Privacy Policy

AllPsychiatry (Oasis Health Services Pty Ltd)

Last Updated: 2nd July 2026

About All Psychiatry

All Psychiatry is the trading name of Oasis Health Services Pty Ltd (ACN 656 619 779).

All Psychiatry provides specialist psychiatry, psychology, developmental and behavioural paediatric, and other mental health services throughout Australia via secure telehealth and selected face-to-face consultations.

We aim to make specialist mental healthcare more accessible by connecting patients across Australia with appropriately qualified and registered clinicians through secure online booking, communication and telehealth platforms.

We recognise the importance of protecting your privacy and are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you use our website, patient portal, book appointments, or receive healthcare services from us.

By providing your personal information (including sensitive health information), you acknowledge that we may collect, use, store and disclose that information as described in this Privacy Policy and as otherwise permitted or required by law.

We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal obligations. The current version will always be available on our website, and we encourage you to review it periodically.

What Personal Information We Collect

We only use and disclose your personal information and health information for the purposes described in this Privacy Policy, for purposes that are directly related to your healthcare, where you have provided your consent, or where the use or disclosure is otherwise authorised or required by law.

This may include:

Personal Information

Full name

Date of birth

Residential and postal address

Telephone numbers

Email address

Emergency contact details

Credit Card or other payment information

Sensitive information (such as health information)

Information in connection with questionnaires and promotions

Your device identity type, I.P. address, geo-location information, page view statistics, advertising data and standard web log information, information about third parties and

Any other information provided by you to us via website or our online presence, or otherwise required by us or provided by you.

Government Identifiers

Medicare number

DVA number

Health Care Card details

Pensioner Concession Card details

Commonwealth Seniors Health Card details

Private health insurance details

Health Information

This may include:

Medical history

Mental health history

Family history (where clinically relevant)

Current medications

Allergies

Previous assessments

Referral information

Investigation results

Pathology reports

Imaging reports

Treatment plans

Clinical notes

Prescriptions

Correspondence from other healthcare providers

Other Information

Where appropriate, we may collect information relating to:

Employment

Education

NDIS

WorkCover

TAC

Veterans' Affairs

Other organisations involved in your care

How We Collect Your Information

We collect your personal information to provide and coordinate your healthcare. This enables us to manage appointments, maintain accurate clinical records, communicate with you, and support your assessment, treatment and ongoing care.

Your personal information may also be used for related administrative purposes, including billing, processing Medicare and other health fund claims, quality improvement activities, staff training, practice accreditation, and meeting our legal and regulatory obligations.

We may collect information directly from you through:

Appointment bookings

Online enquiry forms

Contact us through our website

Patient Portal

Telephone conversations

Email correspondence

SMS communications

Telehealth consultations

Face-to-face consultations

Medical questionnaires

Consent forms

Upload your personal information on any applications or services operated by us

Receive goods or services from us

Interact with our website, social applications, services, content and advertising

We may also collect information from third parties:

Where practicable, we collect your personal information directly from you. However, there may be circumstances where we collect personal information (including sensitive health information) from other sources where it is reasonably necessary to provide you with healthcare services or where authorised or required by law.

Depending on your circumstances, we may collect information from:

General Practitioners (GPs)

Specialists

Psychologists

Allied Health Professionals

Hospitals and other healthcare facilities

Pathology providers

Diagnostic imaging providers

Medicare

Private health insurers

Transport Accident Commission (TAC)

WorkCover authorities or insurers

National Disability Insurance Scheme (NDIS)

Parents, guardians or authorised representatives (where appropriate)

Other organisations or individuals involved in your care, where authorised by you or permitted by law.

We only collect personal information from these sources where it is reasonably necessary to provide, coordinate or manage your healthcare, or to meet our legal, regulatory or administrative obligations.

Providing Information on Behalf of Another Person

In some circumstances, you may provide personal information to us on behalf of another person.

