Privacy Policy

PrimeCare Medical Carlton, Victoria, Australia Last updated: March 2026

1. Overview

PrimeCare Medical ("we", "us", "our") is committed to protecting your personal and health information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable Victorian health privacy legislation including the Health Records Act 2001 (Vic).

This policy explains how we collect, use, store, and protect your information.

2. Information We Collect

We may collect the following types of information:

• Personal information: name, date of birth, contact details, Medicare/health fund details
• Health information: medical history, diagnoses, treatment notes, referrals, test results, prescriptions
• Consultation records: clinical notes generated during or after your appointment, which may be produced with AI-assisted transcription tools (see Section 5)

3. How We Use Your Information

Your information is used to:

• Provide safe, continuous medical care
• Communicate with other treating practitioners (with your consent)
• Process Medicare and insurance billing
• Meet our legal and regulatory obligations
• Support GP training and supervision (where applicable and with appropriate de-identification or consent)

4. Data Storage & Security

Your health records are stored securely on Google Cloud infrastructure hosted in Australia. Google Cloud complies with ISO 27001, SOC 2, and relevant Australian data sovereignty requirements.

We implement appropriate technical and organisational safeguards including:

• Encryption at rest and in transit
• Role-based access controls (staff access only on a need-to-know basis)
• Regular security reviews

5. AI-Assisted Transcription

We use AI transcription technology to assist clinicians in documenting consultations. Consent to AI-assisted transcription is a condition of enrolment at PrimeCare Medical and is acknowledged at the time of registration.

• Transcripts are reviewed and approved by your treating clinician before being finalised
• AI-generated content forms part of your medical record and is subject to the same privacy protections as all other health information we hold
• Transcription data is processed solely for clinical documentation purposes and is never used for commercial purposes

6. Disclosure of Your Information

We do not share your personal or health information with any third party for commercial purposes.

We may disclose your information only in the following circumstances:

• To other healthcare providers involved in your care (with your consent or where clinically necessary)
• To Medicare Australia or your health insurer for billing purposes
• Where required or authorised by law (e.g. mandatory reporting obligations, court orders)
• In a medical emergency where disclosure is necessary to prevent serious harm

7. Your Rights

You have the right to:

• Access your health records held by us
• Request corrections to inaccurate or incomplete information
• Complain about how your information has been handled

8. Complaints

If you believe we have mishandled your health information, you may contact us directly. If you are not satisfied with our response, you may lodge a complaint with:

• Office of the Australian Information Commissioner (OAIC): oaic.gov.au | 1300 363 992
• Health Complaints Commissioner (Victoria): hcc.vic.gov.au | 1300 582 113

This policy is reviewed annually and updated as required. Continued use of our services constitutes acceptance of this policy.