Privacy Policy

Privacy Policy

Effective Date: 9 April 2025
Last Updated: 22 August 2025

MedSurg Weight Loss (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Privacy Act 1988 (Cth), the Privacy and Other Legislation Amendment Act 2024, and other applicable laws.

1. Information We Collect
  • Identity details (name, date of birth, gender)
  • Contact details (address, phone, email)
  • Health and medical information relevant to your care
  • Medicare or private health insurance details
  • Payment and billing information
  • Information you provide in consultations, forms, or through our website
  • Data collected through connected devices (e.g., health apps, wearables) where applicable
2. How We Collect Your Information

We may collect your information:

  • Directly from you (forms, consultations, online bookings, phone calls, emails)
  • From third parties involved in your care (specialists, hospitals, diagnostic services, Medicare, insurers)
  • Through our website, secure patient portals, or electronic communication channel
3. Purpose of Collection and Use

We use your personal information to:

  • Provide and manage your medical care
  • Communicate with you about your treatment and appointments
  • Process payments and Medicare/private health claims
  • Comply with our legal, ethical, and clinical obligations
  • Conduct internal audits, quality improvement, and staff training
  • Ensure patient safety, data security, and continuity of care

Where information is used for secondary purposes (e.g., teaching, research, statistical analysis), this will be de-identified unless we have obtained your consent.

4. Data Security

We are required under the Privacy Act to take reasonable steps to protect your information. This includes both technical measures (encryption, firewalls, secure servers) and organisational measures (restricted staff access, staff training, audit logs).

If information is no longer required, it will be securely destroyed or permanently de-identified, unless we are legally required to retain it.

 5. Data Breaches

In the event of a data breach that is likely to result in serious harm, we will:

  • Promptly notify affected individuals, explaining the nature of the breach and recommended steps they should take
  • Notify the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme
  • Take immediate remedial action to minimise harm and prevent recurrence
6. Overseas Disclosures

Where personal information is transferred outside Australia (for example, when using secure cloud providers), we take steps to ensure it is only disclosed to countries assessed as having adequate privacy protections or subject to binding contractual safeguards.

7. Automated Decision-Making

If we use automated decision-making systems (such as risk screening or digital triage tools), you will be informed. You may request an explanation of how such decisions are made and seek human review or intervention.

8. Criminal Offences – Doxxing

It is now a criminal offence in Australia to maliciously disclose personal information (“doxxing”) with the intention of causing harm, harassment, or intimidation. MedSurg Weight Loss strictly prohibits such conduct.

9. Your Rights

You have the right to:

  • Access and request a copy of your personal information
  • Request correction of your information if inaccurate or incomplete
  • Withdraw consent for secondary uses (e.g., research, marketing)
  • Make a complaint if you believe your privacy has been breached

You may also have the right to take legal action for serious invasions of privacy, including misuse of personal information or intrusion into your private affairs, under the new statutory tort introduced in December 2024.

10. Complaints and Enforcement

If you believe we have breached your privacy rights, you can:

  1. Contact us directly at:
    MedSurg Weight Loss
    Phone: 07 3373 0265
    Email: admin@medsurgweightloss.com.au
  2. If unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Please note the OAIC now has expanded enforcement powers, including issuing compliance notices, infringement notices, and conducting public inquiries.

10. Updates to This Policy

This Privacy Policy will be updated as required by law or to reflect changes in our practices. Significant updates will be communicated through our website or directly to patients where appropriate.

Book An Appointment Today

Based in Brisbane, MedSurg Weight Loss offers comprehensive metabolic and weight loss management including surgical advice, medical advice and many other services. Our doctor led team adopts a personalised approach tailored to your unique requirements and specific goals. To learn more, get in touch today.