1. About this Policy

It is important to InfraPsych that your privacy is protected whilst using the web site. InfraPysch believes that privacy is necessary to ensure that you feel comfortable whilst using the site.

However, if you have been issued with a logon and password, you will be accessing the login section of the site. This contains information that is related to your specific condition and circumstances, and we need to tailor this information by identifying you in our systems. In order for us to assist you, we will hold personal information - including health-related information - about you, including your health and medical records.

We will act to protect this information for the reasons stated above. We are, in addition, bound by the National Privacy Principles in the Privacy Act 1988 (Cth). Further details concerning your privacy rights can be found at:

"The Office of the Federal Commissioner of Privacy" web site at http://www.privacy.gov.au

2. Personal and Health-Related Information

Personal information is information and/or data that allows us to identify you. It includes your name, age, gender, date of birth and residential address. Health-related information is information or data about your present and past diagnoses, prescriptions and medical history.

InfraPsych values your trust and aims to help you manage your health through our services to you via this site. The protection of this personal and health-related information is a vital part of this relationship.

3. Collection

InfraPsych collects personally identifiable information when you register to become a user of Recovery Road. We may also receive personally identifiable information from other sources, which include:

• your general practitioner, local clinician, specialist,
• your government department, health management organisation,
• your pharmacy, hospital,
• your caregiver or guardian,
• your health insurer, or
• financial or credit organisations,

for the uses specified in this privacy policy, and for the payment of these services.
The collection of this information will usually be pre-authorised by you in one way or another.
If you have been issued with logon and password, you will be accessing the section of our site for more information that is related to your specific condition and circumstances, and we need to tailor this information by identifying you in our systems. In order for InfraPsych to assist you, we will collect and store personal information, including health-related information, about you, including:

• your contact details (including emergency contact details)
• your medications,
• details of any allergies, or special instructions relating to your care,
• details of your condition, immunisations, medical history,
• details of your treatment course, health risk assessment,
• your doctor's, specialist's and other health carer's contact details,
• your caregiver's or guardian's details,
• your pharmacy, hospital details,
• information which you enter into this web site
• emails sent by you or to you in relation to this web site.

4. Use and Disclosure

InfraPsych uses your information for four general purposes, to:

• customise the content you use to assist in your recovery,
• fulfil your requests for certain products or services,
• send you reminders to complete various sessions and intake prescribed medications, and
• accumulate aggregate (non personal) data for medical research purposes.

In general, you will be able to view all the information that InfraPsych holds concerning you - however, there are some exceptions to this. For example, where providing access would pose a serious threat to the life or health of any individual. For further details on access, refer to the section on Access and Correction below.
The information will be divided and stored in three broad categories:

Category 1. Hospital Information
Category 2. Doctor Information
Category 3. Your Information

For precise details of who may view and update the information that InfraPsych holds concerning you, in each of the categories, please refer to your List of Authorised Viewers Consent Form which you completed before gaining your login.

In general, only you and the health care providers that you specify will be allowed to view the information contained in the above three categories - there are exceptions to this.

Category 1. Hospital Information
In general, only the Hospital health care providers will be allowed to enter information into this category.

Category 2: Doctor Information
In general, only your doctor, specialist or counsellors will be allowed to enter information into this category.

Category 3: Your Information

You will be able to enter and change information in Category 3. You will have the ability to change your personal information; your prescriptions, your medical history and other health records and you can opt to turn on or off our reminder service to you. Each time you change this information, it is updated securely on our systems.

You may request suspension of your logon to at any time. You enter in your password twice (to confirm) and terminate or suspend your logon. For historical purposes, we may keep some information in our archival systems.

If appropriate, in certain circumstances, your carer or guardian will be granted access to your login at , and will be able to view everything that you are able to view. Your carer or guardian will also be able to enter and change information in Category 3: Your Information, on your behalf.

In general, InfraPsych will keep your personal information confidential, and only use and disclose it in accordance with your authority - there are some exceptions to this, which are specified below. We will not sell or rent your personal or personal health-related information to anyone.

