Flinders Osteo Privacy Policy
1. Flinders Osteo Clinic is committed to protecting the privacy of our patients and complying with the Privacy Act 1988 (Cth) and the Health Records Act 2001 (Vic). This policy outlines how we collect, use, store, and disclose personal and health information.
2. Collection of Personal and Health Information
We collect personal and health information necessary to provide osteopathic services, including:

• Full name, date of birth, contact details, emergency contact, address, email address, pronouns

• Medical history, health conditions, treatment records

• Medicare, private health insurance details, and payment information

We collect this information directly from you or from third parties with your consent (e.g., referring doctors or allied health professionals). We can receive this information via email/ fax/ phone/ face to face and via your online forms. We may additionally access online radiology information as required. The data can be stored: electronically using the Cliniko software, physitrack, via harddrive and via password protected digital computer files. Note this information can be via yourself, referring Health Professionals, others involved in your care team as well as persons responsible for you.
3. Use of Information
Your personal and health information is used for:

• Providing osteopathic care and treatment

• Managing appointments and patient records

• Billing and processing payments

• Compliance with legal and regulatory obligations

• Communication with other healthcare providers when necessary for your treatment

• Ensuring your safety for yourself

• REQUEST FOR TREATMENT USING PSEUDONYM: Where it is practicable by law, you are able to request to be treated using a pseudonym – this can be in situations where patient may be in protection due to safety or other circumstances.

4. Storage and Security
We take all reasonable steps to protect your personal and health information from unauthorized access, modification, or disclosure. This includes:

• Secure digital and physical storage systems – we utilise secure cloud storage, encrypted database and hold physical information in a locked cabinet. Where access is on a physical computer/ ipad, we use password protection on the device or face-id with all files pertaining to private information.

• Restricted access to sensitive data – information is shared on a ‘need to know basis’ where possible when your health situation changes and this will impact on provision of care.

• Ongoing professional development on privacy data.

• Where patients have provided consent, we may use Heidi or note taking services to ensure our records document all relevant information – this is only used to provide additional consult information. We DO NOT store any recordings from the consult, they are deleted as soon as transferred into out Cliniko Software.

• We endevour to maintain our online security using Windows Defender as well as McFee security.

• Policy relating to cyberattack: In the event of a cyber attack or data breach, we will:

  • Identify and contain the breach to prevent further compromise

  • Assess the risk and impact on affected individuals

  • Notify affected individuals, the Office of the Australian Information Commissioner (OAIC), and the Australian Health Practitioner Regulation Agency (AHPRA) if required

  • Implement measures to mitigate further risks and strengthen cybersecurity protections

  • Conduct a post-incident review to enhance data security protocols

5. Disclosure of Information
We will not share your personal information except where required or permitted by law, or with your consent, including:

• To other healthcare professionals involved in your care this may include: your General Practitioner, Specialists, other Health Providers as well as gathering information such as radiology reports/ MyHealthRecord or other clinically relevant information. In situations where you have provided either written or verbal consent we can obtain verbal/ written communication from previous practitioners where clinically required.

• To Medicare, private health insurers, and billing agencies

• When legally required (e.g., court orders, public health obligations) –

  • Such as for a missing persons, to

  • Lessen or prevent a serious threat to a patient’s life, health or safety or a serious threat to public health or safety

  • Where the information is needed for legal proceedings

• DISCLOSURE OF INFORMATION TO OVERSEAS PRACTITIONER:

  • Should you request your information to be sent to a provide over-seas, we require signed consent to be provided from the patient. This can be either via paper form, otherwise a digital form with signature can be provided. In these cases we will then share the information with the patient – who can share with their provider unless an explicit request is made with confirmed information provided. This then will be provided under a password protected format (typically with use of the patients D.O.B). Should there be any access issues, the receiving provider must notify us in reference to being unable to receive. We don’t hold responsibility for other reciepients being unable to access data – we use a PDF format which should be openable by multiple software options.

