Hammond Health website: Privacy Policy

Last reviewed: October 2026
Introduction
This privacy policy explains how Hammond Health collects, uses and stores your personal information (including your health information), and when we may share it with others.

Why and when consent is necessary
When you register as a patient, you consent to our GPs and practice staff accessing and using your personal information so they can provide you with the best possible healthcare. Only staff who need to see your information will have access to it. If we need to use your information for any other purpose, we will ask for your consent first.
Why we collect, use, hold and share personal information
We collect your personal information to provide healthcare services to you. Our main purpose is to manage your health. We also use it for directly related business activities, such as financial claims and payments, practice audits and accreditation, and business processes such as staff training.

Your health record
Your health record is a comprehensive record of your physical, mental and social health. All communication with our practice about you is recorded in your health record. Our clinical software, Best Practice, helps our doctors keep your information up to date and include relevant information in referrals.

What personal information we collect
This includes your name, date of birth, addresses and contact details; medical information such as your medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors; your Medicare number (where available) for identification and claiming; healthcare identifiers; and health fund details.

Dealing with us anonymously
You have the right to deal with us anonymously or under a pseudonym, unless it is impracticable or the law requires us to deal only with identified individuals.

How we collect personal information
We collect your personal and demographic information when you register as a patient, including through the online registration form we send to new patients via our booking provider, Medi2Apps. We may collect further information while providing medical services, and through electronic prescriptions and My Health Record (for example, Shared Health Summaries and Event Summaries). We may also collect information when you visit our website, use our contact form, email, SMS or phone us, make an online appointment or contact us through social media.
Sometimes we collect information from other sources when it isn't practical or reasonable to collect it from you directly. This may include your guardian or responsible person; other healthcare providers such as specialists, allied health professionals, hospitals, community health services, and pathology and diagnostic imaging services; and your health fund, Medicare or the Department of Veterans' Affairs, as necessary.

When, why and with whom we share your personal information
We sometimes share your personal information with:

• third parties who work with us for business purposes, such as accreditation agencies or IT providers, who must comply with the Australian Privacy Principles and this policy

• other healthcare providers

• others when required or authorised by law, such as a court subpoena

• others when necessary to lessen or prevent a serious threat to a patient's life, health or safety, or to public health or safety, or when it is impractical to obtain consent

• others to help locate a missing person, to establish, exercise or defend an equitable claim, or for a confidential dispute resolution process

• others when there is a statutory requirement, such as mandatory notification of certain diseases

• others while providing medical services, through electronic prescriptions and My Health Record

Only people who need access to your information can see it. Apart from providing medical services or as described in this policy, we will not share your personal information with any third party without your consent.
We will not share your personal information with anyone outside Australia without your consent, except in exceptional circumstances permitted by law.
We will not use your personal information to market our services directly to you without your express consent. If you do consent, you can opt out at any time by letting us know in writing.
We may use your personal information to improve the quality of our services through research and analysis of patient data. We may also provide de-identified data to other organisations to improve population health outcomes. This information is secure, you cannot be identified, and it is stored within Australia. Let our reception staff know if you do not want your information included.

How we store and protect your personal information
Your personal information is stored securely in electronic form in password-protected information systems, and occasionally in paper records, which are kept in secure cabinets. Our staff, contractors and medical students sign confidentiality agreements.

Accessing and correcting your personal information
You have the right to request access to, and correction of, your personal information.
To request access to your medical records, please make your request in writing, with confirmation of your identity. We will respond within a reasonable time, ideally within 30 days. Medical files are transferred directly to your chosen medical practice.

We will take reasonable steps to keep your information accurate and up to date, and from time to time we will ask you to confirm your details. You can also ask us to correct or update your information by writing to our reception team at admin@hammondhealth.com.au.

Privacy complaints
We take privacy concerns seriously. Please put your concern in writing and we will try to resolve it through our complaints procedure. You can write to us at Hammond Health, Suite 1, 129 Fitzmaurice Street, Wagga Wagga NSW 2650, or email the practice manager at ray@hammondhealth.com.au. We aim to respond within 14 days, and within 30 days at most.

You may also contact the Office of the Australian Information Commissioner (OAIC). The OAIC will generally ask you to give us time to respond before it investigates. Visit www.oaic.gov.au or call 1300 363 992.

Privacy and our website
Our website and social media are used mainly to provide information. If you send us a message through our website contact form, we collect the details you provide, such as your name, email, phone number and message, and use them only to respond to your enquiry. Please don't include detailed health information in the form; call us on 02 6936 7020 instead. Online appointments are made through our booking provider, Medi2Apps, which handles your details on our behalf.
Policy review
We review this policy every year. We will let patients know of any changes by posting a notice in our waiting room or on our website.