Privacy Policy
BONCENTRIC PRIVACY POLICY
Effective Date: 17 December 2013
Last Updated: 25 March 2025
Boncentric (ABN 60 167 068 653) is committed to protecting the privacy of your personal information. We understand the importance of your privacy and have prepared this statement to provide clarity and reassurance about how Boncentric carefully collects, safeguards, uses, updates, shares and manages the personal information you entrust to us.
Background
The Privacy Act 1988 (Privacy Act) is an Australian law which regulates the handling of personal information about individuals. Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.
The Privacy Act includes thirteen Australian Privacy Principles (APPs). The APPs provide a privacy protection framework that supports the rights and obligations of collecting, handling, holding, using, accessing and correcting personal information. These APPs complement Boncentric’s commitment to ensuring personal information is managed appropriately and transparently.
The kind of personal information we collect
Boncentric will collect personal information in order to fulfil its obligation to provide services to its patients. Such information will not be used or disclosed for any other purposes without your consent, except in exceptional cases when disclosure may be required by law or is necessary to protect the rights or property of Boncentric, or any member of the public, or to lessen a serious threat to a person’s health or safety.
The types of personal information we may collect include:
▪ personal identifying information such as name, sex, gender, date of birth;
▪ contact information such as telephone number, address and email address;
▪ employment information such as employer details, occupational history, hazard exposure history;
▪ health information including current and past medical history, information about your lifestyle, nutrition, fitness, psychological and social health as well as any other information necessary for providing healthcare services.
Boncentric does not allow the option of patients providing personal information anonymously as it would be impractical in providing personalised medical advice.
How we collect personal information
We collect personal information through various means, including:
▪ Directly from you during consultations, online forms or via phone, email or face-to-face interactions;
▪ From third parties, such as your employer, medical professionals or other health service providers with your consent;
▪ Through our website or database applications, including cookies and similar technologies.
Use and disclosure of information
Personal information will be used for the purpose of providing health services to patients (including referral follow-up and health coaching programs). We may disclose your personal information to:
▪ Healthcare professionals, specialists and other service providers involved in your care;
▪ Your employer, where required under workplace health and safety regulations;
▪ Regulatory bodies and government agencies, such as Resources Safety & Health Queensland (RSHQ) where legally required;
▪ Third-party service providers, such as IT, cloud storage or administrative support, under strict confidentiality obligations;
▪ Legal advisors where necessary.
Boncentric will not use any personal information in relation to direct marketing to a participant without that participant’s express consent. Boncentric will evaluate all unsolicited information it receives in order to decide whether it should be kept, acted upon, or destroyed.
Research
Pooling de-identified worker health data in accordance with Australia’s National Health and Medical Research Council (NHMRC) guidelines facilitates valuable insights into general and occupational health risks. This approach enhances understanding, supports early intervention, and promotes the health and wellbeing of workers while maintaining privacy and ethical standards.
Your de-identified data may be used by us or our affiliated parties in aggregate form for corporate reporting (minimum numbers apply), medical research, statistical analysis, and longitudinal health surveillance per NHMRC guidelines. However, if a future research project requires access to your identified data, we will seek your explicit consent before involving you.
Security
Boncentric takes all reasonable steps to protect your personal information from misuse, loss, or unauthorised access, modification or disclosure. We store your information securely and have a range of security controls in place to ensure that your information and documents are protected. All of our staff are trained on privacy and access to personal information is restricted to individuals properly authorised to do so.
We retain personal information only for as long as required under Australian health record retention laws, after which it is securely destroyed or de-identified.
Identifiers
We will not adopt as our own any identifiers that you may provide to us such as TFNs or Medicare numbers.
Overseas disclosure of personal information
In order to utilise cloud storage and IT servers that are located offshore, we may transfer personal information outside Australia in accordance with the Privacy Act. Where we do, we take reasonable steps to ensure that your information is given the same type of protection as it is afforded within Australia. This may be through satisfying ourselves that the overseas organisation has controls in place to comply with Australian privacy laws, ensuring that the overseas organisation is located in a country which has a similar privacy regime to Australia or through contractually or otherwise mandating the adequate management of the information.
By providing us with your personal information, you consent to us disclosing your personal information to entities located outside Australia for the sole purpose of utilising cloud storage and IT infrastructure. The only country to which this personal information will be transferred to is the USA.
Access to your personal information
You have a right to access your personal information, subject to exceptions allowed by law. Patients are encouraged to make this request in writing, and Boncentric will respond within a reasonable time.
Boncentric will take reasonable steps to correct personal information where they are satisfied they are not accurate or up to date. Patients may also request Boncentric corrects or updates their information, and again, such requests should be made in writing.
Note that we need not provide access to personal information in several types of situations, for example where a request is frivolous, or where to provide access would pose a threat to health or public safety, unreasonably interfere with another person’s privacy, or be a breach of the law. If we refuse access we will advise you of our reasons for doing so.
Complaints
We are committed to providing participants and other parties whose personal information we hold, a fair and reasonable system for the handling of their complaints. Any privacy concerns should be addressed in writing to:
Boncentric Complaints Officer
PO Box 122
New Farm QLD 4005
Email: complaints@boncentric.com.au
Boncentric will resolve the complaint in accordance with its complaints resolution procedure.
Variation
Boncentric reserves the right to make amendments to this statement at any time. A copy of this Privacy Policy will be available on our website with effective date clearly indicated, and will also be available on request. Participants acknowledge and agree to comply with this Privacy Policy as amended from time to time.
Further information
Boncentric welcomes your comments regarding this Privacy Policy. If you have any questions or would like further information, please contact the Boncentric Privacy Officer:
Boncentric Privacy Officer
PO Box 122
New Farm QLD 4005
Email: privacy@boncentric.com.au
By using our services, you agree to the collection, use, and disclosure of your personal information as outlined in this Privacy Policy.