Privacy Policy

The Practitioner, Dr Kaliane Marshall, is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable health records legislation.

This Privacy Policy explains how the Practitioner collects, uses, discloses, stores and manages your personal information and health information.

​

This Privacy Policy may be amended from time to time. Significant changes will be published on the Practitioner’s website and made available upon request.

Contact details

Name: Dr Kaliane Marshall
Email: info@drmarshall.com

The Practitioner has engaged BDA Health Services Pty Ltd to provide administrative, practice management and related support services. The Practice may collect and manage information on behalf of the Practitioner in accordance with this policy and the Practice privacy policy.

​

Collection of Personal Information

The Practitioner collects information necessary to provide psychiatric care and associated administrative services. Information collected may include:

• contact details including name, address, telephone number, email address and emergency contact details;
• information provided when making enquiries or appointments;
• financial and billing information required for processing payments, Medicare claims and rebates;
• health information, medical history, medications, referrals, reports and clinical notes;
• Medicare numbers and Individual Healthcare Identifiers where required;
• technical information collected through the Practitioner’s website and electronic systems;
• information received from other healthcare providers involved in your care.

​

Information is generally collected directly from you, however it may also be obtained from referring practitioners, treating practitioners, hospitals, family members (with your consent), or other parties authorised by law.

The Practitioner may occasionally obtain information from publicly available sources where clinically relevant, legally required, or necessary to lessen or prevent a serious threat to life, health or safety.

 

Use of Personal Information

Your personal information is primarily used to:

• provide psychiatric assessment, treatment and ongoing care;
• communicate with you regarding appointments, treatment and administrative matters;
• liaise with your GP, specialists and other healthcare providers involved in your care;
• process billing, Medicare and other claims;
• undertake quality assurance, risk management and service improvement activities;
• comply with legal and regulatory obligations.

 

Sensitive Information

Health information is sensitive information under Australian law. The Practitioner will only collect, use or disclose sensitive information where:

• you have provided consent;
• it is necessary to provide healthcare services;
• required or authorised by law;
• necessary to prevent or lessen a serious threat to life, health or safety;
• otherwise permitted under the Privacy Act.

​

Disclosure of Information

Information may be disclosed:

• to BDA Health Services Pty Ltd for administration and practice management;
• to healthcare providers involved in your treatment;
• to hospitals and pathology or imaging providers where clinically appropriate;
• to Services Australia for Medicare and related claims;
• to persons you have authorised;
• where required or authorised by law.

​

Mandatory and Legal Disclosures

The Practitioner may disclose information without consent where required or authorised by law, including:

• mandatory reporting obligations;
• subpoenas, warrants and court orders;
• coronial investigations;
• child protection notifications;
• where necessary to lessen or prevent a serious threat to life, health or safety.

​

Research and Quality Improvement

De-identified information may be used for quality improvement, service evaluation and research activities. Identifiable health information will not be used for research without your consent unless authorised by law or approved by an appropriate Human Research Ethics Committee.

​

Social Media

The Practitioner does not routinely monitor patients’ social media activity. If you voluntarily interact with the Practitioner through social media platforms, limited information may be collected to facilitate communication. Social media should not be used for urgent clinical matters.

​

Telehealth and Electronic Communications

The Practitioner may provide services using telehealth technologies. While reasonable measures are taken to protect privacy, electronic communications carry inherent security risks. By participating in telehealth consultations, you acknowledge these risks.

Email is not a secure method of communication. Alternative methods of communication are available if preferred.

​

Storage and Security

Patient records may be stored electronically, physically, or both. The Practitioner and Practice take reasonable steps to protect information from misuse, interference, loss, unauthorised access, modification or disclosure.

​

Overseas Disclosure

Some electronic service providers used by the Practice may store information on servers located outside Australia, including the United States. Where overseas disclosure occurs, reasonable steps will be taken to ensure information is protected in accordance with Australian privacy requirements.

​

Retention and Destruction

Records are retained for at least seven years from the date of last contact, or until a child reaches 25 years of age, in accordance with legal requirements.

When records are no longer required and retention periods have expired, information will be securely destroyed or permanently de-identified where practicable.

​

Access and Correction

You may request access to or correction of your personal information by contacting the Practitioner in writing. Requests will generally be responded to within 30 days.

Access may be refused in limited circumstances permitted by law. If access is refused, written reasons will be provided.

A reasonable administrative fee may be charged for access requests.

​

Anonymity and Pseudonyms

Where lawful and practicable, you may interact with the Practice anonymously or using a pseudonym. However, this may limit the Practitioner’s ability to provide psychiatric services.

​

Use of Commonwealth Government Identifiers

The Practitioner will not adopt Commonwealth government identifiers, such as Medicare numbers, as the Practitioner’s own identifier except as permitted by law.

 

Notifiable Data Breaches

Where an eligible data breach occurs, affected individuals and the OAIC will be notified in accordance with the Privacy Act 1988 (Cth).

​

Privacy Complaints

If you have concerns regarding privacy, please contact the Practitioner in writing. Complaints will generally be addressed within 30 days.

If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner (OAIC).

Website: www.oaic.gov.au
Telephone: 1300 363 992