The information we collect will depend on your interaction with QURS and may include:

• name, date of birth, address, telephone number and email address
• Medicare, Department of Veterans' Affairs and private health insurance details
• healthcare identifiers where applicable
• referral information and details of your referring practitioner
• medical history, medications, allergies, diagnoses and previous treatment
• examination findings, investigation results, imaging and pathology results
• clinical notes and correspondence
• information about procedures, hospital admissions and treatment
• appointment and communication records
• billing and payment information
• information provided through our website, email or telephone

Health information is sensitive information under Australian privacy law and is handled with particular care.

Where reasonably practicable, we collect personal information directly from you.

We may collect information when you contact QURS, make an appointment, attend a consultation, receive medical care, complete a registration or consent form, communicate with us by telephone, email or SMS, or submit information through our website.

We may also receive information from general practitioners, specialists, hospitals, health services,
pathology and diagnostic imaging providers, pharmacies, allied health providers, Medicare, the
Department of Veterans' Affairs, private health insurers, My Health Record, or a parent, guardian,

We collect, hold and use personal information where reasonably necessary to provide healthcare and operate our practice.

This may include:

• assessing, diagnosing and treating medical conditions
• coordinating your care with other healthcare professionals
• communicating with you about appointments, investigations and treatment
• communicating with your referring doctor and other members of your healthcare team
• obtaining and reviewing pathology, imaging and other investigation results
• arranging hospital admissions, procedures and follow up care
• maintaining appropriate clinical records
• processing Medicare, DVA, private health insurance and other claims
• billing and account administration
• responding to enquiries
• quality assurance, clinical governance and practice management
• meeting professional, legal and regulatory obligations

We may disclose your personal information where reasonably necessary for your healthcare or the operation of the practice.

This may include disclosure to:

• your general practitioner or referring practitioner
• other specialists and healthcare professionals involved in your care
• hospitals and healthcare facilities
• pathology and diagnostic imaging providers
• pharmacies and allied health providers
• Medicare, the Department of Veterans' Affairs and private health insurers
• healthcare software, communications and information technology providers supporting our practice
• professional advisers, including accountants, lawyers and medical indemnity providers, where appropriate
• government agencies or regulators where required or authorised by law

We may also disclose information where you have provided consent or where disclosure is otherwise permitted or required by law.

QURS does not sell patient information.

Where applicable, QURS may access or contribute information to the My Health Record system in accordance with applicable legislation and your access controls.

We may also collect and use healthcare identifiers where permitted for the purposes of accurately identifying you and managing health information as part of your care.

QURS may communicate with you and other healthcare providers using email, SMS and secure electronic messaging.

While we take reasonable precautions to protect information transmitted electronically, no method of electronic communication can be guaranteed to be completely secure.

If you have particular concerns about how we communicate with you, please contact the practice.

When you visit our website, certain technical information may be collected automatically, including information about your browser, device, pages visited and how the website is used.

Our website may use cookies and similar technologies to support functionality, security and performance.

If you submit information through our website, we will use that information to respond to your enquiry and for related administrative purposes.

Website forms and email should not be used for medical emergencies or urgent medical concerns.

QURS may use third party providers to support website hosting, practice management software, clinical software, secure messaging, appointment management, payment processing, information technology and data storage.

We take reasonable steps to select services appropriate for the type of information involved.

Our website may also contain links to external websites. QURS is not responsible for the privacy practices or content of external websites.

Some technology providers used by QURS may use infrastructure located outside Australia.

Where personal information is disclosed, stored or processed overseas, QURS will take reasonable steps to ensure that information is handled appropriately and in accordance with applicable Australian privacy requirements.

The location of data processing may vary depending on the providers used by the practice.

QURS takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

These measures may include secure clinical systems, access controls, authentication, staff access restrictions, information technology security measures, confidentiality obligations and secure storage and disposal of records.

Where a data breach occurs, QURS will assess and respond to the incident in accordance with applicable legal requirements.

You may request access to personal information QURS holds about you, including your health information.

Requests can be made using the contact details below.

We will respond within a reasonable period and in accordance with applicable law. In some circumstances, access may be limited or refused where permitted by law.

We take reasonable steps to ensure that personal information we hold is accurate, complete and up to date.

If you believe information we hold about you is incorrect or requires updating, please contact us.

You may request that your personal information be corrected and we will take reasonable steps to do so where appropriate.

You may interact with QURS anonymously or using a pseudonym where it is lawful and practicable to do so.

However, in most circumstances we will need to accurately identify you in order to provide medical care, maintain appropriate records, communicate safely with other healthcare providers and process healthcare claims.

QURS will not use your health information for direct marketing without your consent where consent is required by law.

You may withdraw consent to receive non clinical marketing or practice communications at any time.

Appointment reminders and communications relating to your healthcare are not considered direct marketing.

Medical records and other personal information are retained for the periods required by applicable legislation, professional standards and good clinical practice.

When information is no longer required to be retained, we will take reasonable steps to securely destroy or permanently de identify it where appropriate and permitted by law.

If you have concerns about how QURS has handled your personal information, please contact us in the first instance.

We will review your concern and aim to respond within a reasonable period.

If you are not satisfied with our response, you may also be able to make a complaint to the Office of the Australian Information Commissioner.

Further information is available at www.oaic.gov.au.

Queensland Urology & Robotic Surgeons
QURS
‍
Email: reception@qurs.com.au
Website: www.qurs.com.au

QURS may update this Privacy Policy from time to time to reflect changes in our practice, technology, legal obligations or privacy requirements.


The current version will be published on the QURS website together with the date it was last updated.