Privacy Policy

1. ABOUT THIS POLICY

Northern Rivers Allied Health Pty Ltd, trading as Northern Rivers Speech Pathology (ABN 78 644 460 800) is a private speech pathology practice owned by Bri Farrow

1.1 Purpose

We are committed to protecting your privacy in your dealings with us.

This Privacy Policy explains how Northern Rivers Speech Pathology (NRSP) manages the personal information that we collect, how this information is used within our practice, and the circumstances in which we may chare it with third parties.

NRSP complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988, the Health Records and Information Privacy Act 2002 (NSW), other privacy laws that govern how private sector health service providers like NRSP handle your personal information (including your health information), and Speech Pathology Australia’s Code of Ethics (2020).  This Policy is intended to reflect our obligations under the Privacy Laws.

2. HOW WE HANDLE YOUR PERSONAL INFORMATION

2.1 Legal Obligations

In order to provide you with the health care services that you have requested, NRSP will need to collect and use your personal information. If you provide incomplete or inaccurate information to us or withhold personal and health information from us, we may not be able to provide you with the services you are seeking.

2.2 What information does NRSP collect?

We will only collect the information we need for the particular function or activity we are carrying out.

We collect information from you that is necessary to provide you with speech pathology services and to manage our relationship with you. The information we collect includes: your name, date of birth, gender, address, contact details, health fund details, Medicare details, Department of Veteran Affairs details or National Disability Insurance Scheme details, information about your health history and family or social history and financial information relating to the ability of clients to pay for our products and services. We require this information to assist the speech pathologist to diagnose and treat you.

2.3 How does NRSP collect your personal and health information?

We will usually collect your health information directly from you. Sometimes, we may need to collect information about you from a third party (such as a someone authorised to act on a client’s behalf e.g. family member or carer or another service provider).

We will collect this information:

  • Via the telephone, email or SMS or when you make an initial appointment and complete the intake form.
  • During the course of providing health services (if further information is required or circumstances change)
  • With your consent, from third parties. This may include:
    • Other relevant healthcare providers such as your GP, medical specialists, allied health professionals, hospitals and community health services
    • Family support services, schools or aged care facilities
    • Your health fund, Medicare or NDIS (as necessary)
    • Someone who is authorised to act on your behalf such as a relative, carer, guardian, or another service provider.

This information may be collected verbally, in writing, by electronic communication, or via an online questionnaire or assessment tool.

2.4.How does NRSP use your information?

NRSP collects and uses your personal information for the purpose of providing speech pathology services to you, to manage our relationship with you and to contact you in relation to matters concerning your care. We may also use your information for other purposes permitted under the Privacy Act 1988.

Your information may be disclosed to the following people:

  1. disclosure to people working for or on behalf of NRSP or other professionals involved in your treatment/care.

    Your personal information will generally only be used by the speech pathologist involved in your care, however on occasion your care may be provided by a number of professionals (for example, speech pathologist, occupational therapist, psychologist, case manager, support coordinator etc.) working or consulting together. We may disclose your information to these professionals as part of the process of providing your care and to other health professionals involved in your care.

  2. the referrer

    NRSP will usually send a discharge summary to the referrer (i.e., your medical practitioner, case manager or support coordinator etc.) following discharge from NRSP or at other times, as required for your care.

    If you do not wish us to provide a copy of your discharge summary to the referrer, you must let us know. Also, if the referrer details have changed, please let us know.

  3. Relatives, guardian, close friends or legal representative

    With your consent, we may provide information about your condition to relatives, close personal friends, guardians, or to a responsible person for you.

