PRIVACY NOTICE
Introduction
This document is Optimum Movement’s Australian Privacy Principle (APP) privacy policy; it explains how the Optimum Movement approaches privacy and the management of your personal information. Please contact the Director of Optimum Movement if you require any further information regarding our Privacy Notice.
Optimum Movement is one of Brisbane’s leading Occupational Therapy and Physiotherapy providers for children and young adults. We have built our reputation on the provision of quality, client-centred, evidence-based therapy delivered in an engaging and enjoyable manner.
At Optimum Movement we take great pride in the service we provide and aim to continually deliver play-based, goal-directed therapy for children and young adults experiencing functional difficulties. We strongly believe that for therapy to be successful an inclusive approach needs to be adopted. Therefore, we will often seek input from and work collaboratively with all those involved with the child including parents, carers, teachers and various health professionals.
The Australian Privacy Principles
The Australian Government introduced new legislation, effective 12 March 2014, which further protects the privacy of individuals. These principles replace the National Privacy Principles that came into force on 21 December 2001. You can find out more about these principles by calling the Office of the Australian Information Commissioner on 1300 36 39 92 or through their website at http://www.oaic.gov.au/.
Optimum Movement respects and upholds your right to privacy protection under the Australian Privacy Principles in regulating how we collect, use, disclose and hold your personal information. We have a detailed policy and set of procedures to ensure that only authorised staff have access to your personal information and that it remains confidential and is only used for appropriate purposes and in accordance with this notice.
Your personal and sensitive information is only collected as is necessary for a function or activity, or to enable Optimum Movement to carry out its work and deliver services to the community.
When you give us personal information such as your name, address, telephone number and email address, we record it on our database and may use it to contact you in the future.
Optimum Movement will not collect sensitive information about racial or ethnic origin, political opinions or membership, religious or philosophical beliefs, trade association or union membership, sexual preferences or criminal record unless you have consented to give this information and it is relevant to the work of Optimum Movement. We will always collect such information in a non-intrusive, lawful and fair manner.
We will offer you the option of not identifying yourself or of using a pseudonym where it is practical to do so.
Opting out or modifying your information
If you want to change any information that you have previously given us, or if you want to opt out of future communications please contact the Director.
How we collect your personal information
We collect your personal information when you provide it to Optimum Movement in a number of ways including but not limited to:
- through a call to our Reception
- completing a contact form on Optimum Movement’s website
- completing initial appointment paperwork that has been emailed to you
- Personal information may include:
- name,
- date of birth,
- gender,
- current and previous addresses,
- residency status,
- telephone numbers and e-mail addresses,
- bank account details,
- tax file number,
- driver’s licence number,
- Centrelink information,
- photographs,
- race or ethnicity, and
- medical history or information provided by a health service.
- In collecting personal information, Optimum Movement will inform the client:
- that information is being collected;
- the purposes for collection;
- who will have access to the information;
- the right to seek access to, and/or correct, the information; and
- the right to make complaint or appeal decisions about the handling of their information.
- Client information is used to:
- assess and provide services;
- administer and manage those services;
- evaluate and improve those services;
- contribute to research;
- contact family, carers, or other third parties if required; and
- meet our obligations under the NDIS.
- Clients are to be provided with the Client Consent Form at the time of commencing service with Optimum Movement. This form is to be
- signed and stored in the client’s file;
- held securely with access limited to staff members in the performance of their role.
- Optimum Movement collects information:
- directly from clients orally or in writing;
- from third parties, such as medical practitioners, government agencies, client representatives, carer/s, and other health service providers;
- from client referrals; and
- from publicly available sources of information.
- Optimum Movement will collect sensitive information:
- only with client consent, unless an exemption applies: e.g. the collection is required by law, court/tribunal order or is necessary to prevent or lessen a serious and imminent threat to life or health;
- fairly, lawfully, and non-intrusively;
- directly from client, if doing so is reasonable and practicable;
- only where deemed necessary to support
- service delivery to clients;
- staff activities and functions; and
- giving the client the option of interacting anonymity, if lawful and practicable.
