Privacy policy

PMS is used by Australian health practices. This page explains what personal and health information we collect, why, who sees it, and how you can ask about it.

We collect what we need to care for you and run the practice: your name, date of birth, contact details, Medicare or funding details, and the health information you and your practitioner record during your care.

We also keep records of appointments, invoices and the messages we send you, such as reminders.

To book and deliver your care, to keep an accurate clinical record, to bill you or the right funder, to contact you about your appointments, and to meet our legal duties. We do not collect health information we do not need.

Only people who need it for your care or to run your appointment. Reception staff can see your booking and billing details but not your clinical notes.

We share information with others, for example a referrer or another health provider, only with your agreement or where the law requires it.

We keep a record of who opens a patient record.

Records are stored securely and protected by sign-in and access controls. Clinical notes are locked once they are signed, and changes are recorded. If a data breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner.

Health records are kept for the period the law requires, which for adults is at least seven years from the last entry, and longer for children. After that they are securely destroyed or de-identified.

You can ask to see the information we hold about you, or to correct it. Contact the practice you booked with, or use our contact page. We will respond promptly and tell you if we cannot give you access and why.

We send appointment reminders by SMS or email. We only send marketing messages if you have not opted out, and every marketing message tells you how to stop them.

If you are unhappy with how your information has been handled, tell the practice you booked with, or use our contact page, and it will be looked into. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.