Privacy Policy

Introduction

This Privacy Policy provides information on how your personal information—including sensitive information such as health information—is collected, used, and stored at Gillieston Heights Medical Centre & Skin Cancer Clinic, operated by Distinction Health Pty Ltd ACN 660 037 463 as Trustee for Ultimate Health Unit Trust. It also explains the circumstances in which your information may be shared with third parties.

Why and How Your Consent is Necessary

By registering as a patient, you consent to your personal information being accessed and used by our employees, agents, contractors, and independent practitioners consulting from our practice. Your information is used to provide healthcare services and will only be accessed by those who need it. For any other purposes, we will seek your additional consent.

Why We Collect, Use, Hold and Share Your Personal Information

We collect personal information to facilitate healthcare services, manage your health, and conduct directly related business activities.

  • Financial claims and payments
  • Practice audits and accreditation
  • Staff training and operational processes
What Personal Information We Collect

We may collect your:

  • Names, date of birth, addresses, contact details including emergency contact and next of kin
  • Demographic information: gender, cultural background, religious beliefs
  • Medical information: history, medications, allergies, adverse events, immunisations, social history, family history, risk factors
  • Medicare number (if available) and healthcare identifiers
  • Payment/financial information, concession card details, and health fund details
Dealing with Us Anonymously

You may deal with us anonymously or under a pseudonym where practicable. Medicare rebates require identification, and you may need to pay in full if anonymity is requested.

How We Collect Your Personal Information

We may collect personal information in several ways: directly from you during appointments or registrations; from practitioners consulting from our practice; through My Health Record (Shared Health Summary, Event Summary, or Discharge Summary); via website, email, SMS, phone, online appointments, or social media; or from other sources when direct collection is impractical, such as guardians, other healthcare providers, or government agencies.

When, Why, and With Whom We Use and Share Your Personal Information

We may share information to facilitate healthcare services:

  • With other healthcare providers
  • Where required by law
  • To prevent serious threats to health or safety
  • To assist in locating a missing person
  • For claims, dispute resolution, or nursing support services
  • For My Health Record uploads
  • With third-party service providers who must comply with APPs

We do not share personal information outside Australia except as legally permitted and will not use it for direct marketing without your consent. De-identified data may be used for research or population health purposes, with an opt-out available.

Heidi Health AI Program

Practitioners may use Heidi, an AI program, to summarise and record appointments. Notes will be reviewed before use in medical advice. We are not liable for any actions by Heidi Health Trading Pty Ltd. For more information, see the Heidi Health Privacy Policy.

How We Store and Protect Your Information

Your information may be stored as electronic records, visual records, and archived paper records.

  • Password protection and encryption
  • Confidentiality agreements for staff
  • Secure cabinets and locked server rooms
  • Firewalls and antivirus software
  • Regular server patching and backups
  • Retention for 7 years or until age 25, then destruction or de-identification
Cliniko & Red Guava

We use Cliniko Best Practice Software for practice management. Red Guava Pty Ltd manages storage. Copies of the Red Guava Privacy Policy are available at reception or online.

Access and Correction of Your Personal Information

You may request access or correction by contacting: manager@gilliestongp.com.au or (02) 4033 0490. Requests will be acknowledged within 3 business days. Reasonable costs may apply.

Privacy-Related Complaints

Submit complaints in writing to the Practice Manager at 2/3 Redwood Drive, Gillieston Heights NSW 2321 or via email: manager@gilliestongp.com.au. Acknowledgement within 3 business days; response within 30 days. Complaints can also be made to the Office of the Australian Information Commissioner (OAIC) or by calling 1300 363 992.

Privacy and Our Website

Social media interactions may collect your name. Cookies are used on the website; you may control cookies via your browser. Links to third-party sites are provided; we are not responsible for their content or privacy practices.

Privacy Statement Review

This policy is reviewed annually to ensure compliance with legal requirements.
Last reviewed: 11 July 2025