Privacy Policy

Last updated: July 2026

1. About this policy

Arch Day Surgery ("Arch Day Surgery", "we", "us", "our") is committed to protecting the privacy of the personal information we hold, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

As a health service provider, Arch Day Surgery is bound by the Privacy Act and the APPs regardless of our size or annual turnover. Health information is treated by law as "sensitive information" and is given a higher level of protection than other personal information.

This policy explains what personal information we collect, how we collect, hold, use and disclose it, and how you can access or correct your information or make a complaint.

2. The information we collect

Depending on your interaction with us, we may collect:

• Contact details: name, address, phone number, email address
• Appointment and booking information
• Health and medical information relevant to your procedure, including information provided by you, your referring doctor or specialist, your anaesthetist, and other treating practitioners
• Medicare, private health fund and billing details
• Next of kin / emergency contact details
• Any information you provide to us through our website enquiry form, by phone, or in person

We do not knowingly collect more personal information than is reasonably necessary for the purposes described in this policy.

3. How we collect information

We generally collect personal information directly from you, or from your referring doctor, specialist, or other treating health practitioners involved in your care. We may also collect information from your private health fund or Medicare for billing purposes.

Our website includes a contact enquiry form. Information you submit through this form (your name, phone number, email address and message) is transmitted to a third-party form-processing service, which forwards it to us by email. That service may process and store information on servers located outside Australia - see "Overseas disclosure" below.

4. How we use and disclose your information

We collect, hold, use and disclose your personal information for purposes including:

• Providing and coordinating your day surgery care and admission
• Communicating with your referring doctor, specialist, anaesthetist and other treating practitioners involved in your care
• Billing and claims processing with Medicare and private health funds
• Complying with our legal, clinical governance and accreditation obligations, including under the National Safety and Quality Health Service (NSQHS) Standards
• Responding to enquiries submitted through our website or by phone
• Internal record-keeping, quality improvement and complaint handling

We do not sell your personal information, and we do not use or disclose your health information for direct marketing without your consent.

5. Sensitive and health information

Health information is sensitive information under the Privacy Act. We only collect health information with your consent (or as otherwise permitted by law, such as where necessary to provide you with a health service), and we only use or disclose it for the purpose it was collected, a directly related secondary purpose you would reasonably expect, or as required or authorised by law.

6. Overseas disclosure

Some of the online services we use to operate our website - including our website enquiry form processor - may store or process information on servers located overseas, including in the United States. We take reasonable steps to only use reputable providers, but we are not always able to control the privacy practices of overseas recipients. By submitting information through our website enquiry form, you consent to this disclosure.

We do not otherwise routinely disclose personal or health information to recipients located overseas.

7. Data security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure. Clinical records are held in accordance with applicable health records retention requirements. When information is no longer required, we take reasonable steps to destroy or de-identify it.

8. Access and correction

You may request access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Please contact us using the details below. We may need to verify your identity before providing access. In some circumstances permitted by law we may not be able to give you full access to your information, and if so we will explain why.

9. Complaints

If you believe we have breached the Australian Privacy Principles, please contact us first using the details below so we can investigate. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992

10. Cookies and website use

Our website includes an embedded Google Maps widget, which may set cookies or collect information in accordance with Google's own privacy policy when the map is loaded. We do not currently use website analytics or advertising cookies. If this changes, we will update this policy.

11. Children's information

Some of the procedures we support relate to paediatric (children's) care. Where we collect information about a child, this is generally provided to us by a parent, guardian or referring practitioner, and is handled with the same care as any other health information under this policy.

12. Changes to this policy

We may update this policy from time to time. The current version will always be available on our website.

13. Contact us