If you provide personal information on behalf of another individual, you confirm that you are authorised to do so and that the individual has consented to the collection, use and disclosure of their personal information in accordance with this Privacy Policy, or that you are otherwise authorised or permitted by law to provide that information.

Where the patient is under 18 years of age or does not have the capacity to make decisions about their healthcare, personal information may be provided by a parent, legal guardian, authorised representative or other person who is legally authorised to act on the patient's behalf.

This may include, where appropriate:

A parent or legal guardian;

An authorised representative or substitute decision-maker;

An NDIS nominee, support coordinator or plan manager;

A person acting under a power of attorney or guardianship order; or

Another person authorised by law to act on behalf of the patient.

We may request evidence of your authority to act on behalf of another person where reasonably necessary.

Why We Collect Your Information

We collect your information for the following primary purposes:

Verify a patient's identity.

Provide healthcare services.

Manage appointments and send reminders.

Communicate with patients about their care.

Maintain clinical records.

Process payments and Medicare/private health insurance claims.

Provide information to service providers that support your operations (e.g. secure practice management software, telehealth platform, payment providers), where reasonably necessary.

Improve the quality, safety and efficiency of your services (quality assurance, accreditation, staff training).

Comply with legal and regulatory obligations.

Use information for related secondary purposes that a patient would reasonably expect.

Use or disclose information where required or authorised by law (including serious threats to health or safety).

We may also use or disclose your personal information for purposes that are directly related to the primary purpose for which it was collected, where you would reasonably expect such use or disclosure. We may also use or disclose your information where required or authorised by law, where necessary to lessen or prevent a serious threat to the life, health or safety of an individual or the public, or where you have otherwise provided your consent.

Telehealth Services

All Psychiatry offers secure telehealth consultations, allowing patients to access specialist mental healthcare from the convenience of their home or another suitable location.

Before your consultation, we will take reasonable steps to:

Confirm your identity;

Obtain your informed consent to receive care via telehealth;

Confirm your current location (to assist in providing appropriate care, particularly in an emergency); and

Ensure that telehealth is clinically appropriate for your individual circumstances.

Our telehealth consultations are conducted using secure communication platforms designed to protect your privacy and confidentiality.

To help maintain your privacy, we encourage you to attend your consultation from a quiet, private location where you feel comfortable discussing your health.

Telehealth consultations are not routinely recorded. A consultation will only be recorded where:

You have provided your express consent; or

Recording is otherwise authorised or required by law.

Electronic Medical Records

AllPsychiatry securely maintains your health information using electronic clinical record systems to support the delivery of safe and coordinated healthcare.

Your electronic medical record may include information such as your consultation notes, referrals, reports, prescriptions, investigation results, correspondence and other information relevant to your care.

Where we receive paper documents, they are securely scanned into your electronic medical record and confidentially destroyed once the electronic copy has been verified.

Website, Cookies and Analytics

When you visit our website, we may automatically collect some general information about how our website is used. This information does not usually identify you personally and may include details such as your browser type, device, operating system, the pages you visit, how long you spend on our website, and your IP address where applicable.

We use cookies and similar technologies to help our website function properly and to improve your experience. Cookies help us to:

Remember your preferences;

Improve website performance;

Understand how visitors use our website; and

Maintain the security and functionality of our website.


You can choose to disable cookies through your internet browser settings. However, doing so may affect the functionality of some parts of our website.

We may also use trusted website analytics services, such as Google Analytics, to collect anonymous information about how visitors use our website. This information helps us improve our website, enhance the services we provide, and better understand the needs of our visitors. The information collected through these services does not generally identify individual patients.

Disclosure of Personal Information

We respect your privacy and are committed to protecting theconfidentiality of your personal information. We will only use or disclose yourpersonal information where it is reasonably necessary to provide healthcareservices, where you have authorised us to do so, or where disclosure isotherwise permitted or required by law.

