NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 . NACCHS WILL TAKE OVER PRIMARY HEALTH CARE ON MORNINGTON ISLAND FROM JULY 2026 .

Bookings
Privacy Policy

Privacy Policy

1. INTRODUCTION

Street Address: Lardil Street Mornington Island Qld 4892
Phone Number: 0457 297 821

1.1 APPROVAL

The contents of this Privacy Policy have been reviewed and approved by:
Stuart Gordon, Chief Executive Officer, Ngarnal Community Health
Susan Sewter, Chairperson, Ngarnal Community Health

2. ABOUT THIS POLICY

2.1 PURPOSE

Ngarnal Community Health is subject to the Privacy Act 1988 (Cth) (the Privacy Act). The Privacy Act contains 13 Australian Privacy Principles (APPs) which are rules about how Ngarnal Community Health may collect, use, dispose, and store your personal and sensitive health information, and how you may access and correct records containing your personal or sensitive information. Ngarnal Community Health is committed to complying with all applicable privacy laws and protecting your privacy in accordance with the 13 APPs.

The purpose of this Privacy Policy is to clearly communicate how Ngarnal Community Health handles personal information. It gives you a better and more complete understanding of the type of personal information that Ngarnal Community Health holds, and the way Ngarnal Community Health handles that information.

Basic information about Ngarnal Community Health’s personal information handling practices can be viewed in the summary version Privacy Statement on the Ngarnal Community Health website. The Privacy Statement is a summary of how Ngarnal Community Health collects, uses and discloses personal information and how to contact Ngarnal Community Health, if you would like to access or correct any personal information which Ngarnal Community Health holds about you.

2.2 TO WHOM DOES THIS PRIVACY POLICY APPLY?

This Privacy Policy applies to Ngarnal Community Health’s collection, use and disclosure of personal information from any source, including outreach specialist health care service providers engaged by Ngarnal Community Health, employees and other individuals engaged by, or providing outreach specialist health care services to Ngarnal Community Health.

In relation to employees of Ngarnal Community Health, this Privacy Policy will apply only to the extent that the collection, use or disclosure of that personal information does not fall within the definition of an exempt practice pursuant to section 7B(3) of the Privacy Act 1988 (Cth).

2.3 CURRENCY

This Privacy Policy has been updated as Version dated 09 September 2025, and may change from time-to-time. The most up-to-date copy is held in the Ngarnal Community Health’s Quality Management System Document Management System and the summary version Privacy Statement is published on the Ngarnal Community Health’s website. The full Privacy Policy can be obtained by contacting Ngarnal Community Health.

3. HOW NGARNAL COMMUNITY HEALTH HANDLES YOUR PERSONAL INFORMATION

3.1 NGARNAL COMMUNITY HEALTH’S LEGAL OBLIGATIONS

As stated in Section 1 of this Privacy Policy, as a not-for-profit health care and wellbeing service provider on Mornington Island, funded by the Australian Government and Queensland Health, Ngarnal Community Health is required to comply with the 13 Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), which regulates how Ngarnal Community Health may collect, use, disclose, and store personal information and how individuals may access and correct personal information which Ngarnal Community Health holds about them.

3.2 TERMS USED

In this Privacy Policy the following terms are used:

“Personal Information” as it is defined in the Privacy Act 1988 (Cth) means information or an opinion about an identified individual, or an individual who is reasonably identifiable:

  • whether the information, or opinion, is true or not; and
  • whether the information, or opinion, is recorded in a material form or not.

Personal information also includes ‘sensitive information’ which is information such as your race, religion, political opinions or sexual preferences, biometric information used for biometric verification or identification, biometric templates and health information. Information which is ‘sensitive information’ attracts a higher privacy standard under the Privacy Act 1988 (Cth) and is subject to additional mechanisms for your protection.

“Sensitive Information” includes information such as health records, criminal history checks, working with children checks, income and bank details, and grievances.

“Health Information” as defined in the Privacy Act 1988 (Cth) is a particular subset of ‘personal information’ and means information, or an opinion, about:

  • the health (at any time) of an individual; or
  • an individual’s expressed wishes about the provision, to them, of health Outreach specialist health care services; or
  • a health service provided, or to be provided to an individual that is also personal information.

