Nurse4U values and respects the privacy of this website’s visitors and of anyone who contacts us. This website does not promote online surveys nor sends bulletins by email without authorisation of the recipients. Any personal data in any mail or email sent to us is solely used to provide information as requested. Personal details are maintained as required by the Privacy Act 1988 and the Privacy Amendment (Private Sector) Act 2000.
Nurse4U is required to make this policy freely available and in an appropriate form, and accordingly it is able to be accessed on our public website. Individuals who would like to request a copy of this policy in an alternate form, for example suitable for the vision impaired, or individuals from a non-English speaking background, may do so by contacting our Manager, and reasonable steps in the circumstances will be taken to provide the policy in an appropriate form.
We respect and uphold your right to privacy protection under the Australian Privacy Principles in regulating how we collect, use, disclose and hold your personal information. We have policies and procedures to ensure that only authorised staff has access to your personal information and that it remains confidential and is only used for appropriate purposes and in accordance with this notice.
When you use our services or contact us in any way, you trust us with your personal information. We collect and store this information about you to help us deliver the best possible services. This document tells you about our privacy and confidentiality policy. The privacy and confidentiality policy says how we do what the law says we must do to protect your privacy. Privacy means that any person has the right to have their personal information to not be told or shown to anyone. Confidentiality means that there is a duty to keep your personal information private and protected.
In order to provide care and services to you, we need to collect, store, use and disclose some sensitive information. We understand that it is important to you that we protect your privacy when we do this and we are committed to keeping your information safe and secure ensuring your privacy is maintained at all times. We collect your personal information due to the following reasons:
Where we propose to use your personal information for a purpose other than as outlined above, we will seek your permission (unless we are required or permitted by law to do so without seeking consent).
We collect a variety of information depending on the level of service you require. We collect personal information that helps us contact you and provide services to you. We will only ask for, use or share sensitive information with your consent and only for the reason we collected it (unless we need to by law). If you are giving us others’ personal information, please do so only if they agree to this policy.
The personal information we keep might include: (but not limited to)
Sometimes your personal information is sensitive information. Sensitive information is normally private and can include: (but not limited to)
We also keep personal information on:
We will collect more in-depth information depending on the type of care you are receiving and how this care is being funded. This information will include:
We will not tell anyone about your personal information unless we have to by law. We also collect information that is not personal information, such as data relating to your activity on our Website. If you feel that the personal information that we are requesting at any point is not information that you wish to provide, please feel free to raise this with us.
Generally speaking, we may collect personal information in the course of providing our products and services to you. We will collect your personal information directly from you unless it is unreasonable or impracticable to do so, and will limit the personal information we collect to that which is reasonably necessary for our functions or activities.
We usually collect personal information about our clients in the following ways:
We usually collect personal information about our staff or potential staff members in the following ways:
Where possible, we collect your personal information directly from you. In some circumstances we may obtain personal information from a third party.
For each visitor to our website, our web server collects the following type of information for statistical purposes:
This is anonymous statistical data and no attempt will be made to identify users or their browsing activities. We use this data to evaluate our website performance and to improve the content we display to you.
We will not use your personal information for any purpose which is not related to the products or services we provide or for any purpose for which you would not reasonably expect us to use the information. Your information may be used by Nurse4U to enable us to offer you other products and services that will enhance our relationship with you. It is your decision whether you wish us to provide this service to you. We may release information about you where there is a duty to the public to disclose that information. However, we will not sell or disclose your information to any individual or entity outside Nurse4U, for marketing purposes.
Any sensitive information which we collect will only be used by us to help provide you with the care you need. We will not disclose or release this information without your consent, unless we are required to do so, such as an emergency situation. In this instance, we will make all attempts to contact your emergency contact person to gain consent to release your information to other health providers.
Additionally, we will not disclose your sensitive information without your consent, unless there is a need to disclose such information in accordance with the Privacy Act or to comply with any other regulatory requirement.
We will only use or disclose your personal information for the purposes of direct marketing if:
What happens if you choose not to provide your personal information?
You are not obliged to give us your personal information. If you would like to access any of our services on an anonymous basis or using a pseudonym, we will take reasonable steps to comply with your request. However, we will require you to identify yourself if:
We will take reasonable steps to protect your personal information from misuse, interference and loss as well as unauthorised access, modification or disclosure. For example, information stored on our computer network is protected by security features and procedures. We undertake regular monitoring of our practices and systems to ensure the effectiveness our security policies and identify and implement improvements where appropriate. We will endeavour to destroy or deidentify your personal information as soon as it is no longer required by us (where permitted by law).
