Purpose

​HEIDI ROSE NUTRITION is committed to ensuring the privacy and confidentiality of all personal/health information of our clients and website visitors. We adhere to the National Privacy Principles (NPPs) and this policy is consistent with the Australian Privacy Principles within the Privacy Act 1988.

The purpose of this Privacy Policy is to outline HEIDI ROSE NUTRITION’s ongoing obligations in respect of how we manage personal and health related information and data.

Policy

This policy statement covers the following:

• What type of information we collect

• Why and how we collect information.

• How we use information.

• How we protect information.

• Clients accessing their personal information.

• How to manage complaints and breaches.

What type of information we collect

The type of information we collect to assist our team in working with clients may include:

• Personal information, e.g. name, address, date of birth, gender.

• Health history, ethnic background or current lifestyle.

• Occupation, employer’s details, interests, payment details, financial information.

• Information about how and where clients were referred to us.

• Health information including medical results, clinical and medical records.

• Family medical history and their details.

• Other medical service providers’ commentary, diagnosis and test results.

Why we collect personal information

We collect personal information when it is reasonably necessary to conduct the services we offer.

How we collect information

There are a few different ways HEIDI ROSE NUTRITION collects patient information. Most information is collected directly from clients via:

• Information from a bookings form

• Over the phone (including video calls)

• From a direct referral from another provider

HEIDI ROSE NUTRITION may also collect personal information throughout our relationship with clients. For example, we may collect personal information:

• When a client pays their bill or makes an appointment

• During a consultation

• Completing a form

HEIDI ROSE NUTRITION may collect data from our website viewers via the use of cookies and other digital identifiers. It’s important to know you can clear cookies or digital identifiers from your device and also disable future use of them by changing the security settings on your web browser.

How we use information

HEIDI ROSE NUTRITION may use patient information within a wider group of professional service providers that may include:

• HEIDI ROSE NUTRITION employees and contractors.

• Medical Practitioners.

• Allied Health Professionals.

• Other third parties such as Medicare, DVA, private health insurers, and if necessary, Collection Agencies.

• Other parties reasonably expected to be included in the treatment of any case.

When our service involves other parties, such as doctors or other allied health professionals, we will only provide them with the information they need to provide and manage their relationship with the patient.

How we share client information

There may be times when HEIDI ROSE NUTRITION needs to share client information to other health providers such as GPs and Specialists. These companies are subject to strict controls that protect patient information from unauthorised use or disclosure and limits their access to personal information to the extent necessary to do their job.

HEIDI ROSE NUTRITION is committed to safeguarding the information provided to us. We have in place suitable and reasonable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.

Legal obligations and other privacy exceptions

HEIDI ROSE NUTRITION gives access to personal information where we are permitted or obliged to do so by Australian law. For example, in some circumstances we will use or disclose personal information to react to unlawful activity, serious misconduct, or to reduce or prevent a serious threat to life, health or safety.

Others

HEIDI ROSE NUTRITION will only disclose personal information to others if given express permission, or if the disclosure relates to the main reason we collected the information and the client would reasonably expect us to do so.

Marketing

We may use personal information from clients to send marketing and special offers which are targeted towards relevant interests, characteristics or location. This marketing could be distributed to clients via email, text, or online.

All marketing emails, texts and letters distributed by HEIDI ROSE NUTRITION will clearly identify how recipients can opt out from receiving marketing promotions and advertising.

How we store and protect client information

Client information is stored within HEIDI ROSE NUTRITION ’s database which is securely protected to ensure client information remains confidential. Firewalls and access logging tools are put in place to protect against unauthorised access to client data and our network. We protect client information by ensuring:

• Secure work environments and workflow systems that prevent unauthorised access and copying of your personal information.

• Management of access privileges, to ensure that only authorised personnel can access personal information.

• Ongoing training and security reviews

Clients accessing their personal information

A client may request access to their personal information. The identity of the client will always be confirmed prior to the provision of personal information. Under Australian privacy laws there are situations where we may not give access to the requested personal information. For example, information cannot be revealed if it would unreasonably affect someone else’s privacy or if it poses a serious threat to someone’s life, health or safety.

A request from a client to access their personal information should be directed to HEIDI ROSE NUTRITION via the contact form.

Generally, accessing personal information will incur no charge, unless the request is complex or resource intensive.

Quality of personal information

HEIDI ROSE NUTRITION aims to keep personal client information accurate, up-to-date and complete. If there is information which needs to be updated or changed, clients are encouraged to email via the contact form.

Complaints and breaches

For any complaints about HEIDI ROSE NUTRITION ’s dealings with personal information, including any breaches of any Australian Privacy Principles or have any questions regarding this privacy statement, they are able to submit a complaint or query via the contact form.