Privacy Policy
Introduction
Effective: May 2026 | Reviewed annually | movementrx.com.au
Introduction
Movement Rx is committed to protecting the privacy of patient and client information and to handling personal information responsibly, in accordance with:
- the Privacy Act 1988 (Cth)
- the Privacy Amendment (Enhancing Privacy Protection) Act 2012
- the Australian Privacy Principles (APPs)
- relevant Queensland and other State and Territory privacy legislation
This policy explains what personal information we collect, how we use and disclose it, how you can access or correct it, and how to make a complaint. It applies to all services provided by Movement Rx, including in-clinic, telehealth, and online interactions.
We review this policy annually and will publish updates on our website at movementrx.com.au. Your continued use of our services after any update constitutes acceptance of the revised policy.
Information We Collect
Types of information
We collect information necessary to provide physiotherapy and sports medicine services. This may include:
- Full name, date of birth, gender, and contact details
- Health information, injury history, and medical records
- Medicare, DVA, WorkCover, or private health insurance details
- Referring practitioner details and specialist correspondence
- Payment and billing information (processed securely via our practice management system)
- Information provided through our website, booking system, or telehealth platform
- Device and usage data collected automatically when you use our website (see Digital Services below)
How we collect information
We collect information directly from you wherever possible — in person, over the phone, via online booking, or through telehealth. In some circumstances, we may collect information from:
- Referring GPs, specialists, radiologists, or other treating practitioners
- Hospitals, insurers, or government health services
- My Health Record, where applicable
- A family member or carer in an emergency
You are not obliged to provide your personal information, but if you do not, we may be unable to provide you with appropriate care.
How We Use Your Information
We use your personal information to provide, manage, and improve the clinical care and services you receive. This includes:
- Diagnosis, treatment planning, and ongoing management
- Communicating with other treating practitioners involved in your care
- Scheduling appointments and sending reminders
- Processing payments and managing accounts
- Conducting telehealth consultations
- Meeting our legal and regulatory obligations
- Quality assurance, clinical audit, and staff education (de-identified where possible)
- Sending relevant health information or appointment reminders via email or SMS, where you have consented
We do not use your personal information for unrelated commercial purposes without your consent.
Disclosure of Your Information
We will only disclose your personal information to third parties where:
- It is directly related to your care and treatment (e.g. referral letters, imaging requests)
- You have provided consent
- We are required or permitted to do so by law (e.g. Medicare, WorkCover, insurers, courts, government regulators, or law enforcement)
- It is necessary to prevent a serious and imminent threat to health or safety
We use the following third-party service providers who may handle personal information on our behalf. All are contractually required to handle your information confidentially and only for the purposes we specify:
- Cliniko — practice management, appointment scheduling, clinical notes, and telehealth (hosted in Australia/EU; see cliniko.com/privacy)
- Payment processors — for secure billing transactions
- IT service providers — for system maintenance and support
- Google Analytics and similar website analytics tools — for understanding website usage (see Digital Services below)
We do not sell your personal information to third parties.
Digital Services and Website
Our website (movementrx.com.au) and online booking system collect certain information automatically, including:
- Browser type, device type, and IP address
- Pages visited and time spent on site
- Referring URLs and search terms
This information is collected via cookies and analytics tools (such as Google Analytics) to help us understand how our website is used and to improve our services. This data is generally aggregated and not linked to your identity.
You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of our website or booking system.
If you book an appointment or submit an enquiry online, the information you provide is transmitted securely and stored in our practice management system (Cliniko).
Where we communicate with you by email or SMS for appointment reminders or health information, you may opt out at any time by contacting us directly.
Artificial Intelligence Tools
Movement Rx uses AI-assisted tools in certain administrative and clinical documentation processes. The use of AI tools in your care is governed by a separate consent and information form, which you will be asked to complete where relevant.
We take reasonable steps to ensure any AI tools used comply with Australian privacy obligations and that your health information is not used to train third-party AI models without your explicit consent.
Data Quality and Security
We take reasonable steps to ensure personal information is accurate, complete, up to date, and relevant. Our staff may ask you to confirm your contact details at each visit. Please notify us if your information changes.
We protect your information through:
- Secure premises with controlled access
- Password-protected systems with role-based access controls
- Encrypted data transmission for online booking and telehealth
- Secure cloud storage through reputable, privacy-compliant platforms (Cliniko)
- Locked storage for any physical records
In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.
Retention of Records
We retain personal information for as long as required by law or as necessary to provide ongoing care. Under Queensland and Commonwealth law, adult health records are generally retained for a minimum of seven years from the date of last entry; records for patients who were minors at the time of treatment are retained until the patient turns 25 years of age.
When records are no longer required, they are securely destroyed or de-identified.
Accessing and Correcting Your Information
You have the right to request access to your personal information held by Movement Rx. Requests should be made in writing. We will respond within a reasonable time and may charge a reasonable fee for the administrative costs of retrieval and copying.
We may decline access in limited circumstances permitted by law — for example, where disclosure could pose a serious threat to health or safety. If access is denied, we will explain why and advise you of your options.
If you believe any information we hold is inaccurate, incomplete, or out of date, please contact us in writing and we will take reasonable steps to correct it.
Complaints
If you have a complaint about how we have handled your personal information, please contact us in writing in the first instance. We will investigate and respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with:
- Office of the Australian Information Commissioner (OAIC): oaic.gov.au | 1300 363 992
- Office of the Health Ombudsman (Queensland): oho.qld.gov.au | 133 646
Overseas Transfer of Data
We will not transfer your personal information to an overseas recipient unless you have provided consent or we are required to do so by law. Some of our third-party service providers (including Cliniko) may store data on servers located outside Australia. Where this occurs, we take reasonable steps to ensure those providers comply with standards equivalent to the Australian Privacy Principles.
Contact Us
For privacy queries, access requests, corrections, or complaints:
Chris Beatton
Movement Rx
Unit 101, 292 Anzac Avenue, Kippa-Ring QLD 4021
07 3180 2829
Movement Rx Privacy Policy | May 2026 | This policy is reviewed annually. Current version available at movementrx.com.au