Privacy Policy
Last updated: 14 July 2026
Your personal and health information is important, and we treat it with care. This policy sets out what we collect, how we use and protect it, and your rights.
Who we are
This policy explains how Penrith Podiatry Foot and Ankle Clinic ("we", "us", "our") handles your personal and health information. We are committed to protecting your privacy and comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and the Health Records and Information Privacy Act 2002 (NSW) (the HRIP Act), which governs how health information is handled in New South Wales.
Information we collect
We collect information that is reasonably necessary to provide you with safe, effective podiatry care and to run our practice. Depending on your interaction with us, this may include:
- Contact and identifying details, such as your name, date of birth, address, phone number and email
- Health information, including your medical history, symptoms, examination findings, diagnoses, treatment and clinical notes
- Medicare, DVA, NDIS and private health insurance details for billing and claiming
- Referral information from your GP or other health practitioners
- Information you provide through our website enquiry and booking forms
How we collect it
We collect information directly from you wherever practical - in person, by phone, or through our website forms. We may also receive information from third parties such as your referring GP, other treating practitioners, or your health fund, where relevant to your care.
How we use your information
We use your personal and health information to:
- Provide and manage your podiatry assessment and treatment
- Communicate with you about appointments, results and your care
- Liaise with your GP, specialists or other practitioners involved in your care
- Process billing, rebates and claims through Medicare, DVA, NDIS or your health fund
- Meet our legal, professional and record-keeping obligations
Disclosure of your information
We do not sell your information. We only disclose it where necessary for your care or where required or authorised by law - for example, to other health practitioners involved in your treatment, to claim on your behalf with your consent, or where disclosure is required by a court, regulator or applicable legislation.
Storage and security
We take reasonable steps to protect your information from misuse, loss and unauthorised access, using a combination of physical and electronic safeguards and access controls. Clinical records are retained for the period required by law and professional obligations, after which they are securely destroyed or de-identified.
If a data breach occurs that is likely to result in serious harm, we will respond in line with the Notifiable Data Breaches scheme under the Privacy Act - taking steps to contain it and, where required, notifying affected individuals and the Office of the Australian Information Commissioner.
Overseas disclosure
Some of the service providers we use to run our practice and website - including analytics providers such as Google - may store or process data on servers located outside Australia. Where we use such providers, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.
Our website and cookies
Our website uses cookies and analytics tools to understand how visitors use the site and to improve it. This information is generally aggregated and does not identify you personally. Some pages also embed third-party content, such as Google Maps. For full details of the cookies we use and how to control them, please see our Cookie Policy.
Our website contact and booking forms transmit the details you enter to our practice so we can respond to your enquiry; please do not send sensitive health information through these forms.
Accessing and correcting your information
You have the right to request access to the personal and health information we hold about you, and to ask us to correct it if it is inaccurate, out of date or incomplete. To make a request, contact us using the details below. We may need to verify your identity before releasing information, and in limited circumstances access may be restricted as permitted by law.
Complaints
If you have a concern about how we have handled your information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Contact us
You can reach us about any privacy matter at 1/135–137 High Street, Penrith, NSW 2750, by phone on 1300 470 220, or by email at admin@penrithpodiatryclinic.com.au.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal obligations. The current version is always available on this page, with the last-updated date shown above.