LEGAL

PRIVACY
POLICY

1. Introduction

1.1 Sally Venus Speech Pathology has a commitment to privacy in accordance with the Privacy Act 1988 (Cwth) (Privacy Act).  We are bound by the Privacy Act and the National Privacy Principles contained in the Privacy Act and Speech Pathology Australia’s Code of Ethics (2020). This Privacy Policy is provided to make you aware of how we collect, use and manage personal information.

1.2 "Personal information" means information or an opinion recorded about an individual that makes the individual's identity reasonably apparent or ascertainable.  We view the privacy of personal information as an important issue.

1.3 "Health information" is a particular kind of personal information which includes information about a person's health, disability, use of health services, or other personal information collected from someone when delivering a health service.

1.4 In making this Privacy Policy, we do so on the basis that this policy does not replace or limit the requirements of the Privacy Act.

2. Manner and Purpose of Collection of Personal Information

2.1 Sally Venus Speech Pathology’s Legal Obligations

In order to provide you with the health care services that you have requested, Sally Venus Speech Pathology will need to collect and use your personal information. If you provide incomplete or inaccurate information to us or withhold personal and health information from us, we may not be able to provide you with the services you are seeking. 

2.2  What information does Sally Venus Speech Pathology collect?

We will only collect the information we need for the particular function or activity we are carrying out.

We collect information from you that is necessary to provide you with speech pathology services and to manage our relationship with you. The information we collect includes: your name, date of birth, address, health fund details and information about your health history and family history. We require this information to assist the speech pathologist to diagnose and treat you. 

2.3  How does Sally Venus Speech Pathology collect health information?

We will usually collect your health information directly from you. Sometimes, we may need to collect information about you from a third party (such as a relative or another health service provider).

2.4 How does Sally Venus Speech Pathology use your information? 

Sally Venus Speech Pathology uses your personal information for the purpose you have given the information to us. We will use your information to provide speech pathology services to you, to manage our relationship with you and to contact you in relation to matters concerning your care. We may also use your information for other purposes permitted under the Privacy Act 1988.

Who might we disclose your information to?

We may disclose your information to the following people:

a) disclosure to other health professionals involved in your treatment

Your personal information will generally only be used by the speech pathologist involved in your care, however on occasion your care may be provided by a number of health professionals (for example., speech pathologist, occupational therapist and/or psychologist) working or consulting together. We may disclose your information to these health professionals as part of the process of providing your care and to other health professionals involved in your care.

b) the referrer

Sally Venus Speech Pathology may send a discharge summary to the referrer (i.e., your medical practitioner) following discharge from Sally Venus Speech Pathology or at other times, as required for your care. 

If you do not wish us to provide a copy of your discharge summary to the referrer you must let us know. Also, if the referrer’s details have changed please let us know. 

c) Relatives, guardian, close friends or legal representative

We may provide information about your condition to your parent, guardians, or to a responsible person for you, unless you tell us that you do not wish us to disclose your health information to any such person.

Other uses and disclosures

In order to provide the best possible environment in which to treat you, we may also use or disclose your personal and health information where necessary for:

  • activities such as quality assurance processes, accreditation, audits, risk and claims management, patient satisfaction surveys and staff education and training;

  • invoicing, billing and account management;

  • to liaise with your health fund, Medicare, the NDIS or your Plan Manager and where required provide information to your health fund, Medicare, the NDIS or your Plan Manager to verify treatment provided to you; 

  • the purpose of sending you standard reminders, for example for appointments and follow-up care, by text message or email to the number or address which you have provided to us.

d) Other uses with your consent

With your consent we may also use your information for other purposes such as including you on a marketing mail list, or research. Please note, however, that unless you provide us with your express consent for this purpose, we will not use your information in this way. We will not disclose your personal information to any individual who is outside Australia.

2.5 Access to and correction of your health information 

You have a right to access the personal and health information that we hold about you. You can also request an amendment to your personal and health information should you believe that it is inaccurate. 

If we do not agree to change your medical record/personal information in accordance with your request, we will permit you to make a statement of the requested changes and we will enclose this with your record. 

Should you wish to obtain access to or request changes to your health record you can ask for our Privacy Officer (see details below) who can give you more detailed information about Sally Venus Speech Pathology's access and correction procedure.

Please note that Sally Venus Speech Pathology may recover reasonable costs associated with supplying this information to you. 

2.6 Data Quality 

Sally Venus Speech Pathology will take reasonable steps to ensure that your personal information which we may collect, use or disclose is accurate, complete and up-to-date.  