6. Right to access and correction:
You have the right to seek access to and correction of the personal information we hold about you. We will require an authority to release information signed by yourself, we then will respond to your request within 30 days. To make a request please contact: Brooke Stevenson at info@flindersosteoclinic.com.au.
Please note, we are a small clinic and in situations where the practitioner is unavailable you will be notified within 7 days of your request, unless extenuating circumstances arise (e.g. practitioner is unavailable for health concerns/ long service).
If you think that the information we hold about you is not correct, let us know in writing. We will take reasonable steps to correct your personal information where the information is not accurate or up-to-date. From time to time, we may also ask you to verify that the information we hold about you is correct and current, we typically will use a Medical History Update Form.  
7. Retention and Disposal of Records
Health records are retained for the period required by law (minimum seven years for adults and until age 25 for minors) and securely disposed of when no longer needed. We will periodically provided a ‘medical history update’ form, when situations arise where your health conditions may have changed, you have not attended for an extended period.
8. Complaints and Concerns
If you have concerns about how we handle your personal information, you may contact directly at info@flindersosteoclinic.com.au
9. Updates to this Policy
This policy may be updated periodically. Any changes will be published on our website or made available at our clinic.
Contact Us
For further information, please contact:
Brooke Stevenson, Osteopath
Shop 3/ 48 Cook Street, Flinders VIC 3929
0403 759 943, info@flindersosteoclinic.com.au
​
Terms and Conditions for the Flinders Health and Wellness Clinic
Flinders Osteopathic Clinic
Last updated: 14/05/2025
Welcome to Flinders Health and Wellness Clinic. By accessing or using our website and services, you agree to comply with the following Terms and Conditions. Please read them carefully before proceeding. If you do not agree with any part of these terms, please do not use this website or our services.
1. General Disclaimer
All content provided on this website is for general informational and educational purposes only. It does not constitute medical advice, diagnosis, or treatment, and should not be relied upon as a substitute for consultation with a qualified healthcare professional.
If you have specific health concerns or symptoms, we recommend booking a consultation with one of our qualified practitioners. In the case of an emergency, please contact emergency services immediately.
2. AHPRA Compliance
All Physiotherapy and Osteopathic practitioners at Flinders Health and Wellness Clinic are registered with the Australian Health Practitioner Regulation Agency (AHPRA) and operate in accordance with the National Law and relevant Code of Conduct. We ensure all health content and advertising complies with the AHPRA Advertising Guidelines.
We are committed to ethical practice and accurate, responsible communication. We do not make misleading claims or represent that our services can guarantee particular outcomes. Individual responses to treatment vary, and results depend on a range of personal, physical, and lifestyle factors.
3. Bookings and Appointments
Appointments can be made via our website, phone, or in person. By making an appointment, you agree to:

• Provide accurate personal and medical information

• Arrive on time or notify us in advance of delays or cancellations

• Respect the time of our practitioners and other patients

We reserve the right to charge a cancellation fee for missed appointments or late cancellations without reasonable notice.
4. Fees and Payments
All fees for consultations and treatments will be clearly communicated prior to or during your appointment. Payment is required at the time of service unless prior arrangements have been made. We accept various forms of payment and may offer private health insurance claiming through HICAPS where applicable.
5. Privacy and Confidentiality
We are committed to protecting your privacy. All personal information is collected and managed in accordance with the Privacy Act 1988  and the Australian Privacy Principles (APPs). We only collect information necessary for your treatment and do not share your information without consent, except where required by law.
6. Website Use
You may browse our website for personal and non-commercial use. You must not:

• Copy, reproduce, or redistribute content without written ppermission

• Use the website in a way that breaches laws or infringes on the rights of others

• Upload or transmit malicious software or harmful code

We do our best to ensure this website is accurate and secure, but we cannot guarantee it will be free from errors, viruses, or interruptions.
7. Limitation of Liability
To the maximum extent permitted by law, Flinders Health and Wellness Clinic is not liable for any loss, damage, or injury arising out of your use of this website or our services, including any reliance on information provided here.
8. Changes to Terms
These Terms and Conditions may be updated from time to time. Any changes will be posted on this page with the updated revision date. Continued use of our website and services constitutes acceptance of the revised terms.
9. Contact Us
If you have any questions about these Terms and Conditions, please contact:
Flinders Osteopathic Clinic : info@flindersosteoclinic.com
10. No Guarantee of Outcomes
Flinders Health and Wellness Clinic does not and cannot guarantee specific outcomes or results from any consultation, treatment, or intervention provided. While our practitioners apply their clinical knowledge and experience to support your health goals, the effectiveness of treatment can vary significantly between individuals.
Factors influencing treatment outcomes include, but are not limited to:

• Your general health status

• The nature, severity, and duration of your condition

• Your adherence to recommendations and treatment plans

• Your body's individual healing response

We encourage open communication during your care and support you in making informed decisions, including considering when osteopathic care may or may not be appropriate for your circumstances.
No statement made on this website, during your appointments, or in any correspondence should be interpreted as a guarantee of recovery or improvement.