Privacy Policy

WEBSITE PRIVACY POLICY
This Privacy Policy applies to all personal information collected by Drive & Thrive OT via the digital,
telephonic or written information located at Drive & Thrive OT.

What information do we collect?
The kind of Personal Information that we collect from you will depend on the information shared
with Drive &Thrive OT. The Personal Information that we collect and hold
about you may include:
• Medical History
• Personal and social history
• Functional History
• Date of Birth
• Contact details (email/ mobile/ home/business)
• Address
• Funding details
• Licensing details (if appropriate)

Types of information
The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal
Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an
an individual who is reasonably identifiable:
(i)whether the information or opinion is true or not, and
(ii) whether the information or opinion is recorded in a material form or not.
If the information does not disclose your identity or enable your identity to be ascertained, it will in most
cases will not be classified as “Personal Information” and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinions about
such things as an individual’s racial or ethnic origin, political opinions, membership in a political
association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record, or health information.

Sensitive Information will be used by us only:

• for the primary purpose for which it was obtained;
• for a secondary purpose that is directly related to the primary purpose; and
• with your consent or where required or authorised by law.

How we collect your Personal Information:
• We may collect Personal Information from you whenever you complete relevant forms
• (referral form, service agreements, etc) or provide it to us in any other way.
• We may also collect cookies from your computer, which enable us to tell when you use the
• Website and also to help customise your Website experience. As a general rule, however,
• it is not possible to identify you personally from our use of cookies.
We generally don’t collect Sensitive Information, but when we do, we will comply with the preceding paragraph.
Where reasonable and practicable, we collect your personal information from you only. However, sometimes we may be given information from a third party; in cases like this, we will take steps to make you aware of the information that was provided by a third party.

Purpose of collection
We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about developments in our business.
We customarily only disclose Personal Information to our service providers who assist us in operating the Website. Your Personal Information may also be exposed occasionally to maintenance and support personnel acting in the normal course of their duties.
By using our Website, you consent to receiving direct marketing material. We will only use your Personal Information for this purpose if we have collected such information directly from you, and if it is material of a type that you would reasonably expect to receive from us.
We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe button link.

Security, Access and Correction
We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. When we no longer require your Personal Information for the purpose for which we obtained it, we will take reasonable steps to destroy and anonymise or de-identify it. Most of the Personal Information that are stored in our client files and records will be kept for a maximum of 7 years to fulfil our record-keeping obligations.

The Australian Privacy Principles:
• permit you to obtain access to the Personal Information we hold about you in
certain circumstances (Australian Privacy Principle 12); and
• allow you to correct inaccurate Personal Information subject to certain exceptions
(Australian Privacy Principle 13).
• Where you would like to obtain such access, please contact us in writing on the contact details set out at the bottom of this privacy policy.

Complaint procedure
If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us at the contact details set out at the bottom of this policy. All complaints will be considered, and we may seek further information from you to clarify your concerns. If we agree that your complaint is well-founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may
refer the matter to the Office of the Australian Information Commissioner.

Documentation and Response Timeline
We will acknowledge receipt of your complaint within 5 business days and provide you with a reference number. Our privacy team will investigate your complaint and maintain detailed records of all communications and findings. We aim to resolve all privacy complaints within 14 business days. If additional time is required, we will notify you in writing. All complaint documentation will
be retained for 12 months following resolution. If the matter requires escalation, our Privacy Officer will personally review your case within 7-14 business days of the escalation request.

How to contact us about privacy
If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us through [email protected].