Privacy Policy
1. Our Commitment to Privacy
Corio Physio Group (“we”, “our”, or “us”) is committed to protecting your privacy and managing your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how we collect, hold, use, and disclose your personal information, including sensitive health information, and how you may access or correct that information.
2. What Personal Information We Collect
We collect personal information that is reasonably necessary to provide physiotherapy and related healthcare services.
a. Personal Information
This may include:
-
Full name
-
Date of birth
-
Address
-
Phone number
-
Email address
-
Emergency contact details
-
Occupation
b. Sensitive Information (Health Information)
As a healthcare provider, we collect sensitive information including:
-
Medical history
-
Injury details
-
Treatment notes and clinical records
-
Diagnostic reports
-
Referral letters
-
Progress reports
Under the Privacy Act 1988, health information is classified as sensitive information and is given a higher level of protection.
3. How We Collect Personal Information
We may collect your personal information:
-
Directly from you (in person, via forms, phone, email, or website bookings)
-
From referring doctors or healthcare providers
-
From insurers or compensation bodies
-
Through our website (via contact forms or online booking systems)
Where reasonable and practicable, we collect information directly from you.
4. Why We Collect, Hold and Use Your Information
We collect and use your personal information to:
-
Provide physiotherapy and healthcare services
-
Assess and manage your treatment plan
-
Communicate with you about appointments and care
-
Process payments and claims
-
Comply with legal and regulatory obligations
-
Manage our practice operations
We will only use or disclose your information for the primary purpose for which it was collected, or for related purposes permitted under the Australian Privacy Principles.
5. Disclosure of Personal Information
We may disclose your personal information to:
-
Referring doctors and other healthcare professionals involved in your care
-
Insurance providers
-
Compensation authorities
-
Medicare and other government agencies
-
IT service providers and practice management software providers
-
Legal or regulatory authorities when required by law
We do not sell, rent, or trade your personal information.
6. NDIS, WorkCover, TAC and Medicare
Where your treatment is funded or supported by a third party, we may be required to collect and disclose information to relevant agencies, including:
-
National Disability Insurance Scheme (NDIS)
-
WorkCover Victoria
-
Transport Accident Commission (TAC)
-
Medicare
This may include:
-
Treatment reports
-
Progress notes
-
Attendance records
-
Invoices and billing information
-
Functional capacity assessments
By engaging our services under these schemes, you consent to the disclosure of relevant information required to process claims and comply with funding obligations.
7. Data Security and Storage
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
Security measures include:
-
Secure electronic practice management systems
-
Password-protected access
-
Restricted staff access to health records
-
Secure storage of physical files
We retain health records for the period required by Australian law.
8. Website, Cookies and Analytics
Our website may use cookies and analytics tools to improve functionality and user experience. These tools may collect non-identifiable information such as IP address, browser type, and pages visited.
You may disable cookies via your browser settings; however, this may affect website performance.
9. Access and Correction of Personal Information
You have the right to request access to the personal information we hold about you and request correction if it is inaccurate, incomplete, or out of date.
Requests for access or correction should be made in writing using the contact details below. We will respond within a reasonable timeframe and in accordance with the Australian Privacy Principles.
10. Complaints
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us.
We will investigate your complaint and respond in writing within a reasonable period.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
11. Overseas Disclosure
We do not routinely disclose personal information overseas. If we do so (for example, through cloud-based service providers), we will take reasonable steps to ensure the overseas recipient complies with the Australian Privacy Principles.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website with the updated effective date.
13. Contact Us
If you have questions about this Privacy Policy or wish to access or correct your information, please contact: