Crest Medical Centre is committed to protecting the privacy and confidentiality of all patient information in accordance with the Australian Privacy Principles as set out in the Privacy Act 1988 (Cth), and other relevant legislation.

1. Purpose This policy outlines how we collect, use, store, and disclose your personal and health information.
2. Collection of Information We collect personal and health information that is necessary to provide high-quality medical care and to comply with our legal obligations. This may include:

• Name, date of birth, address, and contact details
• Medicare and health insurance details
• Medical history and treatment notes
• Test results and reports
• Billing and payment information

Information is generally collected directly from you, but may also be obtained from other healthcare providers, family members (with consent), or other relevant sources.

3. Use and Disclosure Your personal information is used to:

• Provide medical services and treatment
• Communicate with other healthcare professionals involved in your care
• Manage our administrative and billing processes
• Comply with legal and regulatory requirements

We may disclose your information to:

• Other medical professionals and specialists
• Hospitals, pathology and diagnostic providers
• Medicare, health insurers, and regulatory bodies
• IT service providers (for secure data storage)

We will not use or disclose your information for any other purpose without your consent, unless required by law.

4. Storage and Security We take all reasonable steps to ensure your personal information is stored securely, whether in electronic or paper format. Access is restricted to authorised staff only. Our systems are protected with passwords, secure networks, and data encryption.
5. Access and Correction You have the right to request access to your personal information and to request corrections if it is inaccurate, incomplete, or outdated. Requests can be made in writing to our Practice Manager.
6. Complaints If you have a concern or complaint about how your information has been handled, please contact our Practice Manager. If your issue is not resolved, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
7. Changes to This Policy This Privacy Policy may be updated periodically to reflect changes in legislation or practice procedures. The current version will always be available at reception and on our website.