Privacy policy
How Balwyn Dermatology collects, uses, discloses and protects your personal and health information.
1 Our commitment to your privacy
Balwyn Dermatology respects the privacy and confidentiality of your personal and health information. This policy explains how we collect, use, disclose and protect information when you receive care from our clinic or use our website, and how you can access your records or raise a concern.
We handle health information under the Health Records Act 2001 (Vic) and its Health Privacy Principles, together with the Privacy Act 1988 (Cth) and applicable Australian Privacy Principles. Using our website does not, by itself, constitute consent to every use or disclosure of your information.
2 Information we collect
We collect information reasonably necessary to provide specialist dermatology care and manage our practice. This may include:
- Personal details — your name, date of birth, address, telephone number, email address and emergency contact details.
- Administrative details — Medicare, DVA or insurance details where relevant, and billing and payment information.
- Health information — medical history, medications, allergies, referrals, consultation notes, treatment plans, biopsy and other test results, and clinical photographs taken with consent.
- Information you provide through registration forms, appointment requests, email, telephone or in-person enquiries.
3 How we collect information
Where practicable, we collect information directly from you through consultations with Dr Vijaya Chitreddy, registration and consent forms, bookings and other communications. We may also receive information from your GP, other treating practitioners, diagnostic providers or an authorised representative. We take reasonable steps to explain these collections to you.
4 Why we use your information
We use your information to assess, diagnose and treat skin conditions; coordinate your care; provide follow-up; and maintain your clinical record. We also use relevant information to:
- Manage bookings, appointment reminders, recalls and post-procedure instructions.
- Process payments and Medicare, DVA or insurance claims where applicable.
- Respond to enquiries, feedback and complaints, improve our services, and meet legal or regulatory obligations.
We do not use your information for direct marketing without your explicit consent. If you choose not to provide information needed for your care, this may limit the services we can safely provide.
5 When we disclose information
Where authorised or permitted by law, we may disclose relevant information to your GP, referring doctor, other treating practitioners, pathology or imaging providers, hospitals and surgical facilities. We may also disclose information to Medicare, DVA or insurers where relevant; service providers supporting our practice systems and clinical communications; and legal or regulatory bodies where required or authorised by law.
We limit disclosures to information relevant to the purpose. Any transfer outside Victoria, including overseas, must meet applicable privacy requirements. Please contact us for information about the service providers involved in handling your records and any overseas arrangements.
6 Clinical photography
We obtain your verbal or written consent before taking clinical photographs for diagnosis, monitoring or medical documentation. These photographs form part of your electronic medical record. Separate written consent is required before we use clinical images for teaching, research, publication or promotional purposes.
7 Electronic storage and security
We store our medical records electronically only and do not maintain hard-copy medical files. We take reasonable steps to protect information from misuse, loss, unauthorised access, modification and disclosure, and restrict access to authorised people who need it for their work.
We retain records for the periods required by law and dispose of them securely when lawful and appropriate. Electronic communications and storage carry risks, so absolute security cannot be guaranteed. Please contact the clinic if you would like to discuss a suitable way to send sensitive information.
8 Access to and correction of your information
You may request access to your health information, ask for a copy or summary, or request transfer to another treating practitioner. You may also ask us to correct information that is inaccurate, incomplete, misleading or out of date. Please contact the clinic using the details in section 10. We may ask you to put your request in writing and verify your identity or authority to act for someone else.
We respond under the Health Records Act 2001 (Vic) and Privacy Act 1988 (Cth). Any access or transfer fee will be explained in advance and will comply with applicable legal limits. We do not charge to correct your information.
When access may be refused
We may refuse access in circumstances permitted or required by law, for example where disclosure would pose a serious threat to a person’s life or health, unreasonably affect another person’s privacy, or where another statutory exception applies.
If access is refused, we will provide a written explanation, except to the extent the law permits reasons to be withheld, and explain available review and complaint options. Where appropriate, we will consider partial access or access through another health practitioner. If refusal is based on a serious threat to your life or health, you may be able to nominate another health service provider to review that decision.
If we decline a requested correction, we will explain our decision and how you can complain. You may ask us to attach a statement recording the correction you sought.
Freedom of information
The Freedom of Information Act 1982 (Vic) generally governs access to records held by Victorian public-sector organisations, such as public hospitals. It is not the usual process for obtaining records from our private clinic. We include a link to that Act in the resources below for patients seeking public-sector records.
9 Website and digital information
Our website and its service providers may process technical information such as IP addresses, browser or device details, and pages requested. Cookies or similar technologies, where used, may support site functionality or usage measurement. Some technical information can identify you or be linked to you; it is not necessarily anonymous.
You can manage cookies through your browser settings. Information submitted through registration or appointment forms is handled as personal information. External booking services and linked websites may have their own privacy policies, which we encourage you to read.
10 Questions and complaints
For questions, access or correction requests, or privacy complaints, please contact the clinic and ask for the person responsible for privacy. Tell us what happened and how you would like the matter resolved. We will investigate and respond within a reasonable period.
Dr Vijaya Chitreddy MBBS FACD
724 High Street, Kew East VIC 3102
Phone 03 8383 3750
Email info@balwyndermatology.com.au
If your concern is unresolved, you may contact the Health Complaints Commissioner (Victoria) on 1300 582 113 or the Office of the Australian Information Commissioner on 1300 363 992, depending on the matter. Their websites explain complaint procedures.
11 Updates to this policy
We may update this policy when our practices or legal requirements change. The current version will be available on our website. You may also ask the clinic for a copy.
12 Resources and useful links
Health Records Act 2001 (Vic) including the Health Privacy Principles
https://www.legislation.vic.gov.au/in-force/acts/health-records-act-2001
Health Complaints Commissioner Victoria
https://hcc.vic.gov.au/public/health-records-individuals
Privacy Act 1988 (Cth)
https://www.oaic.gov.au/privacy/the-privacy-act
Office of the Australian Information Commissioner
https://www.oaic.gov.au
Freedom of Information Act 1982 (Vic)
https://www.legislation.vic.gov.au/in-force/acts/freedom-information-act-1982
