Legal

Privacy Policy & Collection Statement

What we collect, why, who sees it, and how you get to it.

Version 1.0 · Effective 17 August 2026

1. 1. Who this applies to

   This policy applies to Power Physiotherapy and to everyone working in the practice. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and by the Health Records Act 2001 (Vic) and the Health Privacy Principles. The small business exemption in the Privacy Act does not apply to us: any organisation providing a health service and holding health information is covered, whatever its turnover.

2. 2. What we collect

   We collect only what we need to arrange and provide your care:

   • your name, contact details and date of birth;
   • health information — your history, symptoms, examination findings, diagnosis, treatment and progress;
   • where relevant, your claim, plan or membership details for a funder such as WorkCover, the TAC, an NDIS plan or a health fund;
   • correspondence with you, and with other practitioners involved in your care;
   • details you enter in the booking form on this website.

   Health information is sensitive information. We collect it with your consent, and only where it is reasonably necessary for your care.

3. 3. Why we collect it, and what we do with it

   To assess and treat you, to plan and review your care, to communicate with you about your appointments, to bill and claim where a funder is involved, and to meet our legal and professional record-keeping obligations.

   We do not sell your information. We do not use your health information for marketing.

4. 4. Who we share it with

   We disclose your information only:

   • to other practitioners involved in your care, with your consent — for example your GP, a specialist, or your care team;
   • to a funder you have asked us to bill, and only what that claim requires;
   • where we are required or authorised by law;
   • where there is a serious and imminent threat to someone’s life, health or safety.

   Where a service provider handles information on our behalf — for example our practice software or email — we require them to protect it on the same terms.

5. 5. How long we keep it

   We keep health records for at least 7 years from the date of your last service. Where a patient was under 18 at the time of the service, we keep the record until they turn 25. These are legal minimums, not preferences. After that, records are destroyed securely.

6. 6. Accessing and correcting your record

   You have a right to access your health record and to ask us to correct it if it is wrong. Ask us in writing at [email protected]. We will respond within 30 days.

   There are narrow circumstances in which access can be limited — for example where giving access would pose a serious threat to someone’s life or health, or would unreasonably affect another person’s privacy. If that applies we will tell you why in writing, and offer a way forward, such as access through a nominated practitioner.

7. 7. Keeping it secure, and what happens if something goes wrong

   Records are held in access-controlled systems, and only people involved in your care can see them.

   We are covered by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act. If a breach occurs that is likely to result in serious harm to you, we will contain it, assess it promptly, and notify you and the Office of the Australian Information Commissioner as the scheme requires.

8. 8. This website

   The booking form sends what you type to us, and stores it so that a request is never lost. We use privacy-respecting, cookieless analytics: no advertising cookies, no cross-site tracking, and no profiles. See our Website Terms of Use.

9. 9. Complaints about privacy

   Tell us first — see Feedback & Complaints. If you are not satisfied, you can take a health-information complaint to the Health Complaints Commissioner (Victoria) on 1300 582 113, or a privacy complaint to the Office of the Australian Information Commissioner.

Questions about this document: [email protected].