Privacy Policy

1. Introduction Welcome to HelloGP Pty Ltd (A.C.N. 670 848 549). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information in compliance with Australian privacy laws and the Australian Privacy Principles (APPs).
   
   
   
2. Types of Health Information Collected We collect various types of health information, including:
   
   

• Personal Identification Details: Full name, date of birth, contact information, and other identifying details.
• Medical History: Past and current health conditions, treatments, medications, allergies, and test results.
• Sensitive Information: Gender at birth, Aboriginal or Torres Strait Islander heritage, government identifiers (e.g., Medicare numbers).
• General Information: Details about your general practitioner, preferences, opinions, and feedback from patient surveys.
• Additional Information: Information provided by Partner Doctors or Partner Providers during consultations or treatment.
  
  
  

3. How Health Information is Collected We collect health information through:
   
   

• Patient Forms: Completed during the appointment booking process.
• Consultations: Conducted via video conference with our registered medical practitioners.
• Supplementary Information: Provided directly by you or through third parties, such as referrals from other healthcare providers.
• Patient Surveys: Insights derived from feedback surveys.
• Consultation Records: Detailed notes from consultations and interactions with you.
  
  
  

4. Consent for Collection of Health Information
   
   

• Obtaining Consent: We obtain explicit consent from you before collecting, using, or disclosing your health information. This consent is documented in the clinical notes by our practitioners.
• Consent for Specific Uses: You will be informed and asked for consent if your information will be used for purposes other than those initially specified.
• Exceptions: In emergency situations or when required by law, consent may be implied or not sought.
  
  
  

5. Purpose of Collecting Health Information We collect health information for:
   
   

• Healthcare Management: To diagnose, treat, and manage your healthcare needs effectively.
• Service Improvement: To enhance the quality of our services and ensure effective care.
• Legal and Regulatory Compliance: To fulfill reporting requirements and adhere to legal obligations.
• Communication: To communicate with you regarding your health and our services.
• Records and Research: To maintain accurate records, conduct research, and improve our services.
• Payments and Billing: To process payments and handle billing.
• Business Operations: For internal tasks, analytics, market research, and business development.
• Emergency Situations: To contact emergency services when necessary.
• Business Transitions: In the event of a business transfer, merger, or acquisition, your information may be transferred as part of the business assets.
• Legal Compliance: To assist with legal compliance and cooperate with government or law enforcement agencies.
  
  
  

6. Use and Disclosure of Health Information
   
   

• Healthcare Providers: We may share information with other healthcare providers involved in your care, with your consent.
• Health Insurers and Government Bodies: Information may be disclosed to health insurers or government agencies like Medicare or My Health Record, as required by law.
• International Disclosure: We do not share health information internationally. Any necessary information will be shared with you for further dissemination.
• Third-Party Service Providers: Includes IT service providers, data storage, web hosting, and server providers.
• Employees and Contractors: Information may be shared with employees, contractors, and related entities.
• Business Partners: We may disclose information to current or potential agents, business partners, sponsors, or promoters.
• Legal and Regulatory Bodies: Includes disclosure to credit reporting agencies, courts, and regulatory authorities as required.
  
  
  

7. Patient Access and Correction of Health Information
   
   

• Access: You have the right to access your health information. Requests can be made through our online portal or by contacting us via email at hello@hellogp.com.au
• Correction: You may request corrections to your health information if it is inaccurate or incomplete. We will take reasonable steps to amend the information and notify you of the changes.
  
  
  

8. Handling of Health Information Under the My Health Record System
   
   

• Integration: We do not directly integrate with the My Health Record system. Information may be sent to your regular GP, who may then upload it to My Health Record if required.
  
  
  

9. Storage and Security of Health Information
   
   

• Security Measures: We implement various security measures to protect your information, including:
  • Password Protection: Secure password setup for Platform access; authentication methods for password changes.
  • Secure Storage and Handling: Utilization of firewalls, encryption, data segregation, backup, and authentication procedures.
  • Interoperability: Adherence to robust interoperability requirements to ensure data protection during transfers.
• Data Security: While we strive to protect data, absolute security cannot be guaranteed. We have a data breach response plan to manage unauthorized access or disclosure.
  
  
  

10. Retention and Disposal of Health Information
    
    

• Retention: Health information is retained in accordance with Australian laws and regulations for as long as necessary for legal, operational, and healthcare purposes.
• Disposal: When health information is no longer required, it is disposed of securely to prevent unauthorized access or misuse.
  
  
  

11. Disclosure to Family, Carers, or Other Third Parties
    
    

• Conditions: Disclosure to family members, carers, or other third parties is permissible under specific circumstances, such as legal requirements, emergencies, or with your explicit consent. For minors or in legally mandated situations, decisions are made by authorized practitioners in accordance with relevant laws.
  
  
  

12. Complaints About Health Information Handling
    
    

• Process: If you have concerns or complaints regarding the handling of your health information, please contact us at hello@hellogp.com.au. We will investigate your complaint and respond in a timely manner. If you are not satisfied with our response, you may escalate the matter to the Office of the Australian Information Commissioner (OAIC).
  
  
  

13. Mandatory Data Breach Notification
    
    

• Notification: In the event of a data breach involving your health information, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.
  
  
  

14. Policy Amendments
    
    

• Updates: This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. We encourage you to review this policy periodically to stay informed about how we protect your personal information.
  
  
  

15. Contact Information
    
    

• Inquiries: For inquiries related to this Privacy Policy or to exercise your rights, please contact our privacy officer at hello@hellogp.com.au
  
  

This Privacy Policy is effective as of 9^th September 2024