Privacy and Cookie Policy
Effective Date: 25.10.2025 Reviewed: Annually or when legislative changes occur
At East Geelong Osteopathy, your privacy and trust are central to the way we deliver care. This Privacy and Cookie Policy outlines how we collect, use, store, and protect your personal and health information, in line with the Privacy Act 1988 (Cth), the Privacy and Other Legislation Amendment Act 2024 (POLA), and the Australian Privacy Principles (APPs).
We are committed to managing your information ethically, transparently, and securely, and to helping you understand your rights under Australia’s updated privacy framework.
1. Purpose of This Policy
This Policy explains:
● What personal and health information we collect and why;
● How we use and protect your information;
● Your rights to access, correct, or request deletion of your information;
● How cookies and analytics are used on our website; and
● How to contact us about privacy concerns or complaints.
2. What Has Changed Under the 2024 Privacy Reforms
In line with the Privacy and Other Legislation Amendment Act 2024, this policy reflects key updates that affect all Australian healthcare providers, including:
● Broader definitions of “personal information” and “sensitive information” (now covering inferred data and digital identifiers);
● Increased obligations to notify and respond to data breaches;
● Higher penalties for serious or repeated privacy breaches;
● A new statutory tort for serious invasions of privacy; and
● Expanded enforcement powers for the Office of the Australian Information Commissioner (OAIC).
We have reviewed and updated our systems, consent forms, and privacy procedures to ensure full compliance with these changes.
3. Information We Collect
We collect personal information necessary to provide safe, effective, and professional healthcare. This may include:
● Personal details: name, date of birth, address, phone number, email;
● Health information: medical history, presenting complaints, treatment notes, and relevant referrals;
● Payment details: for billing and insurance processing;
● Digital information: such as website usage data, browser type, and IP address (see Cookies below).
Where possible, we collect this information directly from you. In some cases, we may receive information from referring practitioners, insurers, or healthcare partners (with your consent).
4. How We Use Your Information
Your information is used only for purposes directly related to your care or clinic operations, including to:
● Provide osteopathic and allied health services;
● Communicate with you regarding appointments, reports, or treatment follow-ups;
● Coordinate care with your consented healthcare team;
● Process payments and insurance claims;
● Maintain secure clinical and administrative records;
● Improve our services, website, and patient experience.
We will never sell or disclose your personal information to third parties for marketing or unrelated purposes.
5. Consent and Patient Rights
We obtain your consent before collecting or sharing your information, except where required by law (e.g. serious threat to health or mandatory reporting).
You have the right to:
● Access your personal or health records;
● Request corrections or updates;
● Withdraw consent for certain uses;
● Request deletion where retention is no longer legally required;
● Make a complaint about a privacy concern.
To exercise these rights, please contact our Privacy Officer (details below).
6. Website Data and Cookies
Our website, www.eastgeelongosteopathy.com.au, uses cookies and analytics tools to enhance user experience and monitor website performance.
Cookies
Cookies are small data files stored on your browser. They help us:
● Understand how visitors use our website;
● Improve site functionality and performance;
● Remember user preferences and accessibility settings.
You can adjust your browser settings to refuse or delete cookies. However, disabling cookies may limit some website features.
Analytics and Third-Party Tools
We may use trusted third-party analytics services (e.g. Google Analytics) to understand website traffic. These services may collect anonymised data such as IP addresses, browser type, session duration, and
pages visited. All data is de-identified and used solely to improve website performance and accessibility.
7. Data Security
We apply strict technical and administrative measures to protect your personal and health information from misuse, loss, unauthorised access, modification, or disclosure.
These include:
● Secure, password-protected clinical software and encrypted servers;
● Access restrictions for authorised personnel only;
● Regular software updates and cybersecurity monitoring;
● Staff training in privacy and data security obligations; and
● Rapid response protocols for suspected or actual data breaches.
Under the Notifiable Data Breaches (NDB) Scheme, we will promptly inform you and the OAIC if a data breach occurs that is likely to cause serious harm.
8. Marketing and Communications
We may use your contact information to share appointment reminders, clinic updates, or educational materials. You may opt out of non-essential communications at any time by following the unsubscribe link or contacting us directly. We will never send marketing messages without your consent.
9. Data Retention
We retain clinical records for the period required by law (generally 7 years, or until a minor patient turns 25 years of age). After this period, information is securely destroyed or anonymised in accordance with professional standards.
10. Cross-Border Data Handling
We do not routinely transfer your personal information overseas. If cross-border data sharing is ever required (for example, cloud-based storage or telehealth
platforms), we ensure that the recipient meets Australian Privacy Principle 8 (APP 8) standards and provides equivalent protection to Australian privacy law.
11. Your Right to Privacy and Redress
If you believe your privacy has been breached, please contact our Privacy Officer so that we can investigate and resolve the matter promptly. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
12. Updates to This Policy
We review this policy regularly to ensure it remains current with legislation, technology, and clinical practice. Any updates will be published on this page with the revised date. By continuing to use our website or services after such changes, you accept the updated policy.
✅ Summary of Your Privacy Rights
● Your data belongs to you.
● You can request access, correction, or deletion at any time.
● We never sell your information.
● We comply fully with the Privacy Act 1988 (Cth) and the Privacy and Other Legislation Amendment Act 2024 (POLA).
● We take privacy, confidentiality, and data security seriously — as part of our ethical and professional commitment to patient care.
Questions or Concerns
If you have questions about this Privacy and Cookie Policy or wish to exercise your rights, please contact:
East Geelong Osteopathy 143 Mckillop Street Geelong 3220 | 1-3 Cylinders Drive Torquay 3228 info@eastgeelongosteopathy.com.au 5229 5834