5. Disclosures to other organisations

The types of organisations which InfraPsych usually discloses your personal information to include:

• InfraPsych's Associates - which means a holding company, subsidiary or subsidiary of a holding company, and any company in which InfraPsych has a controlling interest or shareholding.
• Web site Service Providers / Developers - which means the web site host and service providers / developers, system administrators, software developers, hardware and software suppliers and other related service providers who may access your information as part of providing services to InfraPsych.
• Aggregate Information to Third Parties - which means any other information, statistical and non-identifiable, may be used and/or distributed to third parties to develop and enhance InfraPsych's services and to contribute to research on medical treatments. We analyse what our users and customers like and don't like about the content and services on our web site so that we can constantly improve them for your use.
• List of Authorised Viewers Consent Form - which means the people or organisations as specified in this form which you signed before being given a login.

all of whom will be required to treat your information in accordance with the National Privacy Principles.

At any time in the future, you may withdraw your consent, or "opt out" of any of the above uses and disclosures of your personal information (except when legal obligations must be met, or as indicated below under "Exceptions - use and disclosure without your consent")

6. Exceptions - Use and Disclosure Without Your Consent

In certain circumstances, InfraPsych may use and disclose your information without your consent. These circumstances include:

• if the use or disclosure is required or authorised by law,
• circumstances which override the duty of confidentiality, or
• in accordance with allowable uses and disclosures under the National Privacy Principles (NPP).

For example, in an emergency medical situation we will allow an emergency logon to be activated in order to access your medical record and supply this information to the necessary health authorities or your next-of-kin.

Further examples of circumstances in which InfraPsych may use and disclosure your information without your consent include:

• information concerning child abuse,
• information concerning infectious diseases,
• where there is a serious and imminent threat to an individual's life, health or safety,
• to caregivers or guardians in certain circumstances (refer to NPP 2.4),
• when it is in the public interest, or a serious threat to public health or public safety,
• health information and the use or disclosure is necessary for research, or the complication or analysis of statistics, relevant to public health or public safety (refer to NPP 2.1(d)),
• information concerning unlawful activity (refer to NPP 2.1(f)), or
• which is reasonably necessary for certain purposes for law enforcement bodies (refer to NPP 2.1(h)).

7. Data Quality

InfraPsych appreciates that it is important to keep your information accurate, complete and up to date - and takes reasonable steps to ensure that it is up to date.

8. Data Security

All personal information that is received, used, or disclosed in connection with your login is encrypted. InfraPsych also uses a firewall. To find out more about the data encryption, and the firewall which is used at this web site, click here.

Only a limited number of InfraPsych's employees are authorised to access your personal information. InfraPsych requires all of its employee's to comply with this privacy policy and any other internal privacy practices and procedures which we may have in place from time to time.

The servers are located in a physically secure area, which requires authorised access to enter. InfraPsych regularly backs up the data to protect against loss or damage, and for disaster recovery. The backup media is stored at a separate secure storage location.

InfraPsych regularly updates its security and encryption technologies, however, no data transmission over the internet is 100% secure. InfraPsych cannot ensure the security of information that you transmit to us, and you do so at your own risk. Once we receive your personal information, we will place your personal information on our highly secured system.

Also, there is always some risk that thieves, hackers or unauthorised users will find a way to gain unauthorised access to our systems.

To protect the security of your personal information we have put in place:

• an information security policy,
• allocated information security responsibilities,
• have a business continuity management plan.

You should protect against unauthorised access to your personal information by:

• using a password on your computer, and
• storing your Recovery Road login details in a secure place

9. Access and correction

You may request access to the personal information that InfraPsych holds about you, and if you believe that it is not correct, you may ask for it to be corrected.

There is no fee for requesting access, although we may charge a reasonable fee for the cost of processing your request.

Access will be denied in some circumstances

In certain circumstances, access may be denied, these circumstances include where:

• providing access would pose a serious threat to the life or health of any individual,
• providing access would have an unreasonable impact on the privacy of others,
• the request is frivolous or vexatious,
• access relates to existing or anticipated legal proceedings,
• denying access is required or authorised under law,
• providing access would be unlawful,
• access may be denied in accordance with the National Privacy Principles, and in particular with NPP 6.

