Privacy Policy

1. Introduction

Everyday Allied Health (“we”, “us”, or “our”) is committed to protecting the privacy and confidentiality of personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable health records legislation.

This Privacy Policy applies to personal information collected through our website, referral forms, contact forms, email communications, and in the course of providing occupational therapy services.

2. Information We Collect

We may collect the following types of personal information:

• Contact details: name, email address, phone number, and postal address
• Referral information: details provided in referral and contact forms, including participant information, NDIS numbers, and reasons for referral
• Health information: medical history, functional assessments, therapy notes, progress reports, and other clinical records collected during the provision of services
• NDIS information: NDIS plan details, funding arrangements, and support coordinator or plan manager contact details
• Website usage data: IP address, browser type, pages visited, and other technical information collected through cookies or analytics tools

We collect personal information directly from you, from referrers (with your consent), from the NDIS or other funding bodies, and from other health professionals involved in your care (with appropriate consent).

3. How We Use Your Information

We use personal information for the following purposes:

• Providing occupational therapy assessment, intervention, and reporting services
• Communicating with you, your family, referrers, and other members of your support team
• Preparing clinical reports, NDIS documentation, and funding applications
• Managing referrals, service agreements, and billing
• Responding to enquiries submitted through our website or email
• Complying with legal and regulatory obligations, including AHPRA and NDIS requirements
• Improving our services and website experience

4. Disclosure of Information

We do not sell or rent your personal information. We may disclose your information to:

• NDIS, plan managers, and support coordinators (as required for service delivery and billing)
• Other health professionals involved in your care (with your consent)
• Government agencies or regulators where required by law
• IT service providers who assist with data storage and communication (under strict confidentiality agreements)
• Legal advisers where necessary to protect our rights or comply with legal obligations

We will only disclose health information with your consent or where permitted or required by law.

5. Health Information

As a health service provider, we handle sensitive health information with the highest level of care. Health records are stored securely and accessed only by authorised personnel directly involved in your care.

Clinical records are retained in accordance with applicable health records legislation and professional standards. You have the right to request access to your health records, subject to certain exceptions under the law.

6. Data Security

We implement appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, or disclosure. These measures include:

• Secure storage of electronic and paper records
• Access controls limiting information to authorised personnel
• Encrypted communication where appropriate
• Regular review of our data security practices

While we take all reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We encourage you to contact us immediately if you believe your information has been compromised.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, and professional obligations. Health records are retained for a minimum of seven years from the date of last service, or longer where required by law or in the case of minors.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate, incomplete, or out-of-date information
• Withdraw consent for certain uses of your information (where applicable)
• Make a complaint about how we handle your personal information

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within a reasonable timeframe.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve your browsing experience and collect anonymous usage data. You can control cookie settings through your browser preferences.

We do not use cookies to collect personally identifiable information without your knowledge and consent.

10. Third-Party Services

Our website uses third-party services that may collect information you provide:

• Formspree: Our referral and contact forms are processed through Formspree. Information submitted through these forms is transmitted to and stored by Formspree in accordance with their privacy policy.
• Google Fonts: We use Google Fonts to display typography on our website. Google may collect usage data in accordance with their privacy policy.

We encourage you to review the privacy policies of these third-party services. We are not responsible for the privacy practices of external websites linked from our site.

11. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us first so we can address your concerns. We take all complaints seriously and will investigate and respond promptly.

If you are not satisfied with our response, you may lodge a complaint through the Office of the Australian Information Commissioner privacy complaints process.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be published on this page with a revised “Last updated” date. We encourage you to review this policy periodically.

13. Contact Us

For privacy-related enquiries, requests to access or correct your information, or to make a complaint, please contact:

Everyday Allied Health
Email: admin@everydayalliedhealth.com.au