How we keep your personal information secure
Information you provide to us is stored securely in our databases and only accessed by staff authorised by Optimum Movement. Optimum Movement uses a range of hardware and software security measures to protect our information and ensure that only authorised staff are granted access.
- Optimum Movement takes all reasonable steps to protect personal information against loss, interference, misuse, unauthorised access, modification, or disclosure. Optimum Movement will destroy, or permanently de-identify personal information that is
- no longer needed;
- unsolicited and could not have been obtained directly; or
- not required to be retained by, or under, an Australian law or a court/tribunal order.
- Optimum Movement has appropriate security measures in place to protect stored electronic and hard-copy materials. Optimum Movement has an archiving process for client files which ensures files are securely and confidentially stored and destroyed in due course.
- Should a breach in privacy occur, potentially exposing client information (e.g. computer system hacked, laptop stolen etc.) the Director will immediately act to rectify the breach in accordance with organisational policy and processes (see Breaches of Privacy, below).
Disclosing your personal information
- Optimum Movement respects the right to privacy and confidentiality, and will not disclose personal information except:
- where disclosure would protect the client and / or others;
- where necessary for best service practice; or
- where obligated by law.
- For these purposes, Optimum Movement may disclose clients’ personal information to other people, organisations or service providers, including:
- medical and allied health service providers who assist with the services we provide to clients;
- a ‘person responsible’ if the client is unable to give or communicate consent e.g. next of kin, carer, or guardian;
- the client’s authorised representative/s e.g. legal adviser;
- our professional advisers, e.g. lawyers, accountants, auditors;
- government and regulatory authorities, e.g. Centrelink, government departments, and the Australian Taxation Office;
- organisations undertaking research where information is relevant to public health or public safety; and
- when required or authorised by law.
Transfer of information overseas would normally only occur for data processing purposes, for example third party payment facilitators may process their data offshore. Optimum Movement payment gateway currently processes data in Australia. Optimum Movement will not transfer your personal information overseas or into the “cloud” unless we have taken reasonable steps to ensure that the information which is being transferred will not be held, used or disclosed by the recipient of the information in a manner which is inconsistent with the Australian Privacy Principles.
How to access, correct or update your personal information
If you have any complaints, questions or concerns about what information Optimum Movement holds or about the accuracy of that information, please contact the Director.
If you would like to access the information that we hold about you, or to complain about a possible breach of the Australian Privacy Principles, you can write to the Director at the address provided below. We will respond to your complaint or endeavour to give you access to the information requested within two weeks. In order to maintain the confidentiality of your personal information, we will ask you to come into Optimum Movement’s office and to bring with your specific identification before we give you access. If it is not practical for you to visit our office, we will arrange to check your identification before we mail the information out to you.
If the information that we hold about you is incorrect or not up to date, we will update it as soon as possible after you have shown us how and why it is incorrect.
In the unlikely event that we are unable to provide you with access to your personal information for legal reasons as specified in the Privacy Act, we will provide you with reasons for denying access.
If you are not satisfied with Optimum Movement’s response to your complaint, question or concern, or if you believe Optimum Movement has breached an APP and/or IPP, you may lodge a complaint with the following agencies:
Office of the Information Commissioner, Queensland
PO Box 10143
Adelaide Street Brisbane
Queensland 4000
Telephone: (07) 3234 7373
Email: enquiries@oiac.qld.gov.au
Office of the Australian Information Commissioner. Further information can be found on the Commissioner’s website at www.oaic.gov.au or by calling 1300 363 992.
Breaches of Privacy
- Optimum Movement are required to disclose a data breach to the Office of Australian Information Commissioner if the data contains personal information that is likely to result in “serious harm”, which includes any of the following: physical, psychological, financial or reputational harm. Personal information is information about an identified individual, or an individual who is reasonably identifiable.
- Any staff who identify a potential breach must immediately inform their line manager, who must report to the Director for further action.
Contact details
Fiona Canny
Director – Optimum Movement
ABN: 74 659 116 803
p: 3821 3399
w: www.optimummovement.com.au
a: 116 Wellington St, Ormiston, Q, 4160
PO Box 762, Cleveland, Q 4163
Date of last amendment 11 August 2021