Patient Information & Privacy Policy

Introduction & Our Commitment

At Miranda Medical Collective, protecting your privacy and handling your personal and health information with the utmost care is central to how we practice medicine. We are committed to ensuring that all personal details and medical records entrusted to us are managed securely, confidentially, and in full compliance with relevant legislation.

As a healthcare provider operating in New South Wales, our privacy standards and practices strictly adhere to the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Health Records and Information Privacy Act 2002 (NSW).

What Information We Collect

To deliver safe, personalized, and high-quality medical care, we need to collect comprehensive health and personal information. The information we hold may include:

• Personal Information: Your full name, date of birth, address, phone number, and email address.
• Identifiers & Funding: Details regarding Medicare, Department of Veterans’ Affairs (DVA), and private health funds.
• Clinical History: Presenting symptoms, past medical history, surgical history, family medical history, allergies, and adverse drug reactions.
• Diagnostic & Investigation Results: Physical examination notes, pathology reports, radiology imaging, and allied health assessments.
• Healthcare Network: Contact details for your General Practitioner (GP), referring specialists, and designated emergency contacts or next of kin.
• Patient Interactions: Information provided via registration forms, clinical questionnaires, or direct communications with our care team.

How We Collect Your Information

Direct Collection: Whenever possible, we collect health information directly from you. This occurs when you complete intake and admission forms, communicate with us via phone or email, use our website, or attend clinical consultations.

Third-Party Collection: In certain circumstances, we may receive details from third parties when necessary for your clinical management or where direct collection is not practical. This includes receiving referral letters, test results, or medical histories from your GP, referring specialists, hospitals, or emergency contacts.

Anonymity & Pseudonymity: You have the right to interact with us anonymously or by using a pseudonym where practical. However, because accurate clinical identification is essential for safe diagnosis, treatment, and prescribing, providing incomplete or pseudonymized information will severely limit our ability to provide medical care.

Why We Collect, Use, and Disclose Information

We only collect and process information necessary to assess, treat, and support your health outcomes. We may share or disclose relevant details to:

• Coordinate care with other practitioners involved in your treatment (such as your GP, specialists, allied health providers, pathology, and imaging services).
• Process Medicare claims, private health insurance rebates, and administrative billing.
• Upload discharge summaries or clinical notes to your My Health Record (unless you have formally opted out).
• Contact you regarding appointment confirmations, clinical follow-ups, or preventative health reminders.
• Fulfill legal obligations and mandatory reporting requirements (e.g., subpoenas, public health notifications, child protection mandates, or police disclosures for serious crime investigations).

How Your Information is Protected

We implement stringent safeguards to protect your records from unauthorized access, loss, alteration, or disclosure. Information is stored securely across protected electronic clinical management systems and secure physical storage. Access is restricted strictly to authorized staff on a need-to-know basis, backed by multi-factor authentication, encrypted servers, and routine staff training.

Data Breaches

Miranda Medical Collective strictly complies with the Notifiable Data Breach (NDB) scheme under the Privacy Act 1988. In the unlikely event of a security breach that is likely to result in serious harm, we will promptly notify affected individuals and report the event to the Office of the Australian Information Commissioner (OAIC).

Accessing and Correcting Your Records

You have the right to request access to the health records we hold about you and request corrections if you identify inaccuracies or outdated details.

• Written Requests: Requests must be made in writing with verified identification to maintain patient security.
• Administrative Fees: A reasonable administrative fee may apply to cover administrative costs (such as printing or secure document processing).
• Disagreements: If we are unable to amend a record as requested due to clinical accuracy requirements, we will provide written reasons. You may request that a formal statement of your requested correction be attached to your medical file.

Questions, Concerns, and Complaints

We take all privacy concerns seriously. If you have questions about this policy or wish to lodge a privacy complaint, please contact our CEO in writing:

We aim to resolve all complaints promptly, typically within 30 days. If you remain unsatisfied with our response, you may escalate your concern to the Office of the Australian Information Commissioner (OAIC):