This Privacy Policy describes how Dr AJ Health Hub (“we”, “our”, “us”) collects, uses, stores and shares personal information when you visit draj.com.au or receive healthcare services from us.
We are an Australian private health service provider and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We collect personal information that is reasonably necessary to provide safe, high-quality healthcare and to operate our practice.
When you visit our website, we may automatically collect information about your device and usage, including your browser type, IP address, device type, time zone, cookies and pages viewed. This information helps us understand how visitors use our website and improve its performance.
We collect this information using cookies, log files and analytics tools such as Google Analytics. The information collected is aggregated and de-identified where possible. You can control cookies through your browser settings, although blocking cookies may affect some website features.
When you become a patient, make an enquiry, complete a form, book an appointment or receive care, we may collect:
Identity and contact details, including name, date of birth, address, email address, phone number, Medicare or DVA details and emergency contacts
Health information, including medical history, medications, allergies, referrals, pathology and imaging results, clinical photographs (where clinically required), treatment plans and progress notes
Administrative and billing information, including appointment history, Medicare claims, private billing records and correspondence
Information shared during telehealth consultations (we do not record telehealth sessions)
Employment information for job applicants, including resumes, qualifications, registration and referee details
We usually collect personal information directly from you. We may also collect information from authorised representatives, parents or guardians, other treating health professionals, hospitals, pathology or radiology providers, Medicare, DVA, private insurers or online booking services such as HotDoc.
We use personal information to:
Provide medical care, diagnosis, treatment and follow-up
Manage appointments, recalls and reminders
Communicate with other healthcare providers involved in your care
Process Medicare and private billing
Maintain accurate clinical records and meet accreditation, auditing and legal requirements
Operate, maintain and improve our practice systems
Comply with legal obligations and lawful requests
If you choose not to provide requested information, we may be unable to provide some services safely or effectively.
We disclose personal information only where necessary and on a need-to-know basis. This may include disclosure to other treating health professionals, pathology and radiology providers, Medicare, DVA, private insurers, the My Health Record system (where applicable), and IT or administrative service providers who support our practice under confidentiality and security obligations.
We do not sell your personal information.
Our clinical records are stored in Australia. Some service providers, such as website hosting, email or analytics providers, may use infrastructure located outside Australia. Where this occurs, we take reasonable steps to ensure your information is protected in line with the Australian Privacy Principles.
We do not use your health information for direct marketing. If we send general practice updates, such as changes to opening hours, you may opt out at any time.
Our website uses cookies and analytics tools to operate securely and improve performance. These tools collect aggregated information and are not used to profile individual patients for advertising purposes. Third-party services linked from our website have their own privacy policies.
We take reasonable physical, administrative and technical safeguards to protect personal information against loss, misuse, unauthorised access, modification or disclosure. These include access controls, staff training, confidentiality agreements and secure systems.
Health records are retained for at least seven years from the date of last entry, and for patients under 18, until at least their 25th birthday, unless a longer period is required by law.
If a data breach is likely to result in serious harm, we will take steps to contain the breach and notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.
You may request access to or correction of your personal information by contacting us. We will verify your identity and respond within a reasonable timeframe. There may be a reasonable administrative fee for providing copies of records.
For telehealth consultations, please ensure you are in a private and safe location. We do not record telehealth sessions. Prescriptions, referrals and requests may be sent electronically where appropriate and lawful.
We collect information about children with the consent of a parent or legal guardian and in accordance with applicable laws. Mature minors may consent to their own care where appropriate.
We may update this Privacy Policy from time to time. The most current version will always be available on our website and will include the effective date.
Privacy Officer / Practice Manager
Dr AJ (Ayoub John Walker)
Email: admin@draj.com.au
Phone: +61 7 4940 3590
Postal address:
47 Harbour Road
North Mackay QLD 4740
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner on 1300 363 992 or visit oaic.gov.au.
