Privacy Policy
Draft — not yet reviewed
This is a structural first draft, not a finished or legally reviewed policy. It should not go live until a qualified professional (a lawyer, or a health-privacy consultant familiar with the Australian Privacy Principles) has reviewed it against Karma Nutrition's actual data-handling practices. Remove this notice only once that review is done.
Who this policy covers
This policy explains how Karma Nutrition (Shilpi Arora, Accredited Practising Dietitian) collects, holds, uses and discloses personal and health information, in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Health information is classed as "sensitive information" under the Act and is handled with a higher standard of care than ordinary personal information.
What we collect
Depending on how you interact with the practice, this may include:
- Contact details — name, phone, email, address.
- Health information — medical history, current conditions, medications, referral letters, consultation notes, dietary and lifestyle information relevant to your care.
- Billing information — Medicare number, DVA details, private health fund details, relevant only to processing rebates and payment.
- Website usage information — collected automatically (see "Website analytics" below).
How we use it
Health and personal information is used to provide dietetic care, coordinate with your referring GP or treating team where relevant, process Medicare/DVA/private health rebates, and meet our professional record-keeping obligations as an Accredited Practising Dietitian under Dietitians Australia's Code of Conduct. It is not used for direct marketing without your consent.
Who we share it with
Information is shared only where necessary: with your referring GP or other treating practitioners (for continuity of care), with Medicare/DVA/your private health fund (for billing and rebates), or where required by law. We do not sell personal information, and we do not share it with third parties for their own marketing purposes.
Storage & security
[To confirm: name the practice management / records system used — e.g. Cliniko — and note that records are stored electronically with access restricted to authorised staff, per APP 11.]
Access & correction
You can request access to, or correction of, your personal and health information at any time (APPs 12 and 13) by contacting us using the details below.
Website analytics
[To confirm once an analytics tool is chosen — e.g. Plausible or GA4 — name it here and describe what it collects (typically anonymised or aggregated usage data, not health information).]
Complaints
If you have a concern about how your information has been handled, contact us first at info@karmanutrition.com.au. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Updates to this policy
[To confirm: last-reviewed date, once finalised.]