Privacy Policy

Vine & Vitality
Nurse Practitioner-led healthcare
Nuriootpa, South Australia

Effective date: October 2026

Vine & Vitality respects your privacy and is committed to protecting your personal and health information.

This Privacy Policy explains how Vine & Vitality collects, uses, stores and discloses personal and health information when you make an enquiry, complete a booking or intake form, attend an in-person or telehealth consultation, pay for a service, or otherwise receive healthcare from Vine & Vitality.

Vine & Vitality handles personal and health information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable legal and professional requirements.

What information we collect

We may collect personal and health information needed to provide safe and appropriate healthcare.

This may include:

• your name, date of birth, address and contact details
• Medicare and healthcare identifier information
• emergency contact details
• billing and payment information
• medical and health history
• medications, allergies and previous treatments
• symptoms, diagnoses, assessments and clinical notes
• pathology, imaging and other investigation results
• referrals, prescriptions, letters and reports
• appointment, recall and follow-up information
• information relating to reproductive, sexual, hormonal, menopause, mental, cardiovascular, kidney, metabolic, preventative and general health
• information you provide through booking and intake forms, email, SMS, telephone, telehealth or consultations.

We only collect information that is reasonably necessary to provide healthcare, administer the practice, process billing and Medicare claims, manage follow-up and meet legal, professional and regulatory requirements.2> How we collect your information

We usually collect information directly from you when you:

• make an appointment or enquiry
• complete an intake or consent form
• attend an in-person or telehealth consultation
• communicate with Vine & Vitality by telephone, email, SMS or secure electronic communication
• pay for a service
• request a prescription, referral, investigation, letter or other healthcare service.

Where clinically appropriate, with your consent or where otherwise permitted by law, information may also be obtained from:

• your GP or other treating healthcare practitioners
• specialists and allied health practitioners
• pathology and diagnostic imaging providers
• hospitals and other healthcare services
• pharmacies
• Medicare or Services Australia
• My Health Record
• a parent, guardian, carer or authorised representative where relevant.

2.Why we use your information

We use personal and health information to provide healthcare and operate Vine & Vitality safely and effectively.

This may include:

• assessing your health concerns
• providing consultations and clinical care
• developing and reviewing treatment or management plans
• preparing prescriptions, referrals, letters or reports where clinically appropriate
• requesting and reviewing pathology, imaging and other investigations
• communicating with healthcare practitioners involved in your care
• managing investigation results, recalls and clinical follow-up
• booking, confirming, rescheduling or cancelling appointments
• sending appointment reminders and service-related communications
• billing, payment processing and Medicare claiming
• maintaining accurate clinical records
• quality assurance and practice improvement
• meeting legal, professional, regulatory and insurance requirements
• responding to complaints, incidents or privacy concerns.

Clinical care is provided according to professional clinical judgement. A booking, payment or request does not guarantee that a particular prescription, referral, investigation or treatment will be clinically appropriate or provided.

How we contact you

Vine & Vitality may contact you by telephone, SMS, email, secure electronic messaging, telehealth platform or another appropriate communication method.

We may contact you about appointments, clinical follow-up, investigation results, recalls and reminders, referrals, prescriptions, billing and Medicare claims, forms and administrative requirements, and important practice or service information.

Please let us know if your contact details change or if you have particular communication requirements.

While reasonable steps are taken to communicate securely, ordinary email and SMS may not be completely secure. Please avoid sending highly sensitive clinical information by ordinary email or SMS where a more secure method is available.

Disclosure of your information

We may disclose information where reasonably necessary for your healthcare, operation of the practice, billing, or where permitted or required by law.

This may include disclosure to your GP and other healthcare practitioners involved in your care; specialists and allied health practitioners; pathology and diagnostic imaging providers; hospitals; pharmacies; Medicare and Services Australia; My Health Record where clinically appropriate; clinical, communication, payment and technology service providers; insurers, professional advisers, regulators or government agencies where required or permitted by law; and an authorised representative where appropriate.

Vine & Vitality does not sell patient personal or health information.

Information will not ordinarily be disclosed to family members, employers or unrelated third parties without your consent unless disclosure is required or permitted by law.

Clinical and practice management systems

Vine & Vitality uses Halaxy as its electronic clinical and practice management system.

Halaxy may be used for appointments and online bookings, intake and consent forms, clinical records, invoicing and payment processing, Medicare claiming, reminders and patient communications.

