POLICY
Privacy Policy
Purpose
Drummond Dermatology is committed to protecting the privacy and confidentiality of patient information and managing personal information in accordance with applicable Australian privacy laws.
This Privacy Policy explains how we collect, use, disclose, store and protect your personal information.
This policy complies with:
- Privacy Act 1988 (Cth)
- Australian Privacy Principles (APPs)
- Notifiable Data Breaches Scheme
- Relevant Commonwealth, State and Territory health records legislation
- Professional obligations of registered medical practitioners
By attending the practice, communicating with us, or using our services, you consent to the collection, use and disclosure of your personal information as described in this policy.
Collection of personal information
To provide safe and effective medical care, we collect personal and health information including:
Personal Information
- Name
- Date of birth
- Gender
- Address
- Telephone numbers
- Email address
- Emergency contact details
Government and Health Fund Information
- Medicare number
- Department of Veterans’ Affairs (DVA) details
- Private health insurance information
- Other government identifiers where required by law
Health Information
- Medical history
- Family history
- Medications
- Allergies
- Investigation results
- Pathology and imaging reports
- Referral letters and specialist reports
- Clinical notes and correspondence
Clinical Images
As part of dermatological care, we may collect:
- Clinical photographs
- Dermatoscopic images
- Total body photography
- Digital monitoring images
These images form part of your medical record.
Financial Information
We may collect information necessary for billing, Medicare claiming and processing payments.
How We Collect Information
Where practical, we collect information directly from you.
Information may also be collected from:
- Referring doctors
- Specialists and other treating practitioners
- Hospitals
- Pathology providers
- Imaging providers
- Allied health practitioners
- My Health Record (where applicable)
- Family members or carers when appropriate
- Guardians or persons responsible for minors or patients unable to provide information themselves
Information may be collected:
- In person
- By telephone
- By email
- Through online booking systems
- Through patient forms
- Via secure electronic messaging systems
- During telehealth consultations
Why We Collect Your Information
We collect and use personal information for purposes including:
- Providing medical assessment, diagnosis and treatment
- Communicating with you about your care
- Arranging investigations and referrals
- Sending correspondence to referring practitioners
- Managing appointments
- Billing and Medicare claiming
- Meeting legal and regulatory obligations
- Accreditation and quality improvement activities
- Clinical audit and risk management
- Managing the operation of the practice
We will only collect information that is reasonably necessary for these purposes.
Use and Disclosure of Personal Information
Your personal information may be disclosed where necessary for your care and treatment.
This may include disclosure to:
- General practitioners
- Specialists
- Hospitals
- Pathology providers
- Imaging providers
- Allied health practitioners
- Pharmacists
- Medicare
- Department of Veterans’ Affairs
- Private health insurers
- Medical indemnity insurers
- Accreditation agencies
Information may be disclosed verbally, in writing or electronically through approved healthcare communication systems.
We will not sell your personal information.
Disclosure Required or Authorised by Law
In certain circumstances we may be required or authorised to disclose information without your consent, including:
- Court orders or subpoenas
- Mandatory reporting obligations
- Medicare compliance activities
- Law enforcement investigations
- Public health requirements
- Serious threats to life, health or safety
- Complaints, investigations or regulatory proceedings
Clinical Photography and Dermatology Imaging
Clinical photography is frequently used in dermatology for diagnosis, monitoring and treatment planning.
Clinical photographs and dermatoscopic images:
- Form part of the medical record
- May be used to monitor changes in skin conditions over time
- May be shared with other treating practitioners involved in your care
- Are retained in accordance with legal record retention requirements
Separate consent will be obtained before photographs are used for:
- Teaching
- Research
- Publications
- Presentations
- Marketing or promotional purposes
Refusal to consent to clinical photography may limit our ability to monitor certain conditions.
Telehealth and Electronic Communication
Drummond Dermatology may communicate with patients using:
- Telephone
- SMS
- Secure messaging systems
- Telehealth platforms
While reasonable security measures are used, electronic communications carry inherent privacy and cybersecurity risks.
