Privacy Policy

North Queensland Paediatric Surgery is committed to protecting the privacy of our patients and families. We handle personal and health information in accordance with the Privacy Act 1988, the Australian Privacy Principles and other applicable healthcare laws.

Information we collect

We collect information that is reasonably necessary to provide paediatric surgical care and operate our practice. This may include:

Your child’s name, date of birth, address and contact details
Parent or guardian details and relationship to the child
Medicare and private health insurance information
Referrals, medical history, medications and allergies
Clinical notes, investigation results, imaging and correspondence
Appointment, billing and payment information
Relevant information from hospitals and other healthcare providers

We usually collect information directly from a parent, guardian or patient. We may also receive information from GPs, paediatricians, hospitals, pathology and imaging providers, Medicare, private health insurers, My Health Record and other members of your child’s healthcare team.

If we cannot collect the information we need, we may be unable to provide care safely, process claims or arrange treatment.

How we use and share information

We use personal and health information to:

Assess and manage referrals
Arrange appointments, investigations, surgery and follow-up care
Provide clinical care and treatment
Communicate with parents, guardians and authorised representatives
Communicate with referring practitioners and other healthcare providers
Process Medicare and private health insurance claims
Prepare accounts, estimates, reports and clinical correspondence
Meet our professional, legal and insurance obligations

Information may be shared with healthcare providers and organisations involved in your child’s care, including hospitals, anaesthetists, GPs, paediatricians, pathology and imaging providers.

We may also disclose information to Medicare, private health insurers, our authorised service providers or government and regulatory authorities where permitted or required by law.

We do not sell patient information or use health information for unrelated marketing.

Parents guardians and children

We usually communicate with a child’s parent or legal guardian. We may request evidence of identity, parental responsibility, guardianship or authority.

A parent or guardian’s access to a child’s information may depend on the child’s age, maturity, wishes and best interests, as well as any relevant court orders, safety concerns or legal requirements.

My Health Record

Authorised team members may access or upload information to My Health Record where permitted and relevant to your child’s care. Access is subject to My Health Record legislation, access controls and our Security and Access Policy.

Communication and digital services

We may communicate by telephone, SMS, email, secure messaging and online forms. While we take reasonable steps to protect information, ordinary SMS and email may carry some privacy risks. You may ask us to use a different communication method where reasonably practicable.

Our website may use cookies and analytics that collect technical information such as device details, IP addresses and website activity. This information is used to maintain and improve the website.

Our core clinical records are maintained using healthcare practice systems intended for use in Australia. Some technology or support providers may operate outside Australia. We take reasonable steps to assess and protect information handled by these providers.

Storage and security

We take reasonable steps to protect personal and health information from misuse, loss, unauthorised access, modification and disclosure. These measures include secure practice systems, individual user access, multifactor authentication, staff confidentiality requirements and secure communication methods.

Records are retained for the periods required by law, professional obligations, clinical need and insurance requirements. When information is no longer required and can lawfully be disposed of, it is securely destroyed or de-identified.

Suspected privacy or data breaches will be investigated and managed in accordance with applicable notification requirements.

Access and correction

Patients, parents, guardians and authorised representatives may request access to the information we hold or ask us to correct information that is inaccurate, incomplete or out of date.

We may ask for evidence of identity and authority before releasing information. Access may be limited or refused where permitted or required by law. If this occurs, we will generally explain the reason and available complaint options.

Requests should be directed to the Practice Manager. A reasonable administrative fee may apply to providing copies of records, but there is no charge for requesting a correction.

Privacy concerns and complaints

Privacy questions or complaints should be directed to our Practice Manager. We will investigate the matter fairly and aim to respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

North Queensland Paediatric Surgery
Mater Private Hospital Mackay
76 Willetts Road
North Mackay QLD 4740

Phone: (07) 4863 0567
Email: admin@nqpaedsurg.com.au

Effective September 2026. This policy will be reviewed periodically and updated when our practices or legal obligations change.