PRIVACY POLICY

Welcome to the Endocrine & Metabolic Clinic. We respect your privacy and are committed to protecting your personal and health information. This Privacy Policy outlines how we handle your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Practice Name: Endocrine & Metabolic Clinic
Address: Creagh's Cottage, 63 Sorrell Street, North Parramatta, NSW 2151
Telephone: (02) 9755 9764
Fax: (02) 9724 0378
Email: contact@endometabolic.com.au
Website: www.endometabolic.com.au
Last updated: 12/01/2026

1. Introduction and Purpose

The Endocrine & Metabolic Clinic respects your privacy and is committed to protecting the personal and health information we collect and manage. We handle information responsibly and in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), applicable state and territory privacy legislation, and relevant health and cyber security requirements.

This Privacy Policy explains:

what information we collect and why
how your information is used and disclosed
how we protect your information
how you can access and correct your information
how to make a privacy enquiry or complaint
how we use technologies such as Artificial Intelligence (AI)

This policy is available on our website and at the clinic and may be updated from time to time to reflect changes to our systems, practices, technology, or legal obligations.

2. Consent

When you attend interact or attend the Endocrine & Metabolic Clinic, we collect personal and health information necessary to provide specialist endocrine and metabolic care.

By providing your information and receiving care from us, you consent to our specialists, allied health and administrative staff collecting, accessing, using, and disclosing your personal and health information for the purpose of providing healthcare and related administrative functions.

Your information is only accessed by practitioners and staff who need it to perform their duties. We will seek your express consent before using your information for purposes not directly related to your care, including research participation or training AI systems.

3. Collection of Personal and Health Information

We collect personal and sensitive information necessary to provide safe, high-quality specialist care.

Personal Information

Personal identifiers such as name, date of birth, address, and contact details
Medicare, DVA, and private health insurance details
Emergency contact details
GP and referring doctor details

Health Information

Medical history and clinical notes
Pathology and imaging results
Treatment plans, prescriptions, and referrals
Correspondence from other healthcare professionals
Information generated through approved AI-enabled tools (e.g. clinical documentation support)

Administrative Information

Appointment history
Billing, payment, and claiming details

How Information Is Collected

We primarily collect information directly from you. With your consent or where authorised by law, we may also collect information from:

your referring general practitioner
other treating specialists
hospitals and pathology or imaging providers
My Health Record
family members or carers, where appropriate

CCTV and Clinical Images

CCTV may operate on our premises for safety and security purposes
Clinical photographs or images are taken only with your express consent, obtained at the time the images are captured.

Website Use

When you visit www.endometabolic.com.au, we may collect information through cookies or website analytics tools. This information is used to analyse website usage and improve our online services. Where this information identifies or could reasonably identify you, it is treated as personal information under the Privacy Act.

4. Use and Disclosure of Information

We use and disclose your information to:

provide specialist medical assessment and treatment
coordinate care with your GP, referring doctor and other treating practitioners
manage appointments, reminders, billing, and compliance obligations
meet legal, professional and regulatory requirements

We may communicate with you via telephone, SMS, email, or secure electronic messaging. These communications may include personal and health information.

We do not sell personal information and do not disclose information overseas unless necessary for care and appropriate safeguards are in place, in accordance with Australian Privacy Principle (APP 8).

5. Research, Quality Improvement, Education and Marketing

Quality Improvement & Education

We may use de-identified patient information for:

clinical audits
professional development and staff training
service evaluation and quality improvement

Research

From time to time, the Endocrine & Metabolic Clinic may participate in medical research. If identifiable information is required:

your express consent will be obtained before using identifiable information
appropriate ethics approval will be in place where required
you will not be contacted by external researchers unless you have consented

De-identified Data

We may contribute de-identified data to clinical registries or health improvement initiatives. This data cannot identify you. You may opt out by notifying staff.

Marketing

We do not use your personal information for direct marketing without your express consent. You may opt out of any marketing communications at any time.

6. Use of Artificial Intelligence (AI)

The Endocrine & Metabolic Clinic may use AI technologies to support clinical care and administrative efficiency, including:

HEIDI AI or similar clinical documentation tools to assist with transcription and summarisation of consultations
AI-enabled reception or administrative technologies, such as appointment scheduling or patient communication tools

Governance of AI Use

AI tools are used in accordance with privacy legislation and ethical standards
AI is used to assist clinicians and staff, not replace professional judgement
All AI-generated outputs are reviewed by clinicians or authorised staff
Personal information is not used to train AI systems unless express patient consent is obtained
Appropriate security and confidentiality safeguards are in place
No automated decision-making is used to make clinical decisions without human involvement

6A. My Health Record

The Endocrine & Metabolic Clinic participates in the My Health Record system in accordance with the My Health Records Act 2012 (Cth).

Where relevant and permitted by law, we may:

access your My Health Record to assist in providing safe and effective healthcare
upload clinical information such as shared health summaries, specialist letters, or pathology results

Access to My Health Record is restricted to authorised healthcare providers involved in your care. All access is logged and monitored.

You control your My Health Record and may:

opt out of having a My Health Record
restrict access to specific documents
set additional privacy controls

More information is available at www.myhealthrecord.gov.au.

7. Anonymity and Pseudonymity

You may request to interact anonymously or under a pseudonym. However, due to the nature of specialist medical care and legal requirements, it is highly impractical to provide healthcare without identifying you. Requests will be considered on a case-by-case basis.

8. Data Security and Retention

We take reasonable steps to ensure personal information is protected from misuse, interference, loss, unauthorised access, modification or disclosure, including:

secure electronic medical record systems
role-based access controls
staff privacy and cyber security training
regular software system updates and reviews

Records are retained in accordance with NSW and federal requirements (including minimum retention periods) and securely destroyed when no longer required.

9. Access to and Correction of Information

You may request access to or correction of your personal information by contacting our Privacy Officer in writing. We will respond within 30 days. A reasonable administrative fee may apply for access requests.

10. Privacy Enquiries and Complaints

Mrs Linda Azzi

Privacy Officer
Endocrine & Metabolic Clinic
Creagh's Cottage, 63 Sorrell Street
North Parramatta, NSW 2151
Phone: (02) 9755 9765
Fax: (02) 9764 0378
Email: contact@endometabolic.com.au

If you are not satisfied with our response, you may contact:

Office of the Australian Information Commissioner (OAIC)

www.oaic.gov.au

1300 363 992

11. Policy Review

This Privacy Policy is reviewed at least annually, or sooner if there are changes to legislation, technology (including AI), or clinic operations.