Privacy Policy

Core Bariatrics is committed to protecting your privacy and handling your personal information with care and integrity. We manage personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), relevant Queensland legislation, the My Health Records Act 2012, and the Notifiable Data Breaches Scheme.

This Privacy Policy outlines how Core Bariatrics collects, uses, stores, and discloses personal and health information. It applies to all patients, as well as visitors to our practice and website.

Collection and Use of Information

To provide safe, effective, and high-quality medical care, Core Bariatrics collects and stores personal and health information. This may include, but is not limited to:

  • Name

  • Address

  • Date of birth

  • Gender

  • Contact details

  • Health and medical history

  • Family medical history

  • Cultural background (where relevant to care)

  • Next of kin or emergency contact details

This information is used to:

  • Provide medical assessment, treatment, and ongoing care

  • Communicate with you regarding appointments and treatment

  • Coordinate care with other healthcare providers

  • Meet legal, regulatory, and administrative requirements

How Information is Collected

Where possible, Core Bariatrics collects personal information directly from you, either:

  • In person

  • In writing (including forms)

  • Via secure digital communication

In some circumstances, information may be collected via:

  • Telephone

  • Online enquiries or forms

  • Your nominated emergency contact (where necessary)

To protect your privacy, we verify patient identity using multiple identifiers before sharing or updating information.

By initiating communication via email, you consent to receiving email correspondence from our practice. Consent is obtained prior to communication via SMS where required.

Storage and Security of Information

Core Bariatrics takes reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure.

Information is securely stored in:

  • Electronic medical record systems with appropriate safeguards

  • Physical records where necessary, stored securely on-site

When no longer required, paper records are securely destroyed in accordance with privacy obligations.

Use and Disclosure of Information

Your personal information will only be used or disclosed for purposes directly related to your care, or where required or authorised by law.

This may include sharing information with:

  • Treating specialists and healthcare providers

  • Pathology and diagnostic services

  • Medicare or other relevant government agencies

  • Other authorised healthcare services involved in your care

Core Bariatrics does not disclose personal information to overseas recipients.

All electronic communication between healthcare providers is conducted using secure messaging systems wherever possible.

Healthcare Identifiers

Core Bariatrics complies with the Healthcare Identifiers Act 2010. Healthcare identifiers are treated as sensitive personal information and are protected against misuse, loss, and unauthorised access.

Accessing and Correcting Your Information

You have the right to request access to your personal health information.

Requests for access:

  • Must be made in writing where possible

  • Will be documented and processed in accordance with privacy legislation

  • Require identity verification prior to release

If you believe your information is inaccurate, incomplete, or out of date, please contact us promptly so it can be corrected.

Data Breaches

Core Bariatrics has procedures in place to protect the privacy, security, and integrity of all personal information.

In the event of a data breach, we follow a structured response plan in accordance with the Notifiable Data Breaches Scheme, including:

  • Assessing and containing the breach

  • Notifying affected individuals where required

  • Reporting to relevant authorities when necessary

We also maintain internal policies aligned with the My Health Records Act 2012 and associated rules.

Privacy Complaints

If you have a concern or complaint about how your personal information has been handled, please contact Core Bariatrics directly so we can work to resolve the issue.

If you are not satisfied with the outcome, you may contact the:

Office of the Health Ombudsman (Queensland)
or
Office of the Australian Information Commissioner (OAIC)

Contact Us

If you have any questions about this Privacy Policy or how your information is handled, please contact Core Bariatrics directly.