We collect the information needed to provide and coordinate your care — things like your contact details, health history, care preferences, and the details of family members or supporters you’d like involved.

We only use your information to deliver and coordinate your care. We don’t use it for anything else, and we never sell it.

Your information is stored securely and only accessed by staff who need it to support your care. If we ever experience a data breach that could seriously affect you, we’ll notify you and the Office of the Australian Information Commissioner (OAIC), as required by law.

Only the people directly involved in your care — such as your treating doctors, allied health professionals, or My Aged Care — and only when necessary. We’ll never share your information beyond this without your consent, unless the law requires it.

You can ask to see the information we hold about you, request a correction, or ask us questions about how it’s used — at any time, free of charge.

Tell us directly and we’ll work to fix it. You can also contact the Office of the Australian Information Commissioner (OAIC) if you’d prefer an independent review.

This policy is written to meet our obligations under:

• Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) — the core national privacy law, which applies to us regardless of size because we provide a health service.
• Aged Care Act 2024 (Cth) — sets specific rules for how registered aged care providers like SilverSprig must handle “protected information” about the people in our care.
• Notifiable Data Breaches scheme (part of the Privacy Act) — requires us to notify you and the OAIC if a data breach is likely to cause you serious harm.
• My Health Records Act 2012 (Cth) and Healthcare Identifiers Act 2010 (Cth) — apply if your information is connected to the My Health Record system or a healthcare identifier.