Privacy Policy

How MindBody&YOU Physiotherapy collects, uses, stores and protects personal and health information.

Our Commitment to Your Privacy

MindBody&YOU Physiotherapy is committed to protecting your privacy and handling your personal and health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Some client information may also be stored securely through Gladstone Central Medical Centre, where the physiotherapy clinic is primarily located. Please also refer to the Privacy Policy of Gladstone Central Medical Centre for further information regarding their information handling practices.

This Privacy Policy Explains

• What information we collect and hold
• How and why we collect it
• How your information may be used or shared
• How you may access or correct your information
• How to make a privacy complaint
• Whether information may be disclosed overseas

What Personal Information Do We Collect?

We may collect personal and health information including:

• Your name, address, date of birth and contact details
• Emergency contact or family information
• Information about healthcare providers involved in your care
• Medicare, DVA or health fund details
• Relevant medical history, symptoms, diagnoses and treatment information
• Specialist reports and test results
• Appointment, billing and referral information
• Healthcare identifiers and other information required to provide physiotherapy services

How Do We Collect Your Information?

Information is generally collected:

• Directly from you during appointments, phone calls or forms
• From a person responsible for your care
• From other healthcare providers involved in your treatment
• From insurers, Medicare, My Health Record or other authorised third parties where permitted by law

Why Do We Collect Your Information?

Your information is primarily collected to:

• Provide physiotherapy assessment and treatment
• Communicate with you and others involved in your care
• Maintain clinical records
• Manage appointments, billing and administrative services
• Support quality assurance, accreditation and professional obligations

When May Information Be Shared?

Your information may be shared where required or permitted by law, including:

• With other healthcare professionals involved in your care
• With Medicare, insurers or health funds
• For legal or regulatory requirements
• To prevent serious threats to health or safety
• For My Health Record where applicable
• With service providers assisting with secure administration or IT systems

Accessing and Correcting Your Information

You have the right to seek access to and correction of the personal information we hold about you. Gladstone Central Medical Centre acknowledges patients may request access to their medical records. We require you to put this request in writing to the Practice and we will respond within a reasonable time.

We aim to respond within 14 days for electronic records and within 30 days where records are held in paper format. A fee may apply depending on the size of your records.

We will take reasonable steps to correct your personal information where the information is not accurate or up to date. From time to time, we may also ask you to verify that the information we hold about you is correct and current. Please notify us if your contact details change so that we can keep our records accurate and up to date.

Security: How We Hold Your Personal Information

We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification or disclosure. Information may be stored in secure electronic clinical record and practice management systems, including secure cloud-based platforms used to support the delivery of physiotherapy services. Appropriate security measures are implemented to protect the confidentiality and privacy of your information.

Security measures may include:

• Secure electronic clinical records and cloud-based storage systems
• Secure storage of paper records in lockable cabinets where applicable
• Strong password protection and controlled access to electronic records
• Access to information restricted on a need-to-know basis
• Confidentiality obligations for staff and contractors where applicable
• Training and awareness regarding privacy, confidentiality and information security
• Secure handling, storage and disposal of personal information

Where records are stored or managed through Gladstone Central Medical Centre, information is maintained in accordance with the Royal Australian College of General Practitioners (RACGP) Computer and Information Security Standards (CISS) and the Gladstone Central Medical Centre Business Continuity Plan.

Your Right to Receive Treatment Anonymously

Where it is lawful and practicable for us to do so, you can be treated anonymously or through use of a pseudonym, which is a name other than your own.

Disclosing Information About You Overseas

We do not generally disclose personal information to overseas recipients. If we want to transfer your personal information overseas, we will first seek your consent, unless we are required by law to do the transfer.

If You Have a Privacy-Related Concern About Us

If you have concerns about the way we have handled your privacy, please let us know in writing. We will try to respond to you within 30 days.

If you are not satisfied with our response, you can refer your complaint to the Office of the Australian Information Commissioner (OAIC).

Updating This Policy

We will update this policy from time to time to reflect any changes in our information-handling practices, the law, or both. We will notify users of changes to this policy by posting the updated version on our website.

How to Contact Us

To contact us about privacy-related issues, please email: