Privacy Policy

MediHealth Connect is committed to protecting the privacy of our participants, their families, referral partners, and anyone who interacts with our services. This policy outlines how we collect, use, store, and disclose personal information in accordance with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and the NDIS Quality and Safeguards Commission requirements.

Information We Collect

We may collect the following types of personal information:

Name, address, phone number, and email address
Date of birth and gender
NDIS participant number and plan details
Health and medical information relevant to the services we provide
Emergency contact details
Information about your disability and support needs
Financial information related to NDIS billing
Feedback, complaints, and incident reports

We collect this information directly from you, from your authorised representatives, from referring professionals (with your consent), and from the NDIA/NDIS portal.

How We Use Your Information

We use your personal information to:

Deliver community nursing and support coordination services
Develop and implement care plans and coordination plans
Communicate with your healthcare providers and support team (with your consent)
Process billing and claims through the NDIS
Meet our legal and regulatory obligations, including NDIS Quality and Safeguards Commission reporting
Improve our services based on feedback
Contact you about your services

How We Protect Your Information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes:

Secure electronic records systems with role-based access controls
Password-protected devices and encrypted data storage
Staff training on privacy obligations and information handling
Physical security measures for any paper-based records
Regular reviews of our information security practices

Sharing Your Information

We only share your personal information:

With your consent — for example, communicating with your GP, specialist, or support coordinator
When required by law — for example, mandatory reporting obligations or NDIS Commission requirements
With the NDIA for plan management and service delivery purposes
With our staff and contractors who need access to deliver your services

We do not sell or share your personal information for marketing purposes.

Your Rights

You have the right to:

Access your personal information that we hold
Request corrections to inaccurate or outdated information
Withdraw consent for non-essential uses of your information
Make a complaint about how we handle your personal information

Complaints

If you have a complaint about how we handle your personal information, please contact us:

Email: info@medihealthconnect.com.au

Phone: 07 3063 0748

Mail: 1 Westlink Court, Darra, QLD 4074

If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or the NDIS Quality and Safeguards Commission at www.ndiscommission.gov.au.

Changes to This Policy

We may update this privacy policy from time to time. The most current version will always be available on our website. We encourage you to review this policy periodically.