Privacy Policy
Last updated: February 2026
Elyséa Health Pty Ltd (“Elyséa Health”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information responsibly and in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), the Health Records Act 2001 (SA) where applicable, and other relevant Australian privacy laws.
This Privacy Policy explains how we collect, use, hold, disclose, and protect your personal information (including health information) when you interact with us, access our website, book appointments, receive care from our clinicians, or use any of our services.
By accessing our website, registering interest, booking a consultation, or receiving services from Elyséa Health, you consent to the practices described in this Privacy Policy.
-
What personal information do we collect?
We collect personal information necessary to provide you with high-quality, integrated mental health and general practice care. This may include:
- Identification and contact details – full name, date of birth, residential or postal address, email address, phone number(s), emergency contact details
- Government identifiers – Medicare number, DVA number, Health Care Card, Pensioner Concession Card, Commonwealth Seniors Health Card
- Health and medical information – current and past medical history, mental health history, family medical history (where relevant), medications, allergies, test results, treatment plans, notes from consultations, referrals, and any other health-related information you or your referring practitioner provides
- Demographic information – age, gender, cultural background, occupation, employment status (where relevant to care)
- Billing and payment details – private health insurance information, payment card details (processed securely by third-party providers)
- Technical and usage information – IP address, browser type, device information, pages visited, booking interactions, and cookies/session data when you use our website or online booking system
We collect sensitive health information only when it is reasonably necessary to provide healthcare services to you.
-
How do we collect your personal information?
We collect your information:
- Directly from you when you register interest, complete online forms, book appointments, attend consultations, or communicate with us
- From your referring general practitioner, specialist, or other healthcare provider (with your consent or as permitted by law)
- From third parties (e.g., pathology providers, hospitals, allied health professionals) where you have authorised the disclosure or it is necessary for your care
- Automatically through your use of our website (e.g., via cookies, analytics tools, and session logs)
-
Why Do We Collect, Use, Hold, and Disclose Your Personal Information?
We collect, use, hold, and disclose your personal information primarily to:
- Provide safe, effective, and coordinated healthcare services (psychiatry, psychology, and general practice)
- Assess and diagnose conditions, develop treatment plans, prescribe medications (where appropriate), and monitor clinical progress
- Communicate with you regarding appointments, results, follow-ups, reminders, or changes to services
- Facilitate referrals, coordinate care with other healthcare professionals, and provide reports to your referring practitioner
- Process bookings, billing, Medicare/DVA claims, private health insurance rebates, and payments
- Maintain accurate clinical records in accordance with legal, regulatory, and professional requirements
- Respond to enquiries, complaints, or feedback
- Comply with legal obligations, including mandatory reporting requirements (e.g., child protection, notifiable diseases, or serious risk of harm to self or others)
- Improve our services through internal audits, staff training, clinical governance, and quality assurance processes (using de-identified information where possible)
- Provide you with non-promotional service-related communications, including updates about clinic operations, policy changes, health information, educational materials, blog articles, or other resources relevant to your care
If you do not wish to receive service-related updates, educational materials, or blog communications, you may unsubscribe at any time by writing to our administration team.
We will only use or disclose your personal information for a secondary purpose where it is directly related to the primary purpose, and you would reasonably expect such use or disclosure, where you have provided consent, or where required or authorised by law.
We will only use or disclose your information for a secondary purpose if it is directly related to the primary purpose and you would reasonably expect us to do so, or if we obtain your consent, or if required or authorised by law.
-
Who do we disclose your personal information to?
We may disclose your personal information to:
- Your treating clinicians and other Elyséa Health team members involved in your care
- Your referring GP or other healthcare providers are coordinating your treatment
- Medicare, DVA, private health insurers, or pathology/imaging providers for billing or claims
- Third-party service providers who assist us (e.g., secure telehealth platform providers, IT support, payment processors, document storage) – all bound by strict confidentiality obligations
- Government authorities or regulators where required by law (e.g., mandatory reporting of child abuse, imminent harm)
- In emergencies where disclosure is necessary to prevent a serious threat to your life, health, or safety (or that of another person)
We do not sell, rent, or trade your personal information. We never disclose your information for direct marketing purposes without your express consent.
-
What happens if you do not provide your personal information?
If you choose not to provide the personal or health information we reasonably request, we may not be able to:
- Book or provide consultations
- Accurately assess or treat your condition
- Process Medicare rebates, DVA claims, or private insurance reimbursements
- Maintain complete and accurate clinical records
This may limit the quality or safety of care we can provide.
-
How do we hold and secure your personal information?
Your information is stored securely in Australian-based, encrypted clinical record systems that comply with Australian health privacy standards. Access is restricted to authorised personnel on a need-to-know basis.
We use industry-standard safeguards, including encryption, firewalls, secure servers, access controls, and regular security reviews.
While we take reasonable steps to protect your information, no system is completely immune to risk. If a data breach occurs that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.
-
Access and correction of your personal information
You have the right to:
- Access your personal information we hold (including health records)
- Request correction if it is inaccurate, incomplete, or out of date
To make a request, please email admin@elyseahealth.com.au or write to our clinic at the address listed on our website. We will respond within a reasonable time (usually within 30 days). We may charge a reasonable fee to cover retrieval and copying costs, which we will advise you of in advance.
In some circumstances (e.g., if access could pose a serious risk to your health or safety, or to the health or safety of another person), we may refuse or limit access. We will explain our reasons and discuss alternatives with you.
We will take reasonable steps to correct information we hold when you request it or when we become aware it is inaccurate.
-
Complaints
If you believe your privacy has been breached or have concerns about how we have handled your information, please contact us first at:
Email: admin@elyseahealth.com.au
Phone: 08 7428 6266
Please provide as much detail as possible. We will investigate promptly and aim to respond in writing within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Website: oaic.gov.au
Phone: 1300 363 992
-
Policy updates
We review this Privacy Policy regularly and may update it to reflect changes in law, technology, or our practices. The current version is always available on our website. Significant changes will be notified via our website or direct communication, where appropriate.
-
Contact us
If you have any questions about this Privacy Policy or our privacy practices, please contact:
Privacy Officer
Elyséa Health Pty Ltd
Email: admin@elyseahealth.com.au
Phone: 08 7428 6266
Address: 266 Glen Osmond Rd, Fullarton, SA 5062
Thank you for trusting Elyséa Health with your care. We are dedicated to protecting your privacy while delivering compassionate, high-quality healthcare.