We may keep your information in hard copy or electronic format. Hard copy versions are kept in secured lock and key places where only staff have access to. Any hard copy information is stored securely at our head office. We use a combination of technical solutions, security controls and internal processes to help us protect your information and our network from unauthorised access or disclosure.
When capturing customer data on our website it is passed through a secure server using encryption technology to ensure that your information is protected when being sent over the Internet. Additionally, all stored customer information is protected from unauthorised access through the use of secure passwords and usernames or other security procedures.
We will generally only disclose your personal information for the primary purpose for which we collected it, and for related purposes we consider would be within your reasonable expectations. Circumstances where personal information may be disclosed broadly include compliance with statutory obligations, arranging for insurance, progressing insurance claims and meeting occupational health and safety obligations.
We may disclose your personal information to the following third parties (as applicable in the circumstances):
If you need to change any details you have provided us, you can do so by contacting our Client Managers or our general Manager. If you would like a copy of your medical record, you may request this in writing from our Manager, you must provide a proof of identity in this case.
We may require you to comply with certain procedures before we allow access to or amendment of your personal information to ensure the integrity and security of information that we hold. Depending on the nature of your request, this may include completing a personal information request form or otherwise verifying your identity to our satisfaction.
We are not obliged to allow access to your personal information if:
If you make a request for access to personal information, we will:
If we refuse to give access to the personal information because of an exception or in the manner requested by you, we will give you a written notice that sets out at a minimum:
We will take reasonable steps to ensure that the personal information that we collect is accurate, up-to-date and complete and the personal information we use and disclose is accurate, up-todate, complete and relevant. If we are satisfied that any personal information we hold about you is inaccurate, out-of-date, incomplete, irrelevant or misleading, we will amend our records accordingly.
Please notify us if your personal details change so that we may keep our records current.
You should be aware that there are inherent risks associated with the transmission of information via the Internet. If you are submitting personal details, credit card numbers or other information over the Internet, please be aware that, while all reasonable efforts are made to secure information transmitted to this website, there is a possibility that information you submit could be observed by a third party while in transit. By using this website, you acknowledge that you do not hold Nurse4U liable for any security breaches, viruses, or other malicious software that may infect your computer or any loss of data, revenue or otherwise that may occur.
We store your information securely in our office, and only our staff and businesses we work with can access it. We use physical, electronic and management processes to keep your information safe. For example:
If a data breach or suspected data breach occurs, we will undertake a prompt investigation, which will include an assessment of whether the incident is likely to result in serious harm to any individuals. In such a situation we will comply with the requirements of the Act which may require notification to the Office of the Australian Information Commissioner (OAIC) and affected individuals. Please contact us if you have reason to believe or suspect that a data breach may have occurred, so that we can investigate and, if necessary, undertake appropriate containment, risk mitigation and notification activities as required.
We will take reasonable steps to:
We will take reasonable steps to protect personal information from:
Electronic information is protected by various security measures (including encryption and password protection) and physical paper files are stored in a secure location. Personal information is de-identified where appropriate. Data protection includes the use of password access areas and secure servers.
You acknowledge that the security of communications sent by electronic means or by post cannot be guaranteed. We cannot accept responsibility for misuse, loss or unauthorised access to your personal information where the security of information is not within our control. If you suspect any misuse or loss of your personal information please contact us immediately.
We will take reasonable steps to destroy or de-identify any personal information held by us if we no longer need to hold the information for the purpose it was collected and we are not otherwise required by law to retain the information.
If you feel we have breached your privacy in any way you can lodge a complaint with our Governance team. This can be via phone, postal mail or email. We will contact you within 24hrs or the next business day if you made the complaint on the weekend. If we are unable to resolve the complaint in the first instance, we will write to you acknowledging your complaint and the issues you have raised. If you have a complaint about how we collect, use, disclose, manage or protect your personal information, or otherwise consider there may be a breach of the Privacy Act or the APPs, please contact us in writing. We treat all complaints seriously and intend to resolve your complaint within a reasonable timeframe, usually 14 days or otherwise as soon as practicable. However, in some complex cases, resolution may take longer.
Once the complaint has been received, we will try to resolve the matter in a number of ways:
You are free to lodge a complaint directly with the Office of the Australian Information Commissioner (OAIC) online, by mail, fax or email. For more information please visit the OAIC website at http://www.oaic.gov.au/privacy/making-a-privacy-complaint.
Mail: 3B Tawny Court, Truganina, VIC 3029