Waverley Central Chiropractic Clinic Pty Ltd

Effective Date: 20 June 2026
Last Updated: 20 June 2026

1. Purpose

Waverley Central Chiropractic Clinic Pty Ltd (“Waverley Central Chiropractic Clinic”, “WCCC”, “we”, “our” or “us”) is committed to protecting the privacy, confidentiality and security of personal information and health information entrusted to us.

This Privacy Policy explains how we collect, use, hold, disclose, store and manage personal information and health information in accordance with:

  • The Privacy Act 1988 (Cth)
  • The Australian Privacy Principles (APPs)
  • The Health Records Act 2001 (Vic)
  • The Health Privacy Principles (HPPs)
  • Applicable requirements of the Chiropractic Board of Australia
  • Applicable requirements of the Australian Health Practitioner Regulation Agency (AHPRA)
  • Other relevant Australian laws and professional obligations

This Privacy Policy applies to patients, prospective patients, website visitors, employees, contractors and other individuals who interact with our practice.

By engaging our services, visiting our website, attending our clinic, or otherwise interacting with us, you acknowledge that your personal information will be handled in accordance with this Privacy Policy.

2. Our Contact Details

Waverley Central Chiropractic Clinic Pty Ltd
468 Springvale Road
Glen Waverley VIC 3150

Phone: (03) 9545 0278

Email: [email protected]

Website: https://myfamilychiropractor.com.au

If you have questions about this Privacy Policy or the way we handle your information, please contact us using the details above.

3. Types of Information We Collect

We may collect and hold personal information and health information including:

Identification and Contact Information

  • Full name
  • Date of birth
  • Gender
  • Residential and postal address
  • Telephone number
  • Email address
  • Occupation
  • Emergency contact details

Health Information

  • Medical history
  • Presenting complaints
  • Health conditions and diagnoses
  • Previous injuries and surgeries
  • Medications and allergies
  • Imaging reports and diagnostic results
  • Treatment records and clinical notes
  • Referral information
  • Health fund details
  • Medicare information
  • Information relevant to the provision of healthcare services

Financial Information

  • Billing records
  • Payment history
  • Medicare claim information
  • Private health insurance information

Website and Digital Information

  • IP address
  • Browser type
  • Device information
  • Website usage information
  • Online enquiry information
  • Appointment booking information

Employment Information

Where applicable, we may collect information relating to employees, contractors and job applicants.

Health information is considered sensitive information under Australian privacy law and receives additional protections.

4. How We Collect Information

We collect information directly from you wherever possible, including through:

  • Patient registration forms
  • Health questionnaires
  • Clinical consultations
  • Telephone calls
  • Emails
  • Website enquiries
  • Online booking systems
  • Appointment requests
  • Written correspondence
  • Payment transactions

In some circumstances we may collect information from third parties including:

  • Referring practitioners
  • General practitioners
  • Specialists
  • Hospitals
  • Allied health providers
  • Family members or carers (with appropriate authority)
  • Medicare
  • Private health insurers
  • Workers compensation insurers
  • TAC
  • NDIS representatives
  • Other healthcare providers involved in your care

Where reasonable and practicable, we will collect information directly from you.

5. Why We Collect Information

We collect personal information and health information to:

  • Provide chiropractic assessment, diagnosis and treatment
  • Deliver healthcare services safely and effectively
  • Maintain accurate clinical records
  • Coordinate care with other healthcare providers
  • Communicate with patients regarding appointments and treatment
  • Process payments and insurance claims
  • Comply with professional obligations
  • Comply with legal and regulatory requirements
  • Improve our services
  • Manage employment and business operations
  • Respond to enquiries and feedback

If we are unable to collect necessary information, we may be unable to provide healthcare services safely or effectively.

6. How We Use and Disclose Information

We may use and disclose information for the primary purpose for which it was collected and for related purposes permitted by law.

Healthcare Services

We may use or disclose information to:

  • Assess, diagnose and treat patients
  • Maintain clinical records
  • Coordinate care with other healthcare providers
  • Arrange referrals
  • Obtain reports or test results

Administration

We may use information to:

  • Schedule appointments
  • Send appointment reminders
  • Process payments
  • Manage accounts
  • Respond to enquiries
  • Operate our business effectively

Legal and Regulatory Requirements

We may disclose information where required or authorised by law, including to:

  • Courts and tribunals
  • Government agencies
  • Regulatory authorities
  • AHPRA
  • The Chiropractic Board of Australia
  • Professional indemnity insurers
  • Law enforcement agencies where legally required

Service Providers

We may disclose information to trusted third-party providers who assist us with:

  • Practice management software
  • Cloud storage services
  • IT support
  • Appointment reminder systems
  • Payment processing
  • Professional advisers

We take reasonable steps to ensure service providers handle information appropriately and securely.

