other health professionals involved in your care (e.g. referring or coordinating treatment);

(b) pathology or diagnostic service providers (where relevant);

(c) your nominated guardian, parent, carer or authorised representative; and/or

(d) other parties you request or authorise us to communicate with.

6.2 We may disclose personal information to trusted third-party service providers who assist us in operating our clinic, including providers of:

(a) practice management, booking and patient communication systems;

(b) online forms and data collection systems;

(c) secure telehealth and communication services;

(d) payment processing and invoicing systems;

(e) IT support and cybersecurity services; and

(f) secure cloud storage.

6.3 We take reasonable steps to ensure third-party service providers handle personal information securely and in accordance with applicable privacy requirements.

7. overseas disclosure

7.1 Some third-party service providers we engage may store, process or access personal information outside Australia (for example, where cloud infrastructure is hosted overseas).

7.2 Where overseas disclosure occurs, we take reasonable steps to ensure overseas recipients handle personal information in a manner consistent with Australian privacy requirements.

8. direct marketing

8.1 We may send communications related to appointments and services that are relevant to your care.

8.2 If we send direct marketing communications (such as newsletters or promotional offers), you may opt out at any time by:

(a) using the unsubscribe link (if applicable); or

(b) contacting our clinic directly.

8.3 We do not use sensitive information for direct marketing.

9. Storage & Security of Personal information

9.1 We take reasonable steps to protect personal information we hold from misuse, interference, loss, unauthorised access, modification or disclosure.

9.2 Security measures may include:
(a) restricted access to authorised personnel;
(b) secure electronic systems and password protection;
(c) secure storage of physical records; and
(d) use of secure third-party platforms for payment processing.

10. Access & Correction

10.1 You may request access to personal information we hold about you and request correction if the information is inaccurate, incomplete, out-of-date or misleading.

10.2 Requests must be made in writing to our Privacy Officer.

10.3 We may require identity verification prior to providing access to personal information.

10.4 We aim to respond to access or correction requests within a reasonable timeframe.

11. Complaints

11.1 If you have a concern or complaint about how we manage personal information, you may contact our Privacy Officer using the details provided in Clause 14.

11.2 We will investigate and respond to complaints as quickly as possible.

11.3 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
(a) Website: oaic.gov.au
(b) Phone: 1300 363 992

12. Notifiable Data Breaches

12.1 If we become aware of a data breach that is likely to result in serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the OAIC as required.

13. Updates to this Policy

13.1 This Privacy Policy may be updated from time to time to reflect changes to our practices or legal obligations.

13.2 We encourage you to review this Privacy Policy periodically.

14. Contact information

For any questions, access/ correction requests or complaints, please contact our Privacy Officer at:

Perth Health Collective
Email: accounts@perthhealthcollective.com.au
Phone: 08 6374 6400

This Privacy Policy is effective as of 20 March 2024.

Last updated 23rd January, 2026