“Ngarnal Community Health Service’s Outreach Specialist Health Care Service Providers” are outreach specialist health care service providers commissioned by Ngarnal Community Health through funding from the Australian Government and Queensland Health.

3.3 OPEN AND TRANSPARENT MANAGEMENT OF PERSONAL INFORMATION (AAP 1)

Ngarnal Community Health displays a ‘Summary Privacy Statement’ on the Ngarnal Community Health website, which is accessible to interested parties to inform them of Ngarnal Community Health policies on management of personal information.

3.4 ANONYMITY AND PSEUDONYMITY (AAP 2)

You do not have to provide Ngarnal Community Health with your personal information. You have the option of dealing with Ngarnal Community Health anonymously, or by using a pseudonym, provided that this is lawful and practicable. Ngarnal Community Health will not preclude an individual from participating in the activities of the organisation because they request anonymity; however, this may limit the health care and wellbeing services that Ngarnal Community Health, or its outreach specialist service providers, can provide to you, if it is impracticable to deal with you in such an unidentified manner. An individual who chooses to access the Outreach specialist health care services of Ngarnal Community Health anonymously will be advised of any potential consequences resulting from their decision.

3.5 FROM WHOM INFORMATION IS COLLECTED AND WHY (AAP 3)

3.5.1 Individuals/Clients/Visitors

Ngarnal Community Health collects personal information from you that is reasonably necessary to engage with you for the provision of primary health care and wellness servicesby Ngarnal Community Health, for Ngarnal Community Health’s functions or activities and for administrative and internal business purposes related to your dealings with Ngarnal Community Health. If you provide incomplete or inaccurate information or withhold personal information, Ngarnal Community Health may not be able to engage with you as required to meet that primary purpose.

In relation to individuals employed or engaged by Ngarnal Community Health, and individuals providing outreach specialist health care services to Ngarnal Community Health, this may include sensitive information including criminal record, or working with children checks, health information and credentials, qualifications and certifications.

Ngarnal Community Health will usually collect your personal information directly from you. Sometimes it may need to collect information about you from a third party; however, will only do this where it is not reasonable or practical to collect this information directly from you. Sensitive information will not be collected without your consent unless authorised by law.

3.5.2 Types of Personal Information Collected and Held

If Ngarnal Community Health receives your email address because you sent an email message, the email will only be used or disclosed for the purpose for which you have provided and will not be added to an emailing list or disclosed to anyone else unless you have consented for this purpose: eg; mailing list. Ngarnal Community Health will record email addresses only after direct receipt of a message.

Personal information collected by email or orally (eg, you telephone number and residential address) will be used only for the purpose for which it was provided and will not be disclosed without consent, except where authorised or required by law.

Your personal and sensitive health information may be collected by Ngarnal Community Health directly from you in provision of primary health care and wellbeing services, during the course of visits by you to our office and during consultations.

Other information collected and held by Ngarnal Community Health includes job applications, personnel files and referrer information, and vaccination status of staff, as required by Ngarnal Community Health hospitals and health care facilities.

All data collected is considered personal information and will only be used for the purpose for which it was collected, or with prior consent from the client and will be managed in accordance with the Australian Privacy Principles (APPs).

3.5.3 How Personal Information is Obtained

Ngarnal Community Health collects information which is:

  • provided directly by you; and
  • provided on your behalf, with your consent.

3.6 UNSOLICITED PERSONAL INFORMATION (APP 4)

Unsolicited personal information, which is personal information received by Ngarnal Community Health where Ngarnal Community Health has taken no active steps to collect the information, will be handled in accordance with Australian Privacy Principal (APP) 4.

3.7 NOTIFICATION OF COLLECTION OF PERSONAL INFORMATION (APP 5)

Ngarnal Community Health will take all reasonable steps to ensure that outreach specialist health care providers and other interested parties have access to this Privacy Policy at, or before, the time of collection of personal information, or as soon as practicable afterwards. Ngarnal Community Health Privacy Statement, which is a summary version of this Privacy Policy, is on the Ngarnal Community Health website and is applicable to all personal information ‘collected’ about an individual, either directly from the individual or from a third party.