If InfraPsych denies you access for any reason, or refuses to correct your personal information, we will provide you with the reasons why you have been refused access, or the right to correct your personal information.

How you can gain access

If you are able to establish that information that InfraPsych holds about you is not accurate, complete and up to date, then InfraPsych will take reasonable steps to correct the information so that it is accurate, complete and up to date.

To help protect the confidentiality of your information, before gaining access to your information you will be required to complete an Request_For_Access_Form, and provide various forms of identification such as your driver's licence, and a form of photographic identification.

If you require access to personal information other than your own, then you must provide proof of your relationship to that other person (for example, child or dependent), and of your right to access that information.

InfraPsych's contact details are listed below under "Contact us".

Not possible to correct all records
InfraPsych maintains back-ups and of all your personal information to protect against loss or damage, and for disaster recovery purposes.

Part of your personal information may also be stored locally on your doctors' or health service providers computer systems.

In some cases it will not be possible, or reasonably feasible to correct every record of personal information that InfraPsych holds about you.

Identifiers

Identifiers are numbers assigned by an organisation to an individual to identify the individual for the purposes of the organisation's operations. There are restrictions on how Commonwealth government identifiers, such as the Medicare number can be adopted, used or disclosed.
Infrapsych will adopt, use or disclose Commonwealth government identifiers as required or authorised by law.

Infrapsych will not adopt these identifiers for our own record keeping systems.

For assistance, you could refer to the recently released "Information Sheet 15 - National Privacy Principle 7 - Identifiers in the Health Sector (May 2002)" from the Federal Privacy Commissioner:
http://www.privacy.gov.au/

10. Transfers of Data to Foreign Countries

Infrapsych transfers personal information to health organisations in the following circumstances:

with your prior written authority for the following purposes, or as required or authorised by law.

11. Data storage time

InfraPsych will keep store your personal information for a minimum of 7 years. If you are under 21, we will store your personal information for a minimum of 7 after you reach the age of 21 years.

12. Emails

InfraPsych will track consultancy-related e-mails you send for quality management and store answers to various questions. InfraPsych will preserve the content of any email you send us if we believe that we have a legal requirement to do so.

Emails may be lost or incorrectly sent to the wrong address. You should use a return receipt on emails which you send to confirm that they have been received.

The content of your email may be monitored for quality control, systems administration or legal compliance purposes.

13. Cookies

InfraPsych tracks traffic patterns throughout the site. This site will investigate how you work in this site by tracking how you move through various screens and will note the web site from which you came, if applicable.

We do this to help us improve the quality of the service to you.

We may also use a feature of your browser called a "cookie" to assign a "User ID." Cookies, by themselves, cannot be used to find out your identity or the identities' of any of our users, it only identifies your computer to our systems when you visit our site.

If you do not wish to receive any cookies you may set your browser to refuse cookies. This may mean you will not be able to take full advantage of the services at this site.

14. Children's Privacy

This site is not intended or designed for the use of children under the age of 16.

15. Business transfer

If InfraPsych transfers it's business, part of it's business or an asset (such as a web site) to another party, then the new party will be required to comply with this Privacy Policy.

16. Links to Other Web Sites

This site may contain links to other health web sites and other general web sites for reference (Linked Sites). InfraPsych will not be responsible for the privacy practices or content of these Linked Sites. You should read the privacy policy on the Linked Site to find out how the Linked Sites collect and use your personal information.

17. Compliance and links

InfraPsych has used its best endeavours to ensure that it complies with the following standards. Click on the link to read more about it.

Privacy Act 1988 (Cth)2. Personal and Health-Related Information

Personal information is information and/or data that allows us to identify you. It includes your name, age, gender, date of birth and residential address. Health-related information is information or data

18. These Terms May Change

These terms are subject to change at any time without notice. You should regularly check both this Privacy Policy and the Terms of Use / Disclaimer, as the internet and privacy are areas of law which are rapidly developing.

This privacy policy was last updated on 1st July 2002.

InfraPsych will notify you of any substantial changes to this privacy policy, by posting a prominent announcement in our home or logon page for a period of 30 days.

19. Acceptance

You accept that your use of this site indicates your acceptance of this Privacy Policy and our Terms of Use / Disclaimer.