Seeds Occupational Therapy is the business name of Nishadip K Bal (ABN 89 367 785 504), a sole trader (“Seeds”, “we”, “us”, “our”). We provide paediatric occupational therapy and Functional Capacity Assessments, and we're committed to handling your information openly and securely.
This notice explains what we collect, how we use and store it, who we share it with, and how you can access it or make a complaint. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Because we provide health services, we're bound by these laws regardless of our size. Depending on where you live, state health records laws may also apply, including the Health Records Act 2001 (Vic).
The information we collect
Most of what we hold is information you give us, or that's provided on your behalf by a parent, carer, guardian, support coordinator, plan manager or referrer. This includes your name, date of birth, contact details, NDIS participant number, plan details, and the people involved in your care.
Because we provide health services, much of what we collect is sensitive information, including health and disability information: medical history, diagnoses, assessment results, reports from other providers, therapy notes, and how a person manages everyday activities. For child clients we also collect information about the child's development, schooling and home environment, provided by parents and carers.
How we collect it
We collect information directly from you wherever we can: through our intake process, by email or phone, and during appointments. As part of setting up your assessment, you complete our intake questionnaire as a PDF and upload it, along with any supporting documents, into a secure folder in our Google Drive (Google Workspace).
Sometimes we collect information from others, with your consent or where the law allows: from referrers including GPs, from the NDIS or your plan manager, from other treating practitioners, and from family members or carers involved in your care.
Why we collect and use it
We use your information to provide occupational therapy and Functional Capacity Assessments, to communicate with you and your care team, to write and deliver reports including reports for the NDIS, to arrange appointments and invoicing, and to meet our legal, professional, insurance and funding obligations. We only use it for the purpose we collected it for, for a directly related purpose you'd reasonably expect, where you've consented, or where the law requires or allows it.
Consent for sensitive information
Health and disability information is sensitive information under the Privacy Act. We collect it with your consent, given when you sign. Where the client is a child, consent is given by a parent or guardian. You can withdraw consent at any time by contacting us, though this may affect our ability to provide the service.
Who we share it with
We do not sell your information. We share it only where it's needed to provide the service or where the law requires it: the people you've asked us to involve; the NDIS, your plan manager or support coordinator for funded services; other treating practitioners and referrers with your consent; our professional advisors, insurers and auditors; and government bodies or courts where required by law.
We also use trusted service providers to run the practice, including cloud file storage (Google), scheduling, accounting (Xero) and communications. They may access your information only to perform their service for us, and are required to protect it.
Storage and overseas disclosure. We store your information electronically using reputable cloud services, protected with access controls and encryption in transit. Some of these providers, including our file storage (Google) and parts of our website and processing infrastructure, store or process data on servers located outside Australia, including in the United States. This means your information, including health information, may be stored or processed overseas. We take reasonable steps to make sure overseas providers protect your information to a standard consistent with the Australian Privacy Principles. Once information is held overseas, it may also be subject to the laws of that country.
Keeping your information secure
We take reasonable steps to protect your information from misuse, loss and unauthorised access, including restricted access to files, secure passwords and two-factor authentication, and encryption in transit. No system is completely secure. If a data breach is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
How long we keep it
We keep health records for as long as the law and our professional obligations require. For adult records this is generally at least seven years from the last occasion of service. For a child, we generally keep records until the person reaches 25 years of age, or longer where required. After that, we securely destroy or de-identify the information.
Accessing and correcting your information
You can ask to see the information we hold about you, and ask us to correct it if it's wrong, out of date or incomplete. Contact us using the details below and we'll respond within a reasonable time. In some cases the law allows us to refuse access; if we do, we'll explain why in writing.
Children's privacy
Where a client is a child, we deal with the child's parent or guardian, who gives consent and exercises these rights on the child's behalf, unless the child is mature enough to make their own decisions and it's appropriate for them to do so.
Making a complaint
If you're concerned about how we've handled your information, please contact us first. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992). Depending on where you live, you may also be able to complain to a state health complaints body, such as the Health Complaints Commissioner in Victoria.
Contact us about your privacy: Seeds Occupational Therapy (Nishadip K Bal, ABN 89 367 785 504) · Privacy contact: Nisha Bal · nisha@seedsoccupationaltherapy.com.au · (03) 7056 9242