2.7 Data Security

Sally Venus Speech Pathology will take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. We use technologies and processes such as access control procedures, network firewalls, encryption and physical security to protect your privacy. 

Sally Venus Speech Pathology will destroy or permanently deidentify any of your information which is in its possession or control and which is no longer needed for the purpose for which it was collected provided Sally Venus Speech Pathology is not required under an Australian law or court/tribunal or otherwise to retain the information. 

2.8 What to do if you have a complaint about privacy issues 

If: 

a) you have questions or comments about this Privacy Policy; 

b) Sally Venus Speech Pathology does not agree to provide you with access to your personal information; or 

c) you have a complaint about our information handling practices, 

You can lodge a complaint with or contact our Privacy Officer on the details below. We will promptly review your complaint and provide a response to you.  

2.9 How to contact us if you have a complaint about privacy issues

By letter: Privacy Officer, Sally Venus Speech Pathology, 340 Glen Osmond Road, Myrtle Bank SA 5064

By email: sally@sallyvenus.com.au

3. Accuracy and Completeness of Personal Information

3.1 While we will endeavour to ensure that the personal information collected from you is up to date and complete, we will assume that any personal information provided by you is free from errors and omissions, is not misleading or deceptive and complies with all relevant laws.

3.2 We rely on the personal information provided by you.  We will not check or verify the accuracy of any personal information we obtain from you or other persons.

3.3 You should provide us with details of any changes to your personal information.

4. Variation of Privacy Policy

We may vary the terms of this Privacy Policy from time to time.

National Privacy Principles

The ten National Privacy Principles (NPPs) as they might apply to the health sector are summarised below (extracted from Health Information and the Privacy Act 1988 – A short guide for the private health sector (Office of the Federal Privacy Commissioner, December 2001)).

NPP 1 – Collection and NPP 10 – Sensitive Information

These principles apply to the collection of health information.  In general, they require a health service provider to:

  • collect only the information necessary to deliver the health service;

  • collect lawfully, fairly and not intrusively; and

  • obtain a person’s consent to collect health information about them. 

Providers also need to ensure that consumers are informed about why their health information is being collected, who is collecting it, how it will be used, to whom it may be given and that they can access it if they wish.

NPP 2 – Use and Disclosure

This principle sets out how providers can use and disclose health information.

‘Use’ refers to the handling of information within an organisation.  

‘Disclosure’ is the transfer of information to a third party outside the organisation.

A health service provider may use or disclose health information:

  • for the main reason it was collected (the primary purpose); or

  • for directly-related secondary purposes, if the consumer would reasonably expect these; or

  • if the consumer gives consent to the proposed use or disclosure; or

  • if one of the other provisions under this principle applies. 

The key is to make sure that there is alignment between the expectations of the health service provider and those of the consumer about what will be done with the health information.   

NPP 3 – Data Quality

Health service providers are required to take reasonable steps to keep health information up-to-date, accurate and complete. 

NPP 4 – Data Security

This principle requires that health service providers take reasonable steps to protect and secure health information from loss, misuse and unauthorised access.  Information that is no longer needed should be destroyed.   

As health information may be needed for future care of the individual or for public health reasons, the priority should be to secure the data properly.

NPP 5 – Openness

Health service providers need to be open about how they handle health information.

A provider must develop a document for consumers which clearly explains how their organisation handles health information.  The document must be made available to anyone who asks for it. 

NPP 6 – Access & Correction

Consumers have a general right of access to their own health records.

Access can only be denied in certain circumstances - for instance where access can pose a serious risk to a person’s life or health. 

Also, consumers can ask for information about them to be corrected, if it is inaccurate, incomplete or out-of-date.  The provider will need to take reasonable steps to correct the information. 

NPP 7 – Identifiers

There are restrictions on how Commonwealth government identifiers, such as the Medicare number or the Veterans Affairs number, can be adopted, used or disclosed.

At present, a health service provider is not permitted to adopt these identifiers for their own record keeping systems.  These identifiers may only be used or disclosed for the reasons they were issued or if other provisions under this principle apply.

NPP 8 – Anonymity

Where lawful and practicable, consumers must be given the option to use health services without identifying themselves.

NPP 9 – Transborder data flows

If health information needs to be transferred out of Australia, this may occur if laws (or a scheme) with similar privacy protection to these principles bind the recipient.

Otherwise, health information should only be transferred with the consumer’s consent, or if other provisions under this principle apply.

Reviewed: October 2026