Clinic Policy Center

Your Spine & Your Wellness is committed to protecting your personal and sensitive health information. This Privacy Policy details how we collect, hold, use, and disclose your personal and health information in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and local health records legislation.

1. Collection of Personal & Sensitive Information

We collect personal information necessary to provide you with safe, professional chiropractic care and clinic administrative services. The information we collect includes:

• Personal Details: Full name, date of birth, gender, address, phone number, email address, and emergency contact details.
• Sensitive Health Information: Medical history, physical symptoms, diagnostic scans (X-rays, MRIs), details of treatment received, and lifestyle factors relating to musculoskeletal health.
• Billing Details: Private health insurance claims identifiers, Medicare numbers, and transaction details.

2. How We Collect Information

We collect information directly from you through:

• Online booking forms and onboarding questionnaires.
• Clinical intake sheets and consult records completed at the clinic.
• Consultations, physical examinations, and patient history interviews.

3. Use and Disclosure

Your information is used solely for the following purposes:

• Developing and implementing personalized chiropractic treatment plans.
• Managing appointments, scheduling reminders, and billing HICAPS/insurance systems.
• Communicating with your designated primary care physician or other healthcare providers (only with your explicit consent).

We will not sell, rent, or disclose your sensitive health information to third parties without your consent, except where required or permitted by Australian law (such as preventing a serious threat to life, health, or safety).

4. Storage and Data Security

We take reasonable steps to protect personal information from misuse, loss, unauthorized access, modification, or disclosure. Digital records are stored in secure cloud systems using industry-standard encryption, role-based access control (RBAC), and multi-factor authentication (MFA) aligned with the ACSC Essential Eight framework.

5. Access and Correction

Under the APPs, you have the right to request access to and correction of the personal and health information we hold about you. To request access, please contact our Privacy Officer at the details below. We will respond within 30 days and provide access unless legal exclusions apply.

6. Complaints and Contact Information

If you have questions or wish to lodge a complaint about a potential breach of the Australian Privacy Principles, please contact:

If you are unsatisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.