Mojo Klinik / Legal / Privacy Policy
Privacy Policy.
How Mojo Klinik collects, uses, stores, discloses and protects your personal and health information. Written in plain language. Bound by the Australian Privacy Principles and Australian medical privacy law.
EFFECTIVE
[to be inserted on publication]
LAST UPDATED
[to be inserted on publication]
APPLIES TO
This policy applies to patients of the practice, visitors to mojoklinik.com.au, and anyone who interacts with us by email, telephone, online booking, or telehealth.
ON THIS PAGE
- About this policy
- Legal framework
- Information we collect
- How we collect information
- Purposes for which we use information
- Disclosure of information
- My Health Record
- Storage and security of information
- Retention and destruction of records
- Website cookies and analytics
- Your rights
- Privacy complaints
- Changes to this policy
- Contact
QUESTIONS?
Reception · Mojo Klinik
reception@mojoklinik.com
01 About this policy
This Privacy Policy explains how Mojo Klinik collects, uses, stores, discloses and protects your personal information and health information. It applies to patients of the practice, visitors to our website at mojoklinik.com.au, and anyone who interacts with us by email, telephone, online booking or telehealth.
Mojo Klinik is a medical practice located at Suite 11, 40 Yeo Street, Neutral Bay NSW 2089. In this policy, the terms “we”, “us” and “our” refer to Mojo Klinik. The terms “you” and “your” refer to the individual whose information is being collected or held.
Mojo Klinik’s registered medical practitioners are also bound by the Australian Health Practitioner Regulation Agency (AHPRA) registration standards and the Medical Board of Australia’s Code of Conduct, which include patient confidentiality obligations that apply in addition to this policy.
02 Legal framework
Mojo Klinik handles personal and health information in accordance with:
- The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
- The Health Records and Information Privacy Act 2002 (NSW) and the Health Privacy Principles, in respect of health information held in New South Wales.
- The My Health Records Act 2012 (Cth) where applicable to the use of the My Health Record system.
- The Health Practitioner Regulation National Law (NSW) and the AHPRA registration standards applying to Mojo Klinik’s registered medical practitioners.
- The Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.
03 Information we collect
We collect only the information reasonably necessary for the function we are performing. The categories of information we may collect include:
- Personal information — your name, date of birth, residential address, contact telephone number, email address, Medicare number, private health insurance details where applicable, emergency contact and next of kin, and identification documents where required.
- Health information — your medical history, current symptoms, current medications, allergies, family medical history, lifestyle information, pathology and imaging results, treatment notes, correspondence with other health practitioners, and information you provide during consultations or in intake forms.
- Payment information — in-clinic payments are processed through Tyro. Online deposits and card capture associated with online booking are processed through Stripe. Mojo Klinik does not store full credit card numbers on its own systems.
- Website and booking information — when you use our website or our online booking platform, we may collect your IP address, browser type, the pages you visit, the time and duration of your visit, and information you submit through web forms or the booking platform.
04 How we collect information
We collect information in the following ways:
- Directly from you, when you book an appointment, complete an intake form, attend a consultation, send us an email, or contact reception.
- From other health practitioners, where a referral or correspondence is received, or where we request information from a previous treating practitioner with your consent.
- From pathology and imaging providers, when results are returned for tests ordered by your Mojo Klinik doctor.
- From Services Australia and the Department of Health, when Medicare claims are processed on your behalf or rebate information is verified.
- Through our website and online booking platform, where information is submitted by you or generated by your interaction with the site.
05 Purposes for which we use information
We collect, hold and use your information for the following purposes:
- Providing medical care, including consultations, diagnosis, prescribing, referrals, and ongoing management of your health.
- Communicating with you about appointments, results, recalls, and other matters related to your care.
- Processing payments, Medicare claims, and private health insurance claims where applicable.
- Communicating with other health practitioners involved in your care, with your consent.
- Meeting our legal, regulatory and professional obligations, including those imposed by AHPRA, the Medical Board of Australia, and Australian state and federal health authorities.
- Internal quality assurance and clinical audit, where information is deidentified where reasonably practicable.
- Responding to your enquiries and requests.
WHAT WE WILL NOT DO
We do not sell your personal or health information to any third party. We do not use your health information for marketing purposes.
