181 Victoria Parade Fitzroy 3065

03 9417 7222

181 Victoria Parade Fitzroy, 3065, Melbourne Australia - 03 9417 7222

PRIVACY AND HEALTH RECORDS POLICY

 

Last updated: June 06, 2026

This Privacy Policy describes our policies and procedures on the collection, holding, use, management, and disclosure of your personal and health information when you use our Service or visit our clinic. It outlines your privacy rights and how the law protects you under the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Health Records Act 2001 (Vic).

As a healthcare provider, we collect “health information,” which is legally classified as Sensitive Information. By using our services or providing your information, you consent to the collection, holding, use, and disclosure of your health and personal data in accordance with this policy.

  1. INTERPRETATION AND DEFINITIONS

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for you to access our Service or manage your clinic bookings.
  • Company (referred to as either “the Clinic”, “We”, “Us” or “Our” in this Agreement) refers to Diskin Life, located at 181 Victoria Parade, Fitzroy, VIC 3065, Melbourne, Australia.
  • Health Information means any personal information or an opinion about your physical or mental health, disability, health preferences, or any health services provided to you, in accordance with the Health Records Act 2001 (Vic).
  • Personal Data means any information or an opinion about an identified individual, or an individual who is reasonably identifiable.
  • Service refers to the medical, chiropractic, and digital wellness services provided via our clinic or Website.
  • Website refers to Diskin Life, accessible from diskinlife.com.au.
  1. THE TYPES OF DATA WE COLLECT

Personal and Health Information

To provide safe, effective, and professional chiropractic care, we must collect information that includes, but is not limited to:

  • Contact details (Name, address, phone number, email)
  • Demographics (Date of birth, gender, occupation)
  • Clinical history (Prior injuries, medical conditions, imaging results, symptoms, family history)
  • Treatment notes, clinical observations, and ongoing care plans
  • Financial and billing details (Private health insurance details, Medicare numbers, WorkSafe/TAC claims)

Consent for Sensitive Data

We will only collect health and clinical information with your explicit, informed consent. This is typically collected via your initial patient intake forms and during clinical consultations.

  1. HOW WE USE AND DISCLOSE YOUR INFORMATION

We use your data strictly to deliver primary healthcare and manage our clinical practice. Your information will only be used or disclosed for the primary purpose for which it was collected, or for directly related secondary purposes you would reasonably expect. This includes:

  • Providing chiropractic diagnosis, treatment, and ongoing care.
  • Communicating with your other nominated healthcare practitioners (e.g., your GP, radiologist, or physiotherapist) with your permission.
  • Processing payments, Medicare rebates, or private health insurance claims.
  • Fulfilling our legal obligations under Victorian and Australian health laws.

We will never use or sell your health data for direct marketing purposes without your express opt-in consent.

  1. CLINICAL RECORD RETENTION AND MANAGEMENT

In strict compliance with the Health Records Act 2001 (Vic), we manage the retention and destruction of clinical records under rigid timelines:

  • Adult Patients: Your clinical records will be securely retained for a minimum period of 7 years from the date of your last clinical attendance.
  • Minor Patients (Under 18): If you were treated as a child, your records will be kept until you reach 25 years of age, or for 7 years from your last attendance, whichever is longer.
  • Secure Destruction: Once these statutory retention periods expire, files that are no longer required are permanently and securely destroyed or de-identified via certified commercial shredding or secure digital wiping.
  1. TECHNICAL AND ORGANISATIONAL DATA SECURITY

We take our joint obligations under APP 11 and HPP 4 seriously to prevent personal and clinical health information from misuse, interference, loss, unauthorised access, modification, or disclosure:

Technical Safeguards

  • Encryption: All digital patient management systems, clinical notes, and booking platforms utilize advanced end-to-end encryption both at rest and in transit.
  • Access Protocols: Multi-Factor Authentication (MFA) is strictly enforced on all clinic hardware, emails, and cloud storage systems.
  • Network Security: Regular security updates, firewalls, and active endpoint protection on all clinic computers.

Organisational Safeguards

  • Role-Based Access: Access to clinical files is restricted solely to authorized practitioners and administrative staff who require access to perform their duties.
  • Staff Training: All team members undergo mandatory annual training on medical privacy laws and data confidentiality.
  • Data Breach Response: We maintain an active Data Breach Response Plan to fulfill our statutory obligations under the federal Notifiable Data Breaches (NDB) scheme if an eligible data breach occurs.
  1. TRANSPARENCY IN AUTOMATED DECISION-MAKING (ADM)

In compliance with Australian privacy transparency standards, we do not utilize computer software, artificial intelligence (AI), or fully automated diagnostic systems to make sole-source, impactful decisions regarding your physical treatment, clinical diagnosis, or financial eligibility without active, direct human intervention and oversight by a registered Chiropractor.

  1. CROSS-BORDER DATA DISCLOSURE

We host and store your core clinical files locally within secure Australian data centres. If we utilize global cloud tools for administrative support (such as email servers, backup drives, or communication tools), we take reasonable steps to ensure that the overseas recipient handles your personal information in accordance with the Australian Privacy Principles.

  1. YOUR PRIVACY RIGHTS, ACCESS, AND COMPLAINTS

You hold clear statutory rights regarding your health data:

  • Access: You have a legal right to request a copy of your clinical notes and health records.
  • Correction: You can request updates to inaccurate, out-of-date, or incomplete records.
  • Anonymity: Due to healthcare safety laws and billing regulations, it is generally impractical and unlawful for us to diagnose and treat you anonymously or under a pseudonym.

Lodging a Request or Complaint

If you wish to access your notes, update your records, or make a formal complaint regarding a potential privacy breach, please contact our Privacy Officer in writing:

  • Practice Address: Diskin Life, 181 Victoria Parade, Fitzroy, VIC 3065, Melbourne, Australia
  • Website Contact Form: diskinlife.com.au

We will review your inquiry or complaint diligently and provide a comprehensive response within 30 days.

Escalation Authorities

If you are unsatisfied with our response, or believe your health data has been mishandled under federal or Victorian state law, you have the right to escalate your complaint directly to the relevant oversight body:

  1. For Victorian Health Record Issues: Contact the Victorian Health Complaints Commissioner (HCC) under the Health Records Act 2001 (Vic).
  2. For General Privacy Breaches: Contact the Federal Office of the Australian Information Commissioner (OAIC) under the Privacy Act 1988 (Cth).