Other uses and disclosures

In order to provide the best possible environment in which to treat you, we may also use or disclose your personal and health information where necessary for:

  • Activities such as quality assurance processes, accreditation, audits, risk and claims management, patient satisfaction surveys and staff education and training
  • Invoicing, billing and account management
  • To liaise with your health fund, Medicare, Department of Veteran’s Affairs or National Disability Insurance Agency and where required provide information to your health fund, Medicare, Department of Veteran’s Affairs or National Disability Insurance Agency to verify treatment provided to you;
  • The purpose of sending you standard reminders by SMS or email to the number or address which you have provided to us e.g. for appointments or follow-up care.
  • To provide you with news or offers about our products or services that may be of interest to you. These products and services will be related to our speech pathology business described above and will be products and services that we believe will be relevant to you. You have a right, at any time, to tell us that you do not want to receive this type of material.

2.5 How do we store and protect your information?

Your personal information may be stored at our practice in various forms e.g. paper records or electronic record.

Our practice stores all personal information securely. NRSP store your files in a password protected electronic health information system called Power Diary. Power Diary is ISO 27001 Certified (international cyber security standards), an Australian Cyber Security Centre member and complies with the Privacy Act 1988.

Paper records, such as letters, paper forms that you complete, assessments and reports are digitally scanned and uploaded to Power Diary, and then the paper records are securely destroyed. Any paper records that are not destroyed are stored securely in a locked filing cabinet.

2.6 Access and correction of your health information

You have a right to access the personal and health information that we hold about you. Should you wish to obtain access to your records at NRSP, we require you to send a request in writing to our Privacy Officer (see details below). We will aim to respond within 30 days and if it is reasonable and practicable to do so, give you access to the information in the manner requested by you.

You can also request an amendment to your personal and health information should you believe that it is inaccurate, out of date, incomplete or misleading. On receipt of your amendment request, we will take reasonable steps in the circumstances to correct the information. If we do not agree to change your medical record/personal information in accordance with your request, we will permit you to make a statement of the requested changes and we will enclose this with your record.

Please note that NRPS may recover reasonable costs associated with collating and supplying this information to you.

2.7 Data Quality

NRSP will take reasonable steps to ensure that your personal information which we may collect, use or disclose is accurate, complete and up to date.

2.8 Data Security

NRSP will take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. We use technologies and processes such as access control procedures, network firewalls, encryption and physical security to protect your privacy.

NRSP will destroy or permanently de-identify any of your information which is in its possession or control and which is no longer needed for the purpose for which it was collected provided.

Adult clients’ records (including health information) are stored for 7 years from the date of the last service provided. Records relating to children under 18 years old at the date of their last service are kept until they turn 25 years old.

Records of clients who have died are kept for at least 7 years after the date of death.

After the above time periods, records are destroyed securely by the professional storage facility.

2.9 Complaints about privacy issues

If:

(a) you have questions or comments about this Privacy Policy;

(b) NRSP does not agree to provide you with access to your personal information; or

(c) you have or a complaint about our information handling practices,

You can lodge a complaint with or contact our Privacy Officer on the details below. We will promptly review your complaint and provide a response to you.

Privacy Officer Contact Details:

Email: admin@nullnorthernriversspeech.com.au

Telephone: 0473 101 879

3. PHOTOS, VIDEOS AND AUDIO RECORDINGS

3.1 Using photos, videos and audio recordings

Photos, videos and audio recordings of a client may be taken as a part of the delivery of quality speech pathology services. This will only occur after written consent has been provided by the client or someone who had been authorised to act on their behalf. These may be recorded on a device belonging to NRSP or the client’s own device.

3.2 Storing and sharing photos, videos and audio recordings

All photos, videos and audio recordings will be stored securely in the client’s file on password protected devices. They will only be used during a client’s sessions for therapeutic purposes or provided via email or SMS for reference outside of the sessions. All video recordings are the property of NRSP and may not be released to anyone other than the client or someone who is authorised to act on their behalf unless written consent is obtained.

WANT MORE INFORMATION?

If you have any questions about this policy or have any concerns about the personal information you or others have given us about you, please contact us.

More information on the Privacy Act 1988 (Cth) can be found on the website of the Office of the Australian Information Commissioner.