Vine & Vitality also uses other healthcare systems and service providers where necessary for electronic prescribing, pathology and imaging, secure healthcare messaging, referrals and other healthcare functions.

These providers operate under their own privacy and security arrangements.

Software platforms and overseas processing

Vine & Vitality uses digital systems and service providers to support healthcare delivery and practice administration.

Some third-party technology providers may process, store or temporarily access information outside Australia under their own privacy and security arrangements.

Vine & Vitality takes reasonable steps to use reputable service providers and to manage personal and health information consistently with applicable Australian privacy requirements.

AI-assisted clinical documentation

Vine & Vitality may use approved AI-assisted transcription or clinical documentation technology to assist with preparing consultation notes.

Where this technology is used, it supports clinical documentation only. Clinical decisions remain the responsibility of the Nurse Practitioner.

Where consent is required or appropriate, you will be informed before the technology is used.

You may decline AI-assisted transcription or documentation. This will not prevent you from receiving healthcare from Vine & Vitality.

My Health Record

Where clinically appropriate and permitted, Vine & Vitality may access information contained in your My Health Record or upload relevant healthcare information to it.

You can manage access and privacy controls for your My Health Record through the Australian Government My Health Record system.

Please discuss any concerns about My Health Record with your Nurse Practitioner.

Storage and security of your information

Vine & Vitality takes reasonable steps to protect personal and health information from misuse, interference, loss, unauthorised access, modification or disclosure.

Information is primarily maintained within secure electronic clinical and practice management systems.

Security measures may include:

• password and access controls
• multi-factor authentication where available
• secure devices and appropriate device access controls
• reputable clinical and practice management systems
• safeguards for electronic communications and systems used to access patient information
• limiting access to information to those who require it for legitimate clinical, administrative, billing, referral, results, safety, legal or operational purposes.

Health records are retained in accordance with applicable legal, professional and clinical record-keeping requirements and securely destroyed or de-identified when they are no longer required to be retained.

If a data breach occurs, Vine & Vitality will assess and respond to it in accordance with applicable privacy and data breach notification requirements.

Accessing or correcting your information

You may request access to personal or health information held about you or ask for information you believe is inaccurate, incomplete or out of date to be corrected.

We may need to verify your identity before providing access to information.

In some circumstances, access may be refused or limited where permitted by law. Where appropriate and lawful, we will explain the reason.

Requests can be made using the contact details below.

Mandatory reporting and other legal obligations

There are circumstances where Vine & Vitality may be required or permitted by law to disclose information without your consent.

These may include:

• circumstances involving a serious threat to the life, health or safety of an individual or to public health or safety, where disclosure is permitted by law
• child safety and mandatory reporting requirements
• notification of certain diseases or public health matters
• court orders, subpoenas or other lawful requirements
• Medicare or statutory reporting requirements
• professional or regulatory reporting obligations.

Where possible and appropriate, disclosure will be limited to information reasonably necessary for the relevant purpose.

Website information

When you visit the Vine & Vitality website, limited technical information may be collected by the website platform, such as information about your browser, device and use of the website.

Cookies or similar technologies may be used for website functionality and analytics.

Please do not submit sensitive clinical information through a general website enquiry or contact form unless the form is specifically intended for that purpose.

Online appointment bookings and patient information are managed through Vine & Vitality's designated booking and practice management systems.

Payments

Payment and card information provided electronically may be processed through secure payment services associated with Vine & Vitality's practice management or payment systems.

Vine & Vitality does not intentionally retain complete credit or debit card details outside the secure payment systems used by the practice.

Privacy complaints and concerns

If you have a concern about your privacy or how your personal or health information has been handled, please contact Vine & Vitality so the matter can be reviewed and addressed.

We will take privacy concerns seriously and aim to respond within a reasonable timeframe.

If you are not satisfied with the response, you may contact the Office of the Australian Information Commissioner (OAIC) or another relevant health complaints body.

Changes to this Privacy Policy

This Privacy Policy may be reviewed and updated from time to time to reflect changes to Vine & Vitality's services, systems, service providers or legal and professional requirements.

The current version will be available on the Vine & Vitality website.

Contact

Vine & Vitality
Nurse Practitioner-led healthcare
10 Second Street
Nuriootpa SA 5355

Email: hello@vineandvitality.com.au
Website: vineandvitality.com.au