06 Disclosure of information
We do not disclose your personal or health information to third parties except in the following circumstances:
- With your consent, including the standard consent associated with providing a referral, requesting communication with another practitioner, or uploading information to your My Health Record.
- For pathology and imaging, where your doctor refers you for tests, your information is disclosed to the laboratory or imaging provider you choose to attend.
- For Medicare claiming, where claims are submitted through Services Australia for processing.
- Where required or authorised by law, including in response to subpoenas, court orders, mandatory reporting obligations (including suspected child abuse, communicable disease notifications, and fitness-to-drive notifications) and formal requests from AHPRA, the Medical Board of Australia, or other regulatory bodies.
- In a medical emergency, where disclosure is necessary to prevent or lessen a serious threat to your life, health or safety, or that of another person.
07 My Health Record
Mojo Klinik does not upload information to your My Health Record without your explicit request and consent. If you would like information from a consultation, a pathology result or a discharge summary added to your My Health Record, please tell your doctor during the appointment. You can also set access controls on your My Health Record, or opt out entirely, by visiting myhealthrecord.gov.au.
08 Storage and security of information
Your personal and health information is held on a secure on-site server at our Neutral Bay premises, in line with Australian medical records storage requirements. Access to records is restricted to authorised practice staff who require access to perform their role.
Our medical practice management system is Best Practice. Cosmetic services use Fresha. Online medical bookings are managed through our inhouse booking platform. Telehealth consultations are conducted via Zoom. Each of these systems operates under its own privacy and security arrangements, which we have reviewed for suitability.
We take reasonable steps to protect your information against loss, unauthorised access, use, modification, disclosure and misuse. These steps include physical security at our premises, password and access controls, screen-locked workstations, secure disposal of obsolete records, and regular review of system access.
ON THE LIMITS OF SECURITY
No system can be guaranteed completely secure. In the event of an eligible data breach, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
09 Retention and destruction of records
We retain medical records for at least the minimum periods required by Australian law:
- For adult patients — at least seven years from the date of the last entry in the record.
- For patients who were under 18 at the date of the last entry — until the patient reaches the age of 25.
ON THE LIMITS OF SECURITY
No system can be guaranteed completely secure. In the event of an eligible data breach, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
10 Website cookies and analytics
Our website uses cookies and similar technologies to enable the website to function correctly and to allow us to understand how visitors use the site. Cookies are small files placed on your device by your browser. You can disable cookies through your browser settings, although doing so may affect the functionality of the website.
We may use analytics tools, including Google Analytics, to collect aggregated and de-identified information about how the website is used. This information is used to improve the website.
11 Your rights
Under the Australian Privacy Principles, you have the right to:
- Access your information. You may request a copy of the personal and health information we hold about you. We will respond within 30 days. An administrative fee may apply for the transfer of records (see Terms and Conditions).
- Correct your information. If you believe information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may ask us to correct it.
- Withdraw consent. Where we are handling information on the basis of your consent, you may withdraw that consent at any time. This may affect our ability to continue providing care.
- Make a complaint. See the Privacy complaints section below.
HOW TO EXERCISE YOUR RIGHTS
To make a request, please contact reception@mojoklinik.com. We may need
to verify your identity before releasing information.
12 Privacy complaints
If you have a privacy concern, please contact Mojo Klinik in the first instance so that we may address it. Privacy enquiries can be directed to reception@mojoklinik.com or by telephone to 02 9133 8500. Privacy enquiries are handled by reception in liaison with the practice principal.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by telephone to 1300 363 992.
For complaints concerning the conduct of a registered medical practitioner, you may also contact the Australian Health Practitioner Regulation Agency (AHPRA) at ahpra.gov.au, or in New South Wales, the Health Care Complaints Commission (HCCC) at hccc.nsw.gov.au.
13 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practice or in the law. The current version is published at mojoklinik.com.au/privacy-policy. The effective date at the top of this page indicates the date on which the policy was last updated.
14 Contact
Mojo Klinik
Suite 11, 40 Yeo Street, Neutral Bay NSW 2089
Telephone: 02 9133 8500
Email: reception@mojoklinik.com
Document version 1.0 (draft). Material changes will be communicated to existing patients by email before they take effect.