Your personal information may be disclosed to:

Our clinicians and authorised staff involved in your care;

Your General Practitioner (GP), specialists, psychologists, allied health professionals and other healthcare providers involved in your treatment;

Hospitals, pathology providers and diagnostic imaging providers involved in your care;

Medicare, the Department of Veterans' Affairs (DVA), private health insurers, TAC, WorkCover, NDIS and other organisations involved in funding or administering your healthcare, where applicable;

Service providers who assist us in operating our practice, including providers of secure clinical management systems, telehealth platforms, information technology services, secure document storage, payment processing, accounting, legal and professional advisory services; and

Any other person or organisation where you have provided your consent or where disclosure is authorised or required by law.


Where we engage third-party service providers, we take reasonable steps to ensure they maintain appropriate privacy, confidentiality and security standards and only use your personal information for the purposes of providing services on our behalf.

When We May Disclose Your Information.

We may also disclose your personal information where:

You have provided your consent;

It is necessary to coordinate or facilitate your healthcare;

It is required for Medicare, DVA, TAC, WorkCover, NDIS or other authorised funding arrangements;

Disclosure is required or authorised by law;

It is required by a court, tribunal, subpoena or other lawful authority;

It is necessary to lessen or prevent a serious threat to the life, health or safety of you, another person or the public;

It is reasonably necessary for the establishment, exercise or defence of a legal claim; or

Another exception under the Privacy Act 1988 (Cth) applies.

Confidentiality

We understand that your health information is personal and sensitive. Protecting your privacy and maintaining the confidentiality of your information is very important to us.

We will only use or disclose your personal information where it is necessary to provide your healthcare, where you have given your consent, or where we are permitted or required to do so by law.

For patients under the age of 18 years, or where a patient does not have the capacity to make decisions about their healthcare, personal information may be shared with a parent, legal guardian or other person who is legally authorised to make healthcare decisions on the patient's behalf, where appropriate and in accordance with applicable laws.

In some circumstances, we may also disclose your personal information:

Where you have authorised or requested us to do so;

To support your ongoing healthcare or treatment with other healthcare providers involved in your care;

Where required by law, a court or tribunal;

To comply with mandatory reporting or other legal obligations;

Where necessary to prevent or lessen a serious threat to your life, health or safety, or that of another person or the public;

For Medicare, DVA, TAC, WorkCover, NDIS or other authorised funding or statutory schemes; or

Where otherwise permitted or required under any applicable laws.


Whenever we disclose your personal information, we take reasonable steps to ensure it is shared securely and only with those who are authorised to receive it.

Our Legal Responsibilities

All Psychiatry has a legal duty to protect the privacy, confidentiality and security of your personal information and sensitive health information.

We are committed to complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable Australian health records legislation.

We take reasonable administrative, technical and physical safeguards to protect your information against unauthorised access, use, disclosure, alteration, loss or misuse.

Where required under Australian law, we will notify affected individuals and the relevant authorities of eligible data breaches in accordance with the Notifiable Data Breaches Scheme.

Storage and Protection of Personal Information

We take reasonable steps to ensure that your personal information is stored securely and protected from misuse, interference, loss, unauthorised access, modification and disclosure.

Patient information is primarily stored using secure systems and trusted service providers that support the delivery of our healthcare and administrative services.

To assist in the operation of our practice, some authorised administrative and operational staff located in India may access personal information stored within our secure systems. Such access is limited to the performance of authorised administrative and support functions and is provided in accordance with strict confidentiality obligations, role-based access controls, and our privacy and information security policies.

Where personal information is accessed or processed outside Australia, we take reasonable steps to ensure that appropriate contractual, privacy and security safeguards are in place and that personal information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We may also use trusted third-party technology providers, such as website analytics and cloud-based service providers, to support the operation of our website and practice. These providers may process limited information using infrastructure located in multiple countries. Where this occurs, we take reasonable steps to ensure appropriate privacy and security protections are maintained.

