Privacy Policy (Molescope Skin Cancer Clinic)

Introduction
Molescope Skin Cancer Clinic is committed to conducting best practices with regards to privacy and confidentiality. This includes complying with all applicable privacy laws with regards to how personal information (including but not limited to patient health information and medical records) is collected, used, stored, disclosed and destroyed. This is a summary version of our privacy policy. If you require the full current version, this can be downloaded from the link at the bottom of this page.

This summary outlines the ways in which personal information is handled by Molescope Skin Cancer Clinic and the rights/expectations individuals have with regards to the treatment of their personal/confidential information.

Applicable Legislation
This policy has been developed with regards to the following legislation and frameworks:
1. Privacy Act 1988 (Cth)
2. Australian Privacy Principles (APPs) as outlined in the Privacy Act 1988 (Cth)
3. Privacy and Other Legislation Amendment Act 2024

Scope of Policy
This policy primarily covers the handling of patient information by staff, doctors and other contractors associated with Molescope Skin Cancer Clinic. However, it also applies to any personal information handled by Molescope Skin Cancer Clinic, regardless of whether that person is a patient or whether the personal information is of a medical nature.

Handling of Patient Information
In the course of providing health care, Molescope Skin Cancer Clinic may handle personal information in the following ways:

• Information to allow assessment for health care
• Information with regards to health care provided from other care providers
• Information required for processing payment and/or Medicare
• Information to allow contact, such as phone numbers, e-mail and postal addresses
• Information collected by doctors during consultations, which may also include information on family history as provided by the patient
• Sharing information, where necessary and permitted by law, with other health care providers as part of an overall care plan
• Information required by policies and/or law to be collected and stored with regards to medical records
• Other collection, use, storage or disclosure of information as required and permitted by law

Handling of other Personal Information
In the course of conducting business, Molescope Skin Cancer Clinic may handle personal information not relating to the medical care of patients. For example, information required to be collected/stored with regards to employees, doctors or contractors.

Information used in Marketing
Any information collected for marketing purposes will be clearly outlined as such on an opt-in basis. As a default, patient contact information is not used for marketing communications unless specific consent has been given. Follow up communication to patients to arrange or alter their future appointments, or reminders about these appointments is not considered marketing in this respect. However, patients also have the option to opt-out of these communications. Contact from, or on behalf of, a doctor with regards to patient care (such as following up test reults or giving medical advice based on these results) may be necessary in some circumstances, even where patients have opted out of general communication. Patients may be contacted (where they have not opted out of general communications) to confirm details, including their preferecnes with regards to marketing communications.

Disclosure of Personal Information
There are occasions where personal information needs to be disclosed to third parties. For example, in the course of providing coordinated health care, information may need to be shared with your broader health care team. This is done with the consent of the patient and in accordance with Australian law. Information may also be shared with third-party contractors that are essential to the operation of the business. For example, finanical information may be shared with a bookkeeper and/or accountant in order to perform their role. Any information disclosed to third parties is specific to their function.

Personal information will not be disclosed to other individuals or organisations, or for purposes not outlined above unless:

• There is consent from the patient/individual
• There is a reasonable expectation that the patient/individual would desire and give consent for the information to be disclosed in the process of providing medical care
• The disclosure of the information (with or without consent) is required by law
• In emergency situations, where a patient/individual is not able to provide consent, but where that information is required to provide care. For example, providing information to emergency services that is relevant to them responding to the emergency

Please note that Molescope Skin Cancer Clinic and Mooroolbark Specialist Centre are part of Camslen Pty Ltd. Administration and reception are shared across both locations (ie. central phones/booking/software etc.) Any information handled across Camslen Pty Ltd is not considered as external sharing/disclosure of information.

Storage and Destruction of Confidential Information
Personal information may be stored in both digital and hardcopy format.

With regards to information stored digitally:

• Data is stored in line with Australian regulations with regards to digital storage of confidential medical information
• Access to data is password protected and only available to authorised users
• User-based access levels limit access where applicable to only those who need that data for the function of their role
• Storage media is securely erased and destroyed at end-of-life
• Policies with regards to the appropriate use of e-mail with regards to sensitive/confidential information are in place

With regards to information stored in hardcopy format:

• Hardcopy/printed documents containing personal/confidential information are kept in secure locations
• Hardcopy/printed documents are not taken off-site unless necessary
• Where hardcopy/printed documents are taken off-site, they are stored securely during transit
• Medical records are stored and subsequently destroyed in line with appropriate regualtions and requirements
• Hardcopy documents containing personal/confidential information are destroyed (ie. shredded) in line with relevant regulations

Rights of an Individual to Personal Information
Individuals have the right to information stored about them. For patients, this extends to information stored in their medical record. Individuals may also request changes to the information stored about them, or choose to remove consent for specific information to continue to be stored. Note that there are regulations with regards to the length of time certain information must be stored. In this case, the information may be archived rather than destroyed, until such time as it may legally be destroyed. Individauls may request that their personal information be released to a third party, such as a lawyer or other medical professional. There may be an administration fee for the collation of this information that will be made clear upon the request being received. Requests for release of information must be received in writing.

Website Use
When users visit our websites, information collected may include details such as:

• Type of device (ie. computer or phone)
• The version of web browser being used and OS (ie. Windows/Mac)
• The IP Address of the device
• The date and time of the visit
• The geographical location as reported by the ISP or VPN connection
• The pages viewed during a session
• A log of any documents downloaded

The accuracy of the information collected may depend on the security/privacy settings of the user. Some of the information may not be collected at all, and other information may be collected in isolation. For example, a log of downloads may be kept, but this may not necessarily link to a specific user.

Technical information collected from visitors to the website may be used by our web developers to evaluate the effectiveness and make improvements to the websites.

Website logs may be made available, where applicable and allowed/required by law, to law enforcement agencies. For example, when investigating an attempted cyber attack.

Relevant Links
Privacy Act 1988 (Cth)
Privacy and Other Legislation Amendment Act 2024
Australian Privacy Principles

Policy Details
Effective Date: October 2025
Review Date: July 2026
Copyright: This privacy policy has been prepared specifically for Molescope Skin Cancer Clinic

Disclaimer: The information contained on this page is a summary version of the full privacy policy as linked below. Every effort is taken to ensure that the information in this summary accurately reflects the full policy. However, should there be differences or ambiguity between the two documents, the more comprehensive information in the full policy should take precedence over this summary.

Privacy Officer: Any comments with regards to this privacy policy can be directed to privacy@camslen.com.au or via the other contact methods on the website.


Privacy Policy (PDF)