Patients acknowledge that:
- Email is generally not encrypted
- Electronic communications may be intercepted, delayed or misdirected
- Technical failures can occur
Email and SMS should not be used for urgent medical matters.
In an emergency, patients should contact emergency services or attend the nearest Emergency Department.
Website and Online Services
Our website may collect limited information including:
- IP address
- Browser type
- Device information
- Website usage information
This information may be collected using cookies and analytics services to improve website performance and user experience.
Website information is not generally linked to identifiable patient records unless information is voluntarily submitted through forms or booking systems.
Overseas Disclosure
Drummond Dermatology generally stores and manages patient information within Australia.
If information is stored or processed overseas by approved software providers, reasonable steps will be taken to ensure privacy protections are consistent with Australian privacy laws.
Patients may request further information regarding overseas data storage arrangements.
Data Security
We take reasonable steps to protect personal information from:
- Misuse
- Loss
- Unauthorised access
- Modification
- Disclosure
- Cybersecurity threats
Measures include:
- Password-protected systems
- Role-based access controls
- Staff confidentiality agreements
- Secure cloud-based medical software
- Antivirus and cybersecurity protections
- Secure destruction of records
- Staff privacy training
No system can guarantee absolute security.
Data Breach Management
Drummond Dermatology maintains a Data Breach Response Plan.
If an eligible data breach occurs:
- Immediate action will be taken to contain the breach
- Risks to affected individuals will be assessed
- Affected individuals will be notified where required
- The Office of the Australian Information Commissioner (OAIC) will be notified where required by law
Access to Your Information
You may request access to your personal information or medical records.
Requests should be made in writing to:
Dr Catherine Drummond Drummond Dermatology
We will generally respond within 30 days.
Access may be refused in circumstances permitted by law.
Reasonable administrative fees may apply for copying or preparing records.
Correction of Information
We aim to keep information accurate, complete and up to date. If you believe information held by us is incorrect, please notify the practice. We will take reasonable steps to correct inaccurate information.
Anonymity and Pseudonyms
Where lawful and practical, patients may interact with the practice anonymously or using a pseudonym.
However, this may not be practical where medical treatment, prescribing, investigations, referrals or Medicare claiming are involved.
Retention of Records
Medical records are retained in accordance with legal requirements.
Generally:
- Adult records are retained for at least seven years after the last clinical entry.
- Records relating to children are retained until the patient reaches at least 25 years of age.
Records may be retained longer where required by law or clinical necessity.
Direct Marketing
The practice does not use patient information for commercial marketing by third parties.
Practice communications may include:
- Appointment reminders
- Recall notices
- Follow-up information
- Practice administration notices
These communications are considered part of healthcare delivery rather than marketing.
Privacy Complaints
If you have concerns regarding privacy or the handling of your information, please contact: Practice Principal Drummond Dermatology
We will investigate your complaint and respond within a reasonable timeframe.
If you are dissatisfied with our response, you may contact:
Office of the Australian Information Commissioner (OAIC)
Availability of this Policy
This Privacy Policy is available:
- On our website
- At reception
- Upon request
Policy Information
Policy: Privacy Policy
Version: 3.0
Effective Date: 1 June 2026
Review Date: 1 June 2028
Next Review: Every two years or sooner if legislation changes
Approved By: Dr Catherine Drummond
Drummond Dermatology
Suite 16, Francis Chambers
40-42 Corinna St, Phillip ACT 2606
The best way to contact us is via email
E: contact@drumderm.com.au
P: +61 2 5114 2682
F: +61 2 5114 2684
Office Hours
Monday: Closed
Tuesdays and Thursdays: 9.00am – 4.00pm
Wednesdays: 9.00am – 3.00pm
Friday: 9.00am – 2.00pm
How to get here
Drummond Dermatology pays respect to all First Nations Australians on whose traditional lands we meet and work, and whose cultures are among the oldest continuing cultures in human history.