Branchout Wellness Privacy, Data Handling and Information Sharing Consent

B. What information we collect

We may collect personal information and sensitive health information, including medical history, consultation notes, prescriptions, diagnostic results, consent forms, identity verification information, and communications necessary to provide care. We aim to collect only what is necessary for clinical and operational purposes.

C. Purposes of collection, use and disclosure

Your information may be used and disclosed to:

D. Specific disclosures that may be required for medicinal cannabis care

Depending on your clinical circumstances and legal obligations, information may be disclosed to relevant government systems or regulators. Examples include (but are not limited to) medicinal cannabis access pathway documentation and adverse event reporting.

E. My Health Record (optional)

Participation in My Health Record is optional. If you consent, we may access and/or upload relevant clinical documents to My Health Record as part of your care. You may set access controls, view access logs, or opt out of My Health Record entirely through the My Health Record system.

F. Data storage, security, and access

We store records in a secure electronic medical record (EMR) environment with access controls, audit logging, and staff training. Access is restricted to authorised personnel on a need-to-know basis.

G. Overseas disclosures (cross-border)

If any service providers (e.g., technology vendors) store or process information outside Australia, we will take reasonable steps to ensure that overseas recipients handle information in a manner consistent with Australian privacy requirements. If you would like details about any overseas disclosures, request them using the contact information below.

H. Patient rights

You may request access to your information and request corrections if it is inaccurate, out of date, incomplete, irrelevant, or misleading. You may withdraw or vary this consent in writing at any time. Withdrawal will not affect lawful disclosures already made.

I. Privacy complaints and contact

If you believe your privacy has been breached, you may lodge a complaint with the clinic. If you are not satisfied with the outcome, you may escalate to the Office of the Australian Information Commissioner (OAIC).

J. Consent acknowledgement and signature

By signing below, I confirm that I have read and understood this Privacy & Data Sharing Consent, had the opportunity to ask questions, and consent to the handling of my information as described above.

K. Clinic use only