4 USE AND DISCLOSURE OF PERSONAL INFORMATION (AAP 6)

4.1 GENERAL

Ngarnal Community Health only uses personal information for the primary purpose for which you have given the information to Ngarnal Community Health, unless one of the following applies, such as where:

  • you have consented for Ngarnal Community Health to use your information for another purpose;
  • the personal information you have given Ngarnal Community Health you would reasonably expect, or Ngarnal Community Health has told you, that your information is usually disclosed for another purpose, to other individuals, organisations or Ngarnal Community Health outreach specialist service providers;
  • Ngarnal Community Health is required or authorised by law to disclose your information for another purpose;
  • the disclosure of your information by Ngarnal Community Health will prevent or lessen, a serious and/or imminent threat to someone’s life, health or safety, or to public health or public safety; or
  • the disclosure of your information by Ngarnal Community Health is reasonably necessary for the enforcement of a criminal law, or a law imposing a penalty or sanction, or for the protection of public revenue.

Ngarnal Community Health may use or disclose your personal information as specified above via electronic processes, where available, or relevant.

Subject to law, the types of third parties Ngarnal Community Health may disclose personal information to include:

  • Ngarnal Community Health’s outreach specialist health care providers, outreach specialist health care service providers and external advisers;
  • other organisations with whom Ngarnal Community Health has alliances or arrangements;
  • reporting to Commonwealth and State government agencies and other funders; and
  • for the purpose of promoting the health care and wellbeing services we provide.

Personal information will not be used for a secondary purpose unless the use or disclosure is required or authorised under law, a person has consented to the use or disclosure of their health information for the secondary purpose, for the use of research (de-identified data) or the use or disclosure is otherwise permitted by the Acts. If the identified information is to be used for a secondary or unrelated purpose, such as data analysis or research. Clients will be given the opportunity to refuse such use or disclosure. If a client is physically or legally incapable of providing consent, a responsible person (as described under the Act) may do so.

4.2 RELATIVES, GUARDIAN, CLOSE FRIENDS OR LEGAL REPRESENTATIVE

Ngarnal Community Health may provide your personal information to your spouse or partner, parent, child, other relatives, close personal friends, guardians or a person exercising your power of attorney under an enduring power of attorney or who you have appointed your enduring guardian, unless you tell us that you do not wish us to disclose your personal information to any such person.

4.3 OUTREACH SPECIALIST HEALTH CARE PROVIDERS AND OUTREACH SPECIALIST HEALTH CARE SERVICE PROVIDERS UNDER AGREEMENT

Ngarnal Community Health may provide, or allow access to personal information, to outreach specialist health care service providers engaged to provide professional Outreach specialist health care services to Ngarnal Community Health (eg, Information Communication Technology providers) or to outreach specialist health care service providers to whom aspects of Ngarnal Community Health Outreach specialist health care services are outsourced.

Where Ngarnal Community Health outsources any of its health care and wellness services or commissions outreach specialist health care service providers to perform services on behalf of Ngarnal Community Health, it takes reasonable steps in the circumstances to ensure that third parties (only organisations within Australia), have obligations under their contracts with Ngarnal Community Health to comply with all laws relating to the Privacy Act 1988 (Cth) and other relevant privacy legislation (including security) and confidentiality of personal information, and where applicable Ngarnal Community Health Privacy Policy.

4.4 OTHER COMMON USES OF PERSONAL INFORMATION

Ngarnal Community Health may use or disclose personal information such as names, addresses, email addresses, phone numbers, position details and other identifying information directly or indirectly, where necessary, to/for:

  • comply with legislative, regulatory and/or funding requirements;
  • assessment for provision of regional health care service needs;
  • liaise with health professionals or other third party health care providers;
  • service providers engaged by Ngarnal Community Health to provide health Outreach specialist health care services during the course of visits by you to our office and during consultations;
  • manage Ngarnal Community Health service delivery processes relating to risk management, safety and security and quality management system certification and accreditation activities;
  • conduct quality assurance, improvement, clinical audit and research activities in respect of the medical and allied health industry;
  • engage outreach specialist health care services to provide services on behalf of Ngarnal Community Health;
  • collect data for statistical analysis, to provide broad advice to the government and industry and to monitor demand for Outreach specialist health care services;
  • perform risk and probity checks in respect of visits by you to our office and during consultations;
  • oversee and undertake performance management of service providers;
  • provide information about Ngarnal Community Health outreach specialist health care service providers;
  • perform administrative operations, including accounting, payroll, risk management, record keeping, archiving, systems development and testing;
  • conduct marketing or client satisfaction research;
  • develop, establish and administer alliances and other arrangements with other organisations in relation to the promotion and use of related outreach specialist health care service providers;
  • develop and identify primary health care and wellness servicesthat may interest clients and staff;
  • tell clients about primary health care and wellness servicesthat may be of interest to them;
  • engage with client in their dealings with Ngarnal Community Health and for other related purposes;
  • maintain records as required under our policies and by law;
  • in an emergency where life is at risk and the client is unable to provide consent;
  • for other purposes required or permitted by law;
  • perform activities such as quality management system processes, in accordance with government accreditation or compliance, audits, statistical analysis, risk and complaints management;
  • invoice and account management, including storage of service provider details on Ngarnal Community Health accounts software;
  • comply with any applicable laws (eg, in response to a subpoena or compulsory reporting to State or Federal authorities, specified public health and safety circumstances); and
  • anonymise and/or aggregate the personal information that we collect for the purpose of carrying out data analysis and reporting purposes.

Ngarnal Community Health’s outreach specialist health care providers are required to ensure that personal information will only be used for the purpose it was collected, or that would reasonably be expected by the client providing the information.

4.5 OTHER USES WITH YOUR CONSENT

With your consent Ngarnal Community Health may also use your information for other purposes such as statistical analysis – to improve service offerings. However, unless you provide Ngarnal Community Health with consent for this purpose to Ngarnal Community Health outreach specialist service providers who collect such information, Ngarnal Community Health will not use your information in this way.

4.6 DISCLOSURE WITHOUT YOUR CONSENT

Ngarnal Community Health and Ngarnal Community Health and our outreach specialist health care providers will only disclose your personal health information to a third party with your consent, unless:

  • • the disclosure is directly related to the primary purpose for collection;
  • • in an emergency situation, where release of information is necessary to aid medical treatment; or
  • • Ngarnal Community Health is required by law to disclose the information (eg; reporting of communicable diseases).

4.7 JOB APPLICATIONS

Ngarnal Community Health collects personal information of job applicants who have responded to an advertised position for the primary purpose of assessing and (if successful) engaging applicants. The purpose for which Ngarnal Community Health uses personal information of job applicants includes:

  • employment, or engagement, suitability checks;
  • managing employment, engagement and placement; and
  • ensuring that Ngarnal Community Health holds relevant contact information.

Ngarnal Community Health may also store information provided by job applicants who were unsuccessful for the purposes of future recruitment or employment opportunity.

4.8 DIRECT MARKETING (APP 7)

Ngarnal Community Health will only use or disclose personal information for direct marketing purposes where the individual has either consented to their personal information being used for direct marketing or has a reasonable expectation that their personal information will be used for this purpose, and conditions relating to opt-out mechanisms are met.

If Ngarnal Community Health wishes to use or disclose personal information for the purpose of direct marketing, it will always disclose this to the person/s concerned and will seek their written approval before using personal information for marketing purposes.

4.9 CROSS BORDER OR OVERSEAS DISCLOSURE OF PERSONAL INFORMATION (APP 8)

Ngarnal Community Health may enter into arrangements with third parties to store data it collects or to access the data to health care and wellbeing services (such as data processing) and such data may include personal information, which may be shared for statistical purposes with State and Federal grant funding authorities. Ngarnal Community Health will take reasonable steps to ensure that the third parties do not breach the 13 APPs. The steps Ngarnal Community Health will take may include ensuring the third party is bound by privacy protection obligations which are the same (or substantially the same) as those which bind Ngarnal Community Health, with a requirement that the third party has information security measures in place which are of an acceptable standard and approved by Ngarnal Community Health.

