Privacy Policy

1. Our Commitment to Privacy

Corio Physio Group (“we”, “our”, or “us”) is committed to protecting your privacy and managing your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, hold, use, and disclose your personal information, including sensitive health information, and how you may access or correct that information.


2. What Personal Information We Collect

We collect personal information that is reasonably necessary to provide physiotherapy and related healthcare services.

a. Personal Information

This may include:

  • Full name

  • Date of birth

  • Address

  • Phone number

  • Email address

  • Emergency contact details

  • Occupation

b. Sensitive Information (Health Information)

As a healthcare provider, we collect sensitive information including:

  • Medical history

  • Injury details

  • Treatment notes and clinical records

  • Diagnostic reports

  • Referral letters

  • Progress reports

Under the Privacy Act 1988, health information is classified as sensitive information and is given a higher level of protection.


3. How We Collect Personal Information

We may collect your personal information:

  • Directly from you (in person, via forms, phone, email, or website bookings)

  • From referring doctors or healthcare providers

  • From insurers or compensation bodies

  • Through our website (via contact forms or online booking systems)

Where reasonable and practicable, we collect information directly from you.


4. Why We Collect, Hold and Use Your Information

We collect and use your personal information to:

  • Provide physiotherapy and healthcare services

  • Assess and manage your treatment plan

  • Communicate with you about appointments and care

  • Process payments and claims

  • Comply with legal and regulatory obligations

  • Manage our practice operations

We will only use or disclose your information for the primary purpose for which it was collected, or for related purposes permitted under the Australian Privacy Principles.


5. Disclosure of Personal Information

We may disclose your personal information to:

  • Referring doctors and other healthcare professionals involved in your care

  • Insurance providers

  • Compensation authorities

  • Medicare and other government agencies

  • IT service providers and practice management software providers

  • Legal or regulatory authorities when required by law

We do not sell, rent, or trade your personal information.


6. NDIS, WorkCover, TAC and Medicare

Where your treatment is funded or supported by a third party, we may be required to collect and disclose information to relevant agencies, including:

  • National Disability Insurance Scheme (NDIS)

  • WorkCover Victoria

  • Transport Accident Commission (TAC)

  • Medicare

This may include:

  • Treatment reports

  • Progress notes

  • Attendance records

  • Invoices and billing information

  • Functional capacity assessments

By engaging our services under these schemes, you consent to the disclosure of relevant information required to process claims and comply with funding obligations.


7. Data Security and Storage

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Security measures include:

  • Secure electronic practice management systems

  • Password-protected access

  • Restricted staff access to health records

  • Secure storage of physical files

We retain health records for the period required by Australian law.


8. Website, Cookies and Analytics

Our website may use cookies and analytics tools to improve functionality and user experience. These tools may collect non-identifiable information such as IP address, browser type, and pages visited.

You may disable cookies via your browser settings; however, this may affect website performance.


9. Access and Correction of Personal Information

You have the right to request access to the personal information we hold about you and request correction if it is inaccurate, incomplete, or out of date.

Requests for access or correction should be made in writing using the contact details below. We will respond within a reasonable timeframe and in accordance with the Australian Privacy Principles.


10. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us.

We will investigate your complaint and respond in writing within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).


11. Overseas Disclosure

We do not routinely disclose personal information overseas. If we do so (for example, through cloud-based service providers), we will take reasonable steps to ensure the overseas recipient complies with the Australian Privacy Principles.


12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the updated effective date.


13. Contact Us

If you have questions about this Privacy Policy or wish to access or correct your information, please contact:

Corio Physio Group