7. Direct Marketing and Patient Communications

We may use your contact details to provide:

  • Appointment reminders
  • Recall notifications
  • Practice updates
  • Health education information
  • Newsletters
  • Information about services offered by our practice

You may opt out of receiving marketing communications at any time by contacting us or using any available unsubscribe facility.

Important clinical communications, appointment reminders and treatment-related correspondence may still be sent where appropriate.

8. Anonymity and Pseudonymity

Where lawful and practicable, individuals may interact with us anonymously or using a pseudonym.

However, because healthcare services require accurate identification and clinical records, it is generally not practical for us to provide chiropractic care anonymously or under a pseudonym.

9. Storage and Security of Information

We take reasonable steps to protect personal information and health information from misuse, interference, loss, unauthorised access, modification or disclosure.

Information may be stored:

  • Electronically within secure practice management systems
  • On secure cloud-based platforms
  • In physical records maintained by the practice

Security measures may include:

  • Password protection
  • Multi-factor authentication
  • Access controls
  • Encryption technologies
  • Secure backup systems
  • Staff confidentiality obligations
  • Privacy training
  • Secure disposal procedures

While we take reasonable steps to protect information, no electronic transmission or storage method can be guaranteed completely secure.

10. Overseas Disclosure

Some of our software providers, cloud service providers or technology partners may store or process information outside Australia.

Where personal information is disclosed overseas, we take reasonable steps to ensure recipients handle information in accordance with the Australian Privacy Principles unless an exception under Australian privacy law applies.

Countries where information may be stored or processed may include:

  • Australia
  • New Zealand
  • United States of America
  • Singapore
  • Other countries where authorised service providers maintain data centres

These locations may change from time to time.

11. Website Analytics and Cookies

Our website may use cookies and similar technologies to improve user experience and website performance.

Information collected may include:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Time spent on pages
  • Referring websites

We may use website analytics services, including Google Analytics or similar technologies, to understand website usage and improve our services.

Users can manage cookie preferences through browser settings.

12. Access to and Correction of Information

You may request access to personal information or health information we hold about you.

You may also request correction of information that is inaccurate, incomplete, out of date, irrelevant or misleading.

Requests should be made in writing using the contact details provided in this Privacy Policy.

We may require proof of identity before releasing information.

Access may be refused in circumstances permitted by law. Where access is refused, we will provide reasons where required.

13. Retention, Destruction and De-identification

We retain records for the periods required under applicable laws, professional standards and healthcare record-keeping obligations.

Generally:

  • Adult health records are retained for at least seven (7) years from the date of the last patient contact.
  • Records relating to children are retained until the patient reaches at least twenty-five (25) years of age.

When records are no longer required, we take reasonable steps to securely destroy or permanently de-identify information.

This may include:

  • Secure shredding of paper records
  • Permanent deletion of electronic records
  • Secure destruction of storage media
  • De-identification for statistical or administrative purposes

14. Privacy Complaints

If you believe we have breached your privacy rights or mishandled your information, you may lodge a complaint with us.

Please provide:

  • Your name and contact details
  • Details of the complaint
  • Supporting information where available

We will:

  1. Acknowledge receipt of the complaint.
  2. Investigate the matter.
  3. Respond within a reasonable timeframe.
  4. Take appropriate action where necessary.

15. External Complaints

If you are not satisfied with our response, you may contact:

Office of the Australian Information Commissioner (OAIC)

Website: www.oaic.gov.au

Phone: 1300 363 992

Mail:
GPO Box 5288
Sydney NSW 2001

You may also have rights under the Health Records Act 2001 (Vic) to make complaints through relevant Victorian regulatory bodies.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, professional standards or business practices.

The current version will be available at our clinic and on our website.

17. Further Information

Further information regarding privacy rights can be obtained from the Office of the Australian Information Commissioner at www.oaic.gov.au.

By engaging with Waverley Central Chiropractic Clinic Pty Ltd, you acknowledge that your personal information and health information will be handled in accordance with this Privacy Policy.