Ngarnal Community Health will take steps to protect an individual’s privacy if information is to be sent interstate or outside Australia and will only transfer your personal information overseas when:

  • you have given written consent to the transfer; or
  • the transfer is necessary for the fulfilment of a contract between you and Ngarnal Community Health; or
  • the transfer is for your benefit, but it is impractical to obtain consent; or
  • the recipient is bound by legislation that is substantially similar to the Privacy Act 1988 (Cwth); or
  • it is believed that the information will be protected by a privacy scheme or legal provisions comparable to those in Australia; or
  • Ngarnal Community Health is reasonably sure that the information will not be held, used or disclosed inconsistently with the privacy principles set out in the Privacy Act 1988 (Cwth).

5 DATA RECORDING, QUALITY AND SECURITY

5.1 ADOPTION, USE OR DISCLOSURE OF GOVERNMENT RELATED IDENTIFIERS (APP 9)

As required by Australian Privacy Principles (APP 9), Ngarnal Community Health will not use Medicare or other identifiers assigned by a Commonwealth or State Government agency to identify personal information.

5.2 DATA QUALITY (APP 10)

Ngarnal Community Health will take reasonable steps to ensure that personal information which it may collect, use or disclose is accurate, complete and up-to-date.

5.3 DATA SECURITY FOR INFORMATION WE HOLD (APP 11)

Ngarnal Community Health may store the personal information it collects from you in various forms. Ngarnal Community Health will comply with the 13 APPs, and this Privacy Policy, in respect of personal information in whatever form that information is stored.

Storage of personal information may be in physical (paper) form and may also include an electronic record system. Some of your health information may be stored offsite with a third party provider such as Ngarnal Community Health’s outreach specialist health care providers.

Ngarnal Community Health will take all reasonable steps to:

  • ensure that personal information collected and held is accurate, complete and up-to-date;
  • ensure that its web environment, internal network and databases are protected from unauthorised access using current technologies, to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure.
  • protect the personal information from misuse, loss or unauthorised access or disclosure;
  • store personal information securely with access limited to only those people necessary to manage and use the information in accordance with the full Ngarnal Community Health Privacy Policy;
  • use technologies and processes such as access control procedures, network firewalls, encryption and physical security to protect your privacy.

Ngarnal Community Health will store personal and health information on secure servers that are protected in controlled facilities.

Ngarnal Community Health will destroy or permanently de-identify any information which is in its possession or control and which is no longer needed for the purpose for which it was collected, provided Ngarnal Community Health is not required under an Australian law or court/tribunal or otherwise to retain the information.

5.4 ACCESS TO AND AMENDMENT OR CORRECTION OF PERSONAL INFORMATION (APP 12 AND 13)

You may request access to personal information held by Ngarnal Community Health. You can also request an amendment to personal information held should you believe that it contains inaccurate information. Individuals may request access to their personal or health information held by Ngarnal Community Health by writing, via the options in Section 5.

Ngarnal Community Health will allow access or make the requested changes, unless there is a reason under the Privacy Act 1988 (Cth), or other relevant law to refuse such access or refuse to make the requested changes. There are some circumstances in which access is restricted, and in these cases reasons for denying access will be explained.

If Ngarnal Community Health does not agree to change your personal information in accordance with your request, it will accept a written statement of the requested changes which will be held with your personal information. For security reasons and to protect individuals’ privacy, applicants will be asked to provide proof of their identity. There is no charge associated with making a request and Ngarnal Community Health will seek to process the request and provide access to the information, in most cases, within 30 days.

Should you wish to obtain access to, or request changes to, your personal information held by Ngarnal Community Health you can contact the Ngarnal Community Health Office via the options below.

6 HOW TO CONTACT NGARNAL COMMUNITY HEALTH ABOUT PRIVACY ISSUES

6.1 PRIVACY INFORMATION CONTACT OPTIONS

By letter:

Ngarnal Community Health, Lardil Street, Mornington Island Qld 4892

By email:

SSaltmere@morningtonislandhealth.org.au

By telephone:

0457 297 821

Attention:

Shanika Saltmere