PRIVACY POLICY
This Privacy Policy applies to all personal information collected by Access Rehab Pty Ltd (we, us or our) via the website located at www.accessrehab.com.au.
What information do we collect?
The kind of Personal Information that we collect from you will depend on how you use the website. The Personal Information which we collect and hold about you may include:
Account & appointment booking information: this includes information that we collect when you register for our Services or otherwise book an appointment with us. The information we collect includes your name, date of birth, email address, mailing address, personal or work telephone number, emergency contact details and your selected booking time and other details of the booking you directly give us during the booking process.
Participant information: this includes information that you have provided to us when you are participating in the Services. The information we collect includes details relevant to the Service you have requested and any other additional information you provide to us directly or indirectly through your use of the Services. We use such information to assist in providing our Services to you.
Financial information: this includes information such as Government funding, payment card details and bank account details. We use this information to send to our third party payment gateways when you make a payment for Services.
Services use information: any information you provide when you use our Services. For example, when you contact us we collect information that enables the Services to be able to run.
Marketing use information: this includes information provided to us using a marketing or newsletter sign up form.
Surveys: information in connection with surveys, questionnaires and promotions.
Other information we collect related to your use of the Services: your device identity and type, I.P. address, geo-location information, page view statistics, advertising data and standard web log information and any other information provided by you to us via our Services or our online presence, or otherwise required by us or provided by you.
Account & appointment booking information: this includes information that we collect when you register for our Services or otherwise book an appointment with us. The information we collect includes your name, date of birth, email address, mailing address, personal or work telephone number, emergency contact details and your selected booking time and other details of the booking you directly give us during the booking process.
Participant information: this includes information that you have provided to us when you are participating in the Services. The information we collect includes details relevant to the Service you have requested and any other additional information you provide to us directly or indirectly through your use of the Services. We use such information to assist in providing our Services to you.
Financial information: this includes information such as Government funding, payment card details and bank account details. We use this information to send to our third party payment gateways when you make a payment for Services.
Services use information: any information you provide when you use our Services. For example, when you contact us we collect information that enables the Services to be able to run.
Marketing use information: this includes information provided to us using a marketing or newsletter sign up form.
Surveys: information in connection with surveys, questionnaires and promotions.
Other information we collect related to your use of the Services: your device identity and type, I.P. address, geo-location information, page view statistics, advertising data and standard web log information and any other information provided by you to us via our Services or our online presence, or otherwise required by us or provided by you.
Types of information
The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.
Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:
- (a) whether the information or opinion is true or not; and
- (b) (ii) whether the information or opinion is recorded in a material form or not.
If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as “Personal Information” and will not be subject to this privacy policy.
Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.
Sensitive Information will be used by us only:
- (a) for the primary purpose for which it was obtained;
- (b) for a secondary purpose that is directly related to the primary purpose; and
- (c) with your consent or where required or authorised by law.
How we collect your Personal Information
- (a) We may collect Personal Information from you whenever you input such information into the Website, related app or provide it to Us in any other way.
- (b) We may also collect cookies from your computer which enable us to tell when you use the Website and also to help customise your Website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.
- (c) We generally don’t collect Sensitive Information, but when we do, we will comply with the preceding paragraph.
- (d) Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party, in cases like this we will take steps to make you aware of the information that was provided by a third party.
Purpose of collection
- (a) We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about our business.
- (b) We customarily only disclose Personal Information to service providers who are utilised by us in the provision of these services; develop and improve our services, provide you with services, conduct quality assurance testing, provide support and/or provide other services to us. The service provides include; information technology service providers such as web hosts, payment processors, hosting services, content delivery services, IT support providers and specialist consultants. Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties.
- (c) By using our Website, you consent to the receipt of direct marketing material. We will only use your Personal Information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from us. We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe button link.
Security, Access and correction
- (a) We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. We use third-party cloud providers that provide hosting, data storage and other services. We currently use Xero, Microsoft One Drive, Hard Copy Files and our electronic devices for this purpose. Our information technology systems are password protected (two factor authentication where applicable), and we use a range of administrative and technical measures to protect these systems (including anti-malware software and Norton 360). However we cannot guarantee the security of your personal information.
- (b) When we no longer require your Personal Information for the purpose for which we obtained in, we will take reasonable steps to destroy and anonymise or de-identify it. Most of the Personal Information that is stored in our client files and records will be kept for a maximum of 7 years to fulfill our record keeping obligations.
- (c) The Australian Privacy Principles:
- Permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and
- Allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).
- (d) Where you would like to obtain such access, please contact us in writing on the contact details set out at the bottom of this privacy policy.
Complaint procedure
If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us as on the contact details set out at the bottom of this policy. All complaints will be considered by our Director and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with
you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.
you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.
Overseas transfer
Your Personal Information may be transferred overseas or stored overseas for a variety of reasons. It is not possible to identify each and every country to which your Personal Information may be sent. If your Personal Information is sent to a recipient in a country with data protection laws which are at least substantially similar to the Australian Privacy Principles, and where there are mechanisms available to you to enforce protection of your Personal Information under that overseas law, we will not be liable for a breach of the Australian Privacy Principles if your Personal Information is mishandled in that jurisdiction. If your Personal Information is transferred to a jurisdiction which does not have data protection laws as comprehensive as Australia's, we will take reasonable steps to secure a contractual commitment from the recipient to handle your information in accordance with the Australian Privacy Principles.
How to contact us about privacy
If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us through: admin@accessrehab.com.au.
International Data Protection Measures
Before transferring your Personal Information overseas, we will take reasonable steps to ensure that: (a) the overseas recipient is subject to privacy laws providing substantially similar protections to the Australian Privacy Principles; (b) the recipient has agreed to a binding data transfer agreement protecting your privacy rights; and (c) you are notified of specific countries where your data may be transferred and any associated risks. Where these protections cannot be guaranteed, we will obtain your explicit consent before proceeding with the transfer.
