Curtis Medical

What information we collect

To provide safe medical care we collect and hold:

• Your name, date of birth, address and contact details
• Medicare number, DVA number and healthcare identifiers
• Health information, including your medical history, medications, allergies, immunisations, test results, specialist reports and consultation notes
• Next of kin and emergency contact details
• Where relevant, information needed for billing such as WorkCover claim details

Health information is classed as sensitive information under the Privacy Act, and we treat it with a higher level of protection.

How we collect it

Wherever possible we collect information directly from you, in person, over the phone or through your online booking. We may also receive information about you from:

• Other healthcare providers involved in your care, such as specialists, hospitals, pathology and radiology services
• My Health Record, where you have one
• HotDoc, our online appointment booking provider, when you book online
• A parent, guardian or carer where you are unable to provide the information yourself

Why we collect it

We collect and use your information to:

• Provide you with medical care and manage your ongoing health
• Communicate with other providers involved in your care
• Process billing, including Medicare, DVA and WorkCover claims
• Send reminders and recalls for results, immunisations and preventive care
• Meet our accreditation, quality improvement and legal obligations

We only use your information for these purposes, or where you consent, or where the law requires or permits it.

Who we share it with

Your information may be shared with:

• Other treating providers, such as the specialists, allied health practitioners, hospitals, pathology and radiology services we refer you to
• Services Australia for Medicare claiming, and DVA or WorkCover Queensland where they fund your care
• My Health Record, unless you have opted out or asked us not to upload
• Anyone you authorise us to share it with

We may also be required to disclose information by law, for example under mandatory reporting obligations, a court order or public health requirements. We do not share your information with anyone else without your consent, and we never sell your information.

Storage and security

Your records are held electronically in our practice clinical software, protected by password access, user permissions and secure backups. All staff sign confidentiality agreements, and access to your record is limited to the team members involved in your care and the administration of the practice. Any remaining paper records are stored securely on site.

Use of artificial intelligence (AI)

Curtis Medical may use AI-assisted tools to support clinical documentation, drafting of correspondence, and access to clinical reference information. AI tools do not make clinical decisions. All AI-generated content is reviewed by your treating clinician, who remains fully responsible for your care.

Where an AI tool is used in a way that involves your identifiable health information (for example, a consultation transcription tool), we will tell you before it is used and ask for your consent. You may decline or withdraw consent at any time without affecting your care. Your decision will be recorded in your health record.

Wherever practical, information entered into AI tools is de-identified. Where identifiable information is used, it is only with your consent and only with providers whose data handling complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Your information is not used to train AI models or for any other secondary purpose. Some AI and digital tools are provided by third-party vendors and may process information on servers located outside Australia; before using any such tool, the practice confirms the vendor's compliance with the Australian Privacy Principles, including the rules on overseas disclosure. A list of the AI tools used by the practice is available from reception on request.

Our website

Our website does not use analytics or advertising cookies and does not collect personal information. Online bookings are handled by HotDoc, which has its own privacy policy. Our site uses embedded services such as Google Maps, which may log standard technical data (such as your IP address) when the page loads.

Access and correction

You have the right to access the information we hold about you, and to ask us to correct it if it is inaccurate or out of date. Requests for copies of your records should be made in writing to the practice manager. We will respond within 30 days. A fee may apply to cover the cost of compiling and copying records.

Complaints

If you have a concern about how we have handled your information, please contact our practice manager on (07) 5465 7522 or curtismedicalplainland@gmail.com. We take all concerns seriously and will respond promptly.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Last reviewed: September 2026. This policy is reviewed regularly. If you have any questions, please ask our reception team.