MRP Health (“we”, “us”, “our”) is committed to protecting the privacy and confidentiality of all personal information we collect. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what information we collect, how we use it, how we store it, and your rights regarding your personal information.
We may update this policy periodically to reflect changes in legislation or our operations.
Information We Collect
We collect personal and sensitive information necessary to provide safe and effective allied health services. This may include information about:
- Clients and patients
- Parents, carers, guardians, or family members
- Referrers, support coordinators, and other health professionals
- Contractors, service providers, and administrative partners
- Website visitors and individuals making enquiries
Types of information collected
- Personal details (name, date of birth, address, phone number, email)
- Health information (medical history, presenting concerns, treatment notes, referrals, reports)
- Multimedia records (photos, videos, audio recordings for clinical purposes)
- Administrative information (Medicare, NDIS, private health insurance, payment details)
- Communication records (emails, messages, website forms, telehealth interactions)
- Website analytics data (IP address, browser type, cookies, usage patterns)
How We Collect Information
We collect information through:
- Intake forms and registration documents
- In‑person consultations and telehealth sessions
- Photos, videos, and audio recordings taken for clinical purposes
- Referrals from other health professionals (with your consent)
- Online booking systems, website forms, and email communication
- Phone calls, SMS, and social media interactions
- Third‑party systems used for practice management, billing, or communication
Where reasonable, we collect information directly from you. If information is collected from a third party, we will inform you where appropriate.
Why We Collect Your Information
We collect and use personal information to:
- Provide allied health assessment, treatment, and ongoing care
- Document clinical progress and maintain accurate health records
- Communicate with you about appointments, treatment, or administrative matters
- Coordinate care with other health professionals (with your consent)
- Meet legal, regulatory, and insurance obligations
- Improve our services and client experience
- Manage internal operations, quality assurance, and staff training
Use of photos, videos, and recordings
Images and recordings may be used for:
- Clinical assessment and treatment planning
- Monitoring progress over time
- Internal professional development
- Administrative or operational purposes
We do not use client images or recordings for marketing or promotional purposes without separate explicit consent.
Failure to Provide Information
If you choose not to provide certain personal or health information, we may be unable to:
- Provide safe and effective treatment
- Tailor services to your needs
- Process payments or claims
- Communicate important updates
Disclosure of Information
We may disclose your information to:
- Internal clinical and administrative staff
- Other treating health professionals (with your consent)
- IT providers, cloud storage services, and practice management software
- External service providers who support our operations
- Medicare, private health insurers, NDIS, or other funding bodies
- Legal or regulatory authorities when required by law
Some third‑party providers may store data overseas (e.g., the United States). These providers do not sell or use your information for secondary purposes.
We do not sell personal information.
Marketing and Communication Preferences
As part of our standard service, we send appointment reminders, confirmations, and service‑related communications by email and text message. By providing your contact details, you agree to receive these communications.
If you would like to change how we contact you or opt out of text or email messages, please let us know so we can update your client file. You can also opt out using the unsubscribe link within the email.
Security of Your Information
We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification, or disclosure.
Security measures include:
- Secure electronic record systems
- Password‑protected devices and encrypted storage
- Role‑based access controls
- Secure disposal of paper records
- Staff confidentiality agreements and privacy training
- SSL encryption for online forms and payments
Despite these measures, no electronic transmission is completely secure.
Website Analytics, Cookies, and Online Data
Our website may use:
- Google Analytics
- Cookies
- Tracking tools
These tools collect information such as:
- IP address
- Browser type
- Pages visited
- Time spent on the site
You may disable cookies through your browser settings, but some website features may not function properly.
Anonymous Interactions
You may choose to remain anonymous or use a pseudonym when interacting with us, except where:
- It is impractical to provide services without identifying you
- We are legally required to collect identifying information
Copyright and Image Use
Images on our website or social media are used with permission. They must not be downloaded, reproduced, or shared without written consent from MRP Health and the individuals featured.
Misuse of Website
You agree not to use our website for unlawful purposes. Misuse may result in legal action.
Access to and Correction of Your Information
You may request:
- Access to your personal or health information
- Corrections to inaccurate or incomplete information
We will respond within a reasonable timeframe unless restricted by law.
Requests can be made via our contact details below.
Retention and Disposal
We retain health records in accordance with legal requirements:
- Adults: at least 7 years from the last date of service
- Children: until the client turns 25
After this period, records are securely destroyed or permanently de‑identified.
Complaints and Concerns
If you have a question or complaint about how your information has been handled, please contact us. We will respond promptly and respectfully.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Post: GPO Box 5218 Sydney NSW 2001
Website: https://www.oaic.gov.au/individuals/how-do-imake-a-privacy-complaint
Contact Us
MRP Health
Post: Shop 7 143-151 Military Road, Neutral Bay NSW 2089
Phone: 02 9904 2180
Email: Info@mrphealth.com.au