Lower Limb Clinic Brisbane Version 3.0 - Approved November 2025 - Review due November 2026
1300 055 220 | manager@llcb.com.au | www.llcb.com.au

This Privacy Policy provides information to patients on how their personal information (including health information) is collected, used, and shared within our practice, and under what circumstances it may be disclosed to third parties. Lower Limb Clinic Brisbane is committed to complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the RACGP Standards for General Practices (5th Edition).


Why and When Your Consent is Necessary
When you register as a patient, you provide consent for our clinicians and practice staff to access and use your personal information so we can provide you with the best possible healthcare. Only authorised staff who need to see your information will have access to it. If we need to use your information for any other purpose, we will seek your additional consent.


Why We Collect, Use, Hold and Share Your Personal Information
Our primary purpose for collecting, using, holding, and sharing your personal information is to manage your healthcare. We may also use it for directly related business activities, such as financial claims and payments, practice accreditation, auditing, staff training, and quality improvement initiatives. What Personal Information We Collect The information we collect includes your:
• name, date of birth, address, and contact details
• medical history, medications, allergies, immunisations, and social/family history
• Medicare number and healthcare identifiers
• health fund details and other necessary billing information.

Dealing with Us Anonymously
You have the right to deal with us anonymously or under a pseudonym unless it is impractical for us to do so, or unless we are required or authorised by law to deal with identified individuals.


How We Collect Your Personal Information
We may collect your personal information in several ways: 1. When you register for your first appointment. 2. During the course of providing medical services, including via eScripts and My Health Record. 3. When you contact us by email, SMS, phone, or through our website or referral portal. 4. From other sources where it is not practical or reasonable to collect it directly from you — for example: o your guardian or responsible person o other healthcare providers, such as specialists, allied health professionals, hospitals, community health services, and pathology or diagnostic services o your health fund, Medicare, or the Department of Veterans’ Affairs (DVA).


When, Why and With Whom We Share Your Personal Information
We may share your information with third parties for legitimate business and clinical purposes, including:

• other healthcare providers involved in your care
• accreditation agencies or information technology providers (who must also comply with this policy and the APPs)
• when required or authorised by law (e.g., court subpoenas or statutory reporting)
• where it is necessary to prevent or lessen a serious threat to life, health, or safety
• when assisting in locating a missing person or participating in lawful dispute resolution.

We will not share your personal information with anyone outside Australia unless required or permitted by law and only with your consent.

We will never use your information for marketing without your express consent, and you may opt out of direct marketing at any time by notifying the practice in writing.

Data Breach Notification
In the event of a data breach involving your personal information, we will act promptly to investigate, contain, and mitigate harm.
If the breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches Scheme.

Research and Quality Improvement
We may use de-identified or aggregated patient data for research, education, or quality improvement purposes.
If identifiable information is required, we will obtain your explicit consent. You may opt out of participation in data use for research at any time.


How We Store and Protect Your Personal Information
Your personal information is stored securely in an electronic health record system protected by passwords and multi-factor authentication (MFA). All paper documents are scanned into your electronic file, and originals are securely destroyed. All staff are required to sign confidentiality agreements and complete regular privacy and data protection training.

Accessing and Correcting Your Personal Information
You have the right to access and correct your personal information. Requests must be made in writing to the Practice Manager at manager@llcb.com.au

We will respond within 30 days. A fee of $50 applies for record provision, which must be paid before records are sent. Records are provided electronically with password protection.

We take reasonable steps to ensure your information remains accurate and current, and you may request updates at any time.


Privacy Complaints and Enquiries
We take privacy concerns seriously. Please submit complaints or enquiries in writing to:

Practice Manager
Lower Limb Clinic Brisbane
2/16 Thompson Street
Bowen Hills QLD 4006
Email: manager@llcb.com.au

Your complaint will be reviewed by the Practice Manager and Principal within 30 days, and you will be kept informed of progress.

If you are not satisfied with our response, you may contact:
• Office of the Australian Information Commissioner (OAIC)
www.oaic.gov.au | 1300 363 992

• Queensland Office of the Information Commissioner (OIC)
enquiries@oic.qld.gov.au | (07) 3234 7373 or 1800 642 753

Policy Review Statement
This policy is reviewed annually or when significant legislative or procedural changes occur.


References
1. Privacy Act 1988 (Cth) – Office of the Australian Information Commissioner (OAIC)
2. Australian Privacy Principles (APPs) – OAIC Guidelines
3. RACGP. Standards for General Practices, 5th Edition (2023)
4. RACGP. Managing Health Information in General Practice (2024)
5. OAIC. Notifiable Data Breaches Scheme (2024)
6. Office of the Information Commissioner Queensland. Information Privacy Guidelines (2024)