Privacy Policy

1. Purpose

Wellspring Pain Clinic is committed to protecting the privacy of your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy outlines how we collect, use, store, and disclose your personal and health information.

2. What Information We Collect

We collect and hold personal information that is necessary to provide you with medical services, including:

• Full name, date of birth, address, contact details
• Medicare number, private health insurance details
• Medical history and treatment details
• Referral letters, test results, imaging, and specialist reports

3. How We Collect Your Information

Information is collected:

• Directly from you (in person, by phone, via forms or email)
• From your referring doctor or healthcare provider
• From other third parties (e.g. hospitals, insurers, diagnostic services), with your consent

4. How We Use Your Information

Your personal and health information is used to:

• Provide appropriate medical care and treatment
• Communicate with other healthcare professionals involved in your care
• Comply with legal and regulatory obligations
• Facilitate administrative functions (e.g. billing, medical records management)

5. Disclosure of Your Information

We may share your information with:

• Other healthcare providers (specialists, GPs, allied health)
• Hospitals and diagnostic services
• Medicare and private health insurers
• Third-party IT and administrative service providers (bound by privacy obligations)
• Workers' compensation or insurance bodies (where applicable and permitted)
• Amazon Web Services (AWS) — our website hosting and cloud storage provider, using data centres located in Sydney, Australia
• Google (Gmail) — used to transmit and receive website form submissions and correspondence, which may process and store data on servers located overseas, including the United States

We will not disclose your information to any third party without your consent, unless required or authorised by law. Some of our service providers (such as Google) may store or process information overseas. Where your information is transferred outside New South Wales or Australia, we do so only where you have expressly consented to the transfer, or we reasonably believe the recipient is subject to a law or contract that upholds privacy protections substantially similar to the Health Privacy Principles and Australian Privacy Principles.

6. Storage and Security

Your information is stored in electronic form with our hosting and cloud provider, Amazon Web Services (AWS), in data centres located in Sydney, Australia, and, where applicable, in physical form at the clinic. Form submissions from this website are transmitted over an encrypted connection (HTTPS/TLS) and delivered by email through Google (Gmail). We rely on the security measures of these providers, including encryption in transit and encryption of data at rest, together with access controls, to protect your information from unauthorised access, modification, or disclosure.

7. Access and Correction

You have the right to access your personal information and request corrections if inaccurate or incomplete. Please contact our clinic in writing, and we will respond within a reasonable time frame.

8. Privacy Complaints

If you believe your privacy has been breached, please contact us so we can address your concerns. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

9. Contact Us