Privacy Policy

Effective Date: 01/06/2025

Introduction

At JADE Health, we are committed to safeguarding the privacy and confidentiality of your personal and health information. This policy outlines how we collect, use, disclose, and protect your information in compliance with the Health Records and Information Privacy Act 2002 (NSW), the Privacy and Personal Information Protection Act 1998 (NSW), and the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Information We Collect

We may collect the following types of information:

Personal Information: Name, address, date of birth, contact details.
Health Information: Medical history, treatment plans, diagnostic results, and other information relevant to your care.
Payment Information: Billing details, Medicare or private health insurance information.

Purpose of Collection

Your information is collected to:

Provide safe and effective treatments.
Communicate with you regarding your care.
Manage administrative and billing processes.
Comply with legal and regulatory obligations.

Use of Cliniko

We utilize Cliniko, a secure, cloud-based practice management software, to manage your health records, appointments, and billing information. Cliniko complies with the Australian Privacy Principles and stores data securely within Australia. Their security measures include encryption, access controls, and regular backups to protect your information.

Use of Wix Website

Our website, www.jadehealth.com.au, is hosted on the Wix.com platform. Wix provides us with the online platform that allows us to offer information about our services and facilitate online bookings. Your data may be stored through Wix’s data storage, databases, and general applications. They store your data on secure servers behind a firewall.

We may collect personal information through our website, such as:

Contact Forms and Appointment Scheduling: These features can collect personal details like names, email addresses, and phone numbers.
Cookies and Tracking Technologies: Wix uses cookies to enhance user experience and may collect data for analytics and marketing purposes.

Wix implements robust security measures to protect this data, including:

SSL Encryption: Ensures that data transmitted between your website and users is encrypted.
Compliance with Standards: Wix is certified under standards like ISO 27001 and PCI DSS Level 1, indicating adherence to high security protocols.
Regular Security Audits: Wix conducts regular security assessments to identify and mitigate potential vulnerabilities.

For more details on Wix's security measures, you can refer to their Security Measures Overview.

Use of Xero Accounting Software

We use Xero, a secure, cloud-based accounting software, to manage our financial records, including invoicing and payment processing. Xero acts as a data processor on our behalf, handling personal and financial data such as names, contact details, and payment information.

Xero's security measures include:

Data Encryption: Personal and financial data is encrypted both in transit and at rest.
Multi-Factor Authentication (MFA): Adds an additional layer of security to prevent unauthorized access.
Regular Backups: Data is regularly backed up to prevent loss.
Compliance with Standards: Xero complies with ISO/IEC 27001:2022, an internationally recognized information security standard.

For more information on Xero's data protection practices, please visit their Data Protection page.

Use and Disclosure of Information

We use and disclose your information solely for purposes directly related to your care or as required by law. This may include:

Sharing information with other healthcare providers involved in your treatment.
Submitting claims to Medicare or private health insurers.
Complying with legal obligations, such as mandatory reporting requirements.

We will not use or disclose your information for any other purpose without your consent.

Data Security and Storage

We take reasonable steps to protect your information from unauthorized access, modification, or disclosure. This includes:

Secure storage of physical records. We are required to keep patient records for 7 years. We are also required to keep records for minors until they turn 25.
Password-protected electronic systems.

Cliniko, Wix, and Xero employ robust security measures, including encryption and access controls, to safeguard your data.

Access and Correction

You have the right to access and correct your personal and health information. To request access or correction, please contact us using the details provided below. We will respond to your request within a reasonable timeframe.

Complaints

If you have concerns about how we handle your information, please contact us directly. If you are not satisfied with our response, you may lodge a complaint with the NSW Information and Privacy Commission at www.ipc.nsw.gov.au.

For any questions or concerns regarding this privacy policy, please contact:

JADE Health
Address: 6 Kendall St, Tarrawanna NSW 2518
Phone: 0466 827 153
Email: tara@jadehealth.com.au
Website: www.jadehealth.com.au