Where you choose to communicate with us through third-party platforms or social media services, your personal information may also be collected and managed in accordance with the privacy policies of those providers.

Third-Party Service Providers

To help us provide our services, we may use trusted third-party service providers, including providers of secure telehealth, electronic medical records, payment processing, appointment reminders, IT support and website hosting.

We only share your personal information where it is reasonably necessary for these providers to perform services on our behalf. We take reasonable steps to ensure they maintain appropriate privacy, confidentiality and security standards.

Information Security

We take reasonable steps to keep your personal information safe and secure. This includes using secure electronic systems, restricted staff access, password protection, data encryption where appropriate, secure backups, and ongoing staff training on privacy and confidentiality.

While we take every reasonable precaution to protect your information, no electronic system can be guaranteed to be completely secure.

Data Retention

Patient records are retained in accordance with Australian legal and professional record retention requirements. In general, adult health records are retained for a minimum of 7 years from the date of the last clinical entry. Records relating to patients who were under 18 years of age at the time of treatment are generally retained until the patient reaches 25 years of age, or longer where required by law.

Access to Your Information

You may request access to your personal information by contacting the practice.
Access may be refused where permitted by law.
Reasonable administrative fees may apply for copies of records where permitted.

Accessing and Correcting Your Information

You have the right to request access to the personal information we hold about you and to request that any inaccurate, incomplete or out-of-date information be corrected.

If you would like to access or update your personal information, please contact us using the details provided at the end of this Privacy Policy. To protect your privacy, we may ask you to verify your identity before providing access to your information.

We will respond to your request within a reasonable timeframe and will take reasonable steps to correct your personal information where appropriate and in accordance with applicable laws.

In some circumstances, we may be unable to provide access to all or part of your personal information. If this occurs, we will explain the reasons for our decision, where permitted by law.

Please note that, as a healthcare provider, we are required by law to retain certain health records for specified periods. As a result, we may not be able to delete personal information where we have a legal or regulatory obligation to retain it.

Your Privacy Rights

Under Australian privacy legislation, you have the right to:

Request access to the personal information and health information we hold about you;

Request a copy of your health records (subject to applicable laws and reasonable administrative charges where permitted);

Request correction of inaccurate, incomplete or out-of-date personal information;

Request information about how your personal information has been collected, used or disclosed;

Withdraw your consent to the collection, use or disclosure of your personal information where permitted by law (noting that this may affect our ability to provide healthcare services);

Make a privacy complaint to All Psychiatry; and

If you are not satisfied with our response, make a complaint to the Office of the Australian Information Commissioner (OAIC).


To exercise any of these rights, please contact our Privacy Officer using the contact details provided at the end of this Privacy Policy.

Children and Young People

Where patients are under 18 years of age, personal information may be collected from parents, guardians or authorised representatives where appropriate and permitted by law.

Practice Updates

From time to time, we may send you information about our services, new clinicians, changes to our practice, or other updates that may be relevant to your care.

We will only send these communications where permitted by law or where you have provided your consent. You may opt out of receiving these communications at any time by following the unsubscribe instructions or by contacting our practice.

Links to Other Websites

Our website may contain links to external websites for your convenience or to provide additional information. These websites are operated by third parties and are not controlled by All Psychiatry.

We are not responsible for the content, privacy practices or security of external websites. We encourage you to read the privacy policy of any website you visit before providing your personal information.

Complaints

If you are dissatisfied with our response, or believe we have not handled your personal information in accordance with applicable privacy laws, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) or contact us below

Privacy Officer
All Psychiatry Pty Ltd
Email: manager@allpsychiatry.com.au
Phone: 03 9099 0500
Website: www.allpsychiatry.com.au

We will investigate your complaint and respond within a reasonabletimeframe. If you are not satisfied with our response, you may contact:

Office of the Australian Information Commissioner (OAIC)
Website: https://www.oaic.gov.au

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legislation, technology or our business practices.

The most current version will always be available on our website.