- Home
- Privacy policy
Legal
Privacy policy
How this practice collects, uses, stores and protects your personal and health information.
Draft for review. This policy is a working draft prepared for the practice and must be reviewed by Dr Cooper's medical indemnity insurer or lawyer before launch, then this notice removed. [Insurers typically provide a template; Avant, MIPS and MDA National all do.]
Who we are
This policy covers the private orthopaedic practice of Dr Rob Cooper (ABN [TBC]), located at [rooms address TBC] ("the practice", "we"). We are bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and applicable NSW health records legislation.
What we collect
To provide safe care we collect personal information (name, date of birth, contact details, Medicare and health fund details, emergency contacts) and health information (referrals, medical history, medications and allergies, examination findings, imaging and test results, treatment records, and details of compensable claims where relevant). We collect it directly from you, from your referring and treating practitioners, from imaging and pathology providers, and through forms on this website.
Why we collect it
To arrange appointments, provide medical assessment and treatment, communicate with your treating team, process billing including Medicare, health fund and compensable claims, remind you about appointments, and meet our legal and professional obligations. We do not sell your information or use it for marketing.
Website forms
The appointment request form collects the minimum needed to arrange your visit: contact details, referrer details, and an optional referral upload. It is transmitted over an encrypted connection and delivered securely to the practice, and submissions are not stored on the public web server after delivery. Please do not include detailed medical history in web forms; it belongs in your consultation.
Who we share it with
Your treating team: your GP, referring practitioners, your physiotherapist, hospitals, anaesthetists and other practitioners involved in your care; Medicare, your health fund or claim insurer for billing you have authorised; My Health Record where you participate; and otherwise only where you consent or the law requires or permits it (for example, mandatory reporting or a court order).
How we store and protect it
Records are held in secure practice management systems with access limited to the practice team, protected by access controls and encryption. We retain health records as required by law (generally at least 7 years from last contact for adults, and until age 25 for children), then destroy or de-identify them securely. Notifiable data breaches are handled under the OAIC's Notifiable Data Breaches scheme, including notifying you where required.
Access and correction
You may request access to your health record or ask us to correct it at any time by contacting the rooms in writing. We respond within a reasonable time and may charge a reasonable fee for providing copies (not for the request itself).
Embedded map
The location sections of this website embed a Google Maps view of Westmead Private Hospital. When a page containing the map loads, your browser connects to Google, which may set cookies and process your IP address under Google's privacy policy. The map is provided for convenience only; the address is also printed on the page if you would rather not use it.
Website analytics
This website may use privacy-respecting analytics to understand how pages are used. Analytics data is aggregated and does not identify you. [Confirm analytics tool before launch and update this section; obtain consent if any advertising or identifying trackers are ever added.]
Questions or complaints
Contact the practice manager on (02) 7232 0014 or reception@drrobcooper.com.au. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or the NSW Information and Privacy Commission.
Last updated: [date on approval].