Overview

The Kooky Kid Clinic (The Clinic) is committed to protecting the privacy of staff, clinicians, clients and their families/carers. You can have peace of mind that The Clinic ensures that all relevant privacy laws are fully complied with, when it comes to collecting, holding, using, disclosing and sharing your personal information.

The Clinic needs to know our clients’ real names

As a health practice, The Clinic ensures that our clients tell us their real name. To provide an appropriate standard of care for our young clients, all our clients cannot use a different name other than their real name to identify themselves to us.

Collection of personal information

As a health practice, The Clinic is required to collect sensitive personal information so that we can provide you or your child with an appropriate level of health related services. The Clinic collects this information from clients and their families/carers, and also from third parties such as health care practitioners and schools.

When collecting personal information, The Clinic sometimes needs to ask sensitive questions so that we can provide an accurate medical diagnosis or assessment. The Clinic then ensures that we provide appropriate treatment or therapy for the right amount of time.

If a client refuses to provide The Clinic with certain sensitive personal information, we may not be able to provide them with an appropriate level of service.

Notification of certain matters

When collecting personal information, The Clinic will notify our clients of certain matters, such as test results, in a timely manner. This usually requires you to meet with one of The Clinic’s clinicians, so that we can properly interpret and explain the test results for you.

Use and disclosure of personal information

The Clinic only uses and discloses personal information when:

It is in accordance with the express written consent of the client or family member to which the information relates,
There are significant safety concerns with a client or others,
As required by law (such as making a notification of alleged child abuse to the relevant government authorities or in complying with a subpoena issued by a court).

Direct marketing

The Clinic will never use someone’s personal information for any direct marketing purposes. The Clinic may, from time to time, notify clients or their families/carers of available treatment options or programs; however this is for therapeutic purposes only, and not for marketing purposes.

Disclosure of information overseas

The Clinic does maintain an overseas team to assist with administration tasks only. No clinical work is conducted overseas. We do disclose some information overseas to allow our overseas team to complete their administration work only. Our overseas team are highly trained and are bound by the Australian Privacy Act to protect your sensistive information. All sensitive information is encypted both at rest and in transit when accessed by our overseas team.

The Clinic uses cloud-based encrypted systems to manage our databases holding your sensitive personal information. Our cloud based systems may use backup and redundacy processes hosted overseas. The companies who host this information cannot read it, they simply store it on The Clinic’s behalf.

Adoption, use or disclosure of government related identifiers

The Clinic may use your Medicare Card, DVA Card, NDIS Participant ID, or Austrlian Healthcare Identifier to enable us to provide services to you, claim rebates for you, or issue you with prescriptions. We will not use government related identifiers for any other purpose.

Quality of personal information

The Clinic ensures the personal information collected is accurate, up-to-date, complete and relevant. The Clinic also ensures the personal information held is protected from misuse, interference and loss, and from unauthorised access, modification or disclosure.

Security of personal information

The Clinic will store your sensitive information electronically, and will securely shred all paper based records according to the stringent security practices and procedures established by the International Secure Information Governance & Management Association (i-SIGMA®).

All electronic records are protected by 256-bit bank grade encryption at all times, both a rest and in transit. This means your sensitive information will be protected to the same level required for Australian banks when it is stored and when it is accessed.

Access to or correction of personal information

The Clinic can provide access to the personal information held about a person to that person or their parent / legal guardian (if that person is under 18 years of age) upon receipt of a request in writing. It must be noted however that The Clinic may choose not to disclose personal information if it significantly impacts on another person’s privacy, or could pose a significant risk to the life or health of you or another person.

Requests to access and/or correct personal information can be made by email to privacy@kookyclinic.com.au.