2. Whistleblowers Policy
1. Policy statement
St Vincent’s Clinic (SVC) is committed to protecting the privacy of the personal information and sensitive information which it collects and holds. SVC includes Open Support and the St Vincent’s Clinic Foundation.
SVC must comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and other privacy laws [including the Privacy and Personal Information Protection Act 1998 (NSW)] which govern the way in which organisations (such as SVC) hold, use and disclose personal information (including your sensitive information).
health information is:
personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable:
sensitive information means:
3. Collection and use of personal information
3.1. Types of personal information collected by SVC
SVC will only collect information which is necessary to facilitate the provision to you of services by SVC or to appropriately manage, conduct and oversee SVC’s business. This may include (as applicable):
SVC collects information from you to facilitate the provision of health care services to you by or to enable you to participate in research studies. This includes collecting personal information such as your name, address, your health history, family history, past and current treatments lifestyle factors, and any other information which is necessary to assist the health care team in providing appropriate care, or our research team in conducting its research.
The individual doctors at SVC collect and hold their patients’ information. In some cases patients will provide information to SVC to facilitate their health care.
SVC collects information from you which is necessary to properly conduct, manage and oversee SVC’s business. This includes collecting personal information such as your name, address, professional experience, qualifications and past employers, and any other information which may be necessary to appropriately conduct, manage and oversee SVC’s business.
SVC collects information from you which is necessary to assess and engage job applicants. This includes collecting personal information such as your name, address, professional experience, qualifications, references and past employers, and any other information which is necessary to process your job application.
Where you have consented, SVC collects information from you for the purposes of fundraising for SVC including agreeing the terms of and managing any donations you agree to make. This includes collecting personal information such as your name and address.
3.2. How we collect personal information
We will usually collect your personal information directly from you, however sometimes we may need to collect information about you from third parties, such as:
3.3. How SVC uses your personal information
SVC only uses your personal information for the purpose for which it was collected by SVC (primary purpose), unless:
For example, SVC may use your personal information to:
3.4. Complete and accurate details
Where possible and practicable, you will have the option to deal with SVC on an anonymous basis or by using a pseudonym. However, if the personal information you provide us is incomplete or inaccurate, or you withhold personal information, we may not be able to provide the assistance or support you are seeking, or deal with you effectively.
4. Disclosing your personal information
SVC will confine its disclosure of your personal information to the primary purpose for which that information has been collected, or for a related secondary purpose. This includes when disclosure is necessary to help us manage, conduct and oversee SVC business, or for security reasons.
We may provide your personal information to:
4.2. Third party service providers
Where we engage third party service providers, we may disclose personal information to those service providers who may use, process and/or store that information overseas.
5. Data storage, quality and security
5.1. Data quality
SVC will take reasonable steps to ensure that your personal information which is collected, used or disclosed is accurate, complete and up to date.
All your personal information held by SVC is stored securely in either hard copy or electronic form.
5.3. Data security
SVC strives to ensure the security, integrity and privacy of personal information, and will take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. SVC reviews and updates (where necessary) its security measures in light of current technologies.
5.4. Online transfer of information
While SVC does all it can to protect the privacy of your personal information, no data transfer over the internet is 100% secure. When you share your personal information with SVC via an online process, it is at your own risk.
There are ways you can help maintain the privacy of your personal information, including:
A ‘cookie’ is a small data file placed on your machine or device which lets SVC identify and interact more effectively with your computer.
Cookies are industry standard and are used by most websites, including those operated by SVC. Cookies can facilitate a user’s ongoing access to and use of a website.
7. Links to other sites
SVC may provide links to third party websites. These linked sites may not be under our control and SVC is not responsible for the content or privacy practices employed by those websites. Before disclosing your personal information on any other website, we recommend that you carefully read the terms and conditions of use and privacy statement of the relevant website.
8. Accessing and amending your personal information
You have a right to access your personal information which SVC holds about you. If you make a request to access your personal information, we will ask you to verify your identity and specify the information you require.
You can also request an amendment to any of your personal information if you consider that it contains inaccurate information.
You can contact SVC about any privacy issues as follows:
St Vincent’s Clinic
438 Victoria Street
Darlinghurst NSW 2010
P: 8382 6405
While SVC aims to meet all requests for access to personal information, in a small number of cases and where permitted to do so by law, SVC may not give access or may do so only under conditions.
Subject to applicable laws, SVC may destroy records containing personal information when the record is no longer required by SVC.
If you have a complaint about SVC’s information handling practices or consider we have breached your privacy, you can lodge a complaint with:
2. Whistleblower Policy