1. Introduction
Medilinks Connect is committed to protecting your personal information and ensuring compliance with all applicable Commonwealth, State, and Territory privacy legislation and standards, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) (together, the Privacy Laws). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal and health-related information.

2. Collection of Personal Information
We collect personal information such as your name, contact details, date of birth, medical history, and health-related information, including Department of Veterans' Affairs (DVA) and Australian Defence Force (ADF) details if applicable. This information is necessary to provide healthcare services, meet legal obligations, and improve our service delivery.

3. Purpose of Collection and Consent
By using our services and completing the patient intake form, you consent to the collection and use of your information for healthcare provision, administrative purposes such as billing and record management, compliance with legal and regulatory obligations, and quality improvement initiatives. We will not collect or use sensitive health information without your explicit consent unless required or permitted by law.

4. Use and Disclosure of Information
Your personal information is used strictly for the purposes outlined in this policy. It may be shared with healthcare professionals involved in your care, approved third-party service providers assisting with service delivery such as IT and billing, and regulatory bodies where legally required. Medilinks Connect does not sell or rent personal information, and no mobile data will be shared for marketing or promotional purposes.

5. Data Storage and Localisation
All personal and health-related data collected by Medilinks Connect is stored and processed on secure servers located in Australia. We do not transfer, transmit, store, or disclose any personal information or Commonwealth (including Defence) data outside Australia, nor do we allow access to such data from outside Australia, unless required by law or with prior written consent from the relevant authority. We ensure that all data handling practices comply with applicable privacy regulations, including those governing the protection of Defence-related and Commonwealth data, and align with all relevant Privacy Laws.

6. Data Security and Retention
We take reasonable steps to protect your information from unauthorised access, misuse, or disclosure. All personal data is securely stored and retained for the required period under Australian healthcare regulations, after which it is securely destroyed or de-identified.

7. Accessing and Correcting Your Information
You have the right to access your personal records and request corrections to any inaccurate or outdated information. To make a request, please contact us at [insert contact details], and we will respond within a reasonable timeframe in accordance with the Privacy Act 1988.

8. Data Breaches and Notification
Under the Notifiable Data Breaches (NDB) scheme, we are required to notify affected individuals and the Office of the Australian Information Commissioner (OAIC) if a data breach is likely to result in serious harm.

9. Complaints and Contact Information
If you believe we have breached this Privacy Policy or the Privacy Act, you can submit a complaint by contacting us at care@medilinks.com.au or (07) 3707 1683. We will investigate and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the OAIC via www.oaic.gov.au.

10. Cookies and Tracking Technologies
Our website may use cookies or tracking technologies to enhance user experience. You can manage your preferences for these technologies through your browser settings.

11. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be posted on our website, and continued use of our services will constitute acceptance of the updated policy.