Privacy Policy

Privacy Policy

1. Introduction

Solum Clinic is committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how we collect, use, store, and disclose your information in compliance with Australian privacy laws.
By using our services, you consent to the collection and handling of your information in accordance with this policy.

 

2. What Information We Collect

We may collect the following types of information:

  1. Personal Information: 
    1. Full name, date of birth, gender, and contact details (email, phone number, address). 
    2. Identification details (e.g., Medicare number, driver’s licence).
  2. Health Information:
    1. Medical history, current health conditions, medications, and treatment plans. 
    2. Consultation notes, prescriptions, and referrals.
  3. Payment Information: 
    1. Billing details and transaction history.
    2. Payment details processed through secure third-party providers (we do not store full payment card details).
  4. Website and Usage Data: 
    1. IP address, browser type, and device information. 
    2. Interaction with our website, including cookies (see Section 8).

 

3. How We Collect Information

We collect personal and health information: 

  • Directly from you when you register, book a consultation, or submit a form.
  • During consultations via telehealth appointments.
  • From third parties (e.g., healthcare providers, pharmacies, or Medicare) with your consent.

 

4. How We Use Your Information

We use your information for the following purposes:

  • Providing telehealth consultations and medical treatment.
  • Processing prescriptions and coordinating with pharmacies.
  • Complying with legal and regulatory obligations.
  • Improving our services and patient care.
  • Sending appointment reminders and important clinic updates.
  • Processing payments and issuing invoices.
  • We do not sell your personal data to third parties.

 

5. Who We Share Your Information With

We may share your information with:

  • Healthcare professionals involved in your care.
  • Partner pharmacies for dispensing prescribed medications.
  • Regulatory bodies where legally required (e.g., AHPRA, TGA, Medicare).
  • IT service providers who support our systems (bound by confidentiality agreements).
  • Where possible, we will de-identify your data before sharing it for research or analysis purposes.

 

6. How We Protect Your Information

We take reasonable steps to protect your information from misuse, loss, and unauthorised access, including:

  • Secure encryption for data storage and transmission.
  • Access restrictions to authorised personnel only.
  • Regular security audits to maintain compliance with industry standards.
  • If a data breach occurs that may cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.

 

7. Storing and Retaining Your Information

We retain patient records for the period required under Australian health record retention laws. After this period, records are securely destroyed or anonymised.
If you request your data to be deleted, we will comply unless we are legally required to retain it.

 

8. Cookies and Website Tracking

Our website uses cookies and similar technologies to enhance user experience and analyse website performance. You can control cookie settings via your browser preferences.

 

9. Your Rights and Choices

  • You have the right to:
    Access your personal information.
  • Request corrections to inaccurate data.
  • Withdraw consent for marketing communications.
  • Lodge a complaint if you believe your privacy has been breached.

To exercise your rights, please contact us at [email protected].

 

10. Complaints and Contact Details

If you have concerns about your privacy, you can:
Contact Us Directly at [email protected].
Lodge a Complaint with the OAIC at www.oaic.gov.au.

 

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website, and continued use of our services implies acceptance of the updated policy.

 

Patient Confidentiality Policy

 

1. Introduction

At Solum Clinic, we are committed to maintaining the highest standards of patient confidentiality. This policy outlines how we protect, manage, and maintain the confidentiality of patient information in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and relevant state and territory health privacy laws. By using our services, you agree to the terms outlined in this policy.

 

2. Scope

This policy applies to all:

  • Patients using Solum Clinic’s telehealth services.
  • Healthcare professionals, staff, and third parties handling patient information.

 

3. Confidentiality Principles

Solum Clinic adheres to the following key principles of patient confidentiality:

  • All patient information is private and confidential.
  • Patient records are only accessible to authorised personnel.
  • Information is only shared with patient consent or when required by law.
  • Secure systems are used to protect patient data.

 

4. What Information is Confidential?

The following types of patient information are considered confidential:

  1. Personal details: Full name, date of birth, contact details.
  2. Health records: Medical history, prescriptions, test results, consultation notes.
  3. Billing and payment information.
  4. Communications with the clinic, including emails and telehealth recordings (where applicable).

 

5. How We Protect Patient Confidentiality

We take strict measures to protect patient confidentiality, including:

  1. Secure Storage & Access Control
    1. Electronic health records are stored in encrypted databases with restricted access.
    2. Only authorised healthcare professionals and staff can access patient records.
    3. Access to information is logged and monitored for security.
  2. Secure Communication
    1. All telehealth consultations are conducted using encrypted platforms.
    2. Emails containing sensitive information are encrypted or password protected.
    3. We do not share patient information over unsecured channels (e.g., social media).
  3. Staff Confidentiality Agreements
    1. All staff, healthcare providers, and third-party service providers sign confidentiality agreements before accessing patient data.
    2. Breaches of patient confidentiality result in disciplinary action and potential legal consequences.

 

6. When Patient Information May Be Disclosed

We only disclose patient information in the following limited circumstances:

  1. With Patient Consent
    1. Patients can request that their records be shared with another healthcare provider, family member, or legal representative by providing written consent.
  2. When Required by Law
    1. We may be legally required to disclose patient information under the following circumstances: 
      1. Subpoenas, court orders, or legal proceedings.
      2. Public health requirements, such as reporting certain infectious diseases.
      3. Regulatory compliance with AHPRA, Medicare, or the Therapeutic Goods Administration (TGA).
  3. In Medical Emergencies
    1. If a patient is incapacitated or at risk, we may share necessary information with emergency services or another medical provider to ensure their safety.

 

7. Patient Rights Regarding Confidentiality

Patients have the right to:

  • Access their own medical records (subject to legal and clinical considerations).
  • Request corrections to inaccurate or incomplete information.
  • Restrict disclosures of their information (unless required by law).
  • Request the deletion of personal data, where legally permitted.
  • Lodge a complaint if they believe their confidentiality has been breached.

 

8. Breaches of Confidentiality

Any unauthorised access, disclosure, or misuse of patient information is considered a serious breach of confidentiality.

  1. Reporting a Breach
    1. If a patient suspects a breach of confidentiality, they can report it immediately by contacting: [email protected]     
  2. Investigation and Action
    1. All reported breaches are investigated promptly.
    2. If a breach is confirmed, appropriate action is taken, including: 
      1. Notifying the affected patient(s).
      2. Implementing corrective measures.
      3. Reporting the breach to the Office of the Australian Information Commissioner (OAIC) if required under the Notifiable Data Breaches (NDB) scheme.

 

9. Changes to This Policy

We may update this Patient Confidentiality Policy to reflect changes in laws, technology, or clinic operations. Any changes will be published on our website, and continued use of our services constitutes acceptance of the updated policy.

 

10. Contact Information

For any concerns or questions about this policy, contact us:
Email: [email protected]
Website: https://solumclinic.au/