Privacy Policy
The manner in which Sight on Site Optometry Pty. Ltd. collects, holds, uses, discloses and protects personal information and health information, in accordance with the Privacy Act 1988 (Cth).
The manner in which Sight on Site Optometry Pty. Ltd. collects, holds, uses, discloses and protects personal information and health information, in accordance with the Privacy Act 1988 (Cth).
1.1 Sight on Site Optometry Pty. Ltd. (ABN 98 693 518 615) (the Practice) is bound by the Privacy Act 1988 (Cth) (the Act), the Australian Privacy Principles contained in Schedule 1 to the Act (the APPs), and applicable State and Territory health records legislation.
1.2 This Policy sets out the manner in which the Practice collects, holds, uses and discloses Personal Information and Health Information, and the manner in which an individual may access that information, seek its correction, or make a complaint.
1.3 This Policy applies to all individuals whose information the Practice holds, including patients, prospective patients, the representatives of patients, and persons who make an enquiry through the Practice's website.
1.4 By using the Practice's website, an individual accepts this Policy. Health Information is collected only with the express consent of the individual, which is obtained at the time of booking and again at the consultation.
1.5 This Policy does not limit any right or remedy available to an individual under the Act or any other law.
2.1 In this Policy, unless the context requires otherwise:
2.2 Headings are for convenience only and do not affect interpretation. The singular includes the plural and the plural includes the singular.
3.1 The Practice collects only such information as is reasonably necessary for, or directly related to, the functions and activities described in clause 5.
3.2 Personal Information collected may include:
3.3 Health Information collected may include:
3.4 Transaction information collected may include records of the products and services supplied, and billing and invoice records. The Practice does not store credit card numbers. Card payments are processed by secure third party payment providers.
3.5 Website information collected may include information submitted through the Practice's booking, contact and order forms, and anonymous technical information such as browser type, device type and pages visited, collected through cookies and analytics in accordance with clause 9.
4.1 The Practice collects information directly from the individual wherever it is reasonable and practicable to do so, including through booking forms, consultation interviews, eyewear orders, and email and telephone contact.
4.2 Where it is not reasonable or practicable to collect information directly, the Practice may collect information from:
5.1 The Practice collects, holds, uses and discloses information only for purposes related to the provision of eye care, the conduct of its business operations, and compliance with its legal obligations, including:
5.2 The Practice does not use or disclose Personal Information for a secondary purpose unless the individual has consented, or the use or disclosure is otherwise permitted under APP 6.
5.3 The Practice does not sell, trade or licence Personal Information to any third party.
6.1 Health Information is Sensitive Information for the purposes of the Act and is afforded a higher level of protection accordingly.
6.2 The Practice collects Health Information only with the express consent of the individual or their Representative, obtained at the time of booking and again at the consultation, and only to the extent reasonably necessary for the individual's treatment.
6.3 Clinical records are retained for a minimum of 7 years from the date of the last consultation, in accordance with applicable optometric record keeping standards.
6.4 Where the individual was a minor at the time of the consultation, clinical records are retained until the individual attains the age of 25 years, or for 7 years from the date of the last consultation, whichever period expires later.
7.1 The Practice discloses information only where disclosure is necessary for a purpose described in clause 5, and only to the following categories of recipient:
7.2 Clinical records are held in Halaxy, the Practice's clinical practice management system, on secure cloud infrastructure hosted in Australia.
7.3 The Practice does not disclose Health Information or clinical records to an overseas recipient. Clinical records are held in Australia in accordance with clause 7.2. Disclosure of technical website information to overseas recipients is addressed in clause 9.5.
8.1 The Practice takes such steps as are reasonable in the circumstances to protect information from misuse, interference and loss, and from unauthorised access, modification or disclosure, including:
8.2 Where an eligible data breach occurs that is likely to result in serious harm, the Practice will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Act.
8.3 The Practice maintains a written data breach response plan.
9.1 The Practice's website uses minimal cookies to support basic functionality, including the retention of filter selections on the eyewear pages.
9.2 The Practice uses Google Analytics to understand how the website is used. The Practice does not use information collected by that tool to identify an individual personally.
9.3 The Practice does not use advertising cookies and does not sell browsing data.
9.4 An individual may disable cookies through their browser settings. Certain website features may not function correctly where cookies are disabled.
9.5 The Practice's website uses Google Analytics and Google Fonts, each provided by Google LLC. When a visitor loads a page, technical information including the visitor's internet protocol address may be received by Google in the United States of America. The Practice does not use that information to identify the visitor, and no Health Information is disclosed to Google. A visitor who does not wish that disclosure to occur may block analytics and third party fonts using a browser extension or content blocking software.
10.1 Subject to the exceptions in APP 12, an individual may request access to the Personal Information the Practice holds about them.
10.2 An individual may request a copy of their clinical records. The Practice may charge a reasonable fee to cover the cost of providing access, but does not charge for the making of the request.
10.3 An individual may request the correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading, in accordance with APP 13.
10.4 An individual may withdraw consent to any non-essential use of their information, including recall reminders, at any time.
10.5 A request under this clause should be made using the contact details in clause 14. The Practice will respond within a reasonable period and, where a request is refused, will provide written reasons and details of the available complaint mechanisms.
11.1 An individual who considers that the Practice has breached the APPs or otherwise mishandled their information should in the first instance make a complaint to the Practice using the contact details in clause 14. The Practice will investigate and respond within a reasonable period.
11.2 If the individual is not satisfied with the Practice's response, the complaint may be referred to the Office of the Australian Information Commissioner at oaic.gov.au.
11.3 A complaint concerning the clinical conduct of a registered health practitioner may be made to the Australian Health Practitioner Regulation Agency at ahpra.gov.au.
11.4 A complaint concerning a health service provided in Queensland may be made to the Office of the Health Ombudsman (Qld) at oho.qld.gov.au or on 133 646.
12.1 The Practice may amend this Policy from time to time to reflect changes in its practices, technology, legal obligations or business operations.
12.2 The current version of this Policy is published on the Practice's website and takes effect on publication. Material amendments will be notified to active patients where reasonable to do so.
13.1 The terms governing bookings, consultations and the purchase of eyewear are set out in the Terms of Service, which addresses the Practice's services, bookings and cancellation, pricing and payment, eyewear orders, warranty, mobile visit terms, limitation of liability and governing law.
13.2 Shipping times, changes and cancellations, the 30 day prescription warranty and the 12 month hassle free frame warranty are addressed in Shipping & Returns.
14.1 Enquiries, requests and complaints under this Policy may be directed to the Practice as follows: