This statement sets out Medikonnect’s privacy policy and the practices that will be followed to respect the privacy of individuals who deal with Medikonnect. This statement is provided in accordance with the Privacy Amendment (Private Sector) Act 2000 and the National Privacy Principles (NPP’s) which are set out in the Act. It is also provided in accordance with any Health Pricacy Principles imposed under relevant Australian State and Territory legislation.

Collection of Information
The type of information collected by Medikonnect regarding individuals generally includes the following but is not an exclusive list.
Names
- Addresses (including email addresses)
- Telephone and facsimile numbers
- Date of Birth
- Occupation
- Gender
- Education and training, both Medikonnect and other types
- Membership and professional associations
- Some information Medikonnect holds may be sensitive information.
- Sensitive information held may include information concerning individuals':
- Membership of a political association or affiliations;
- Membership of a professional or trade association;
- Sensitive information also includes health information about an individual.
- Medikonnect will only collect sensitive information with the individual’s consent. By becoming a member and inputting your information to Medikonnect you are giving us consent to use the information in accordance with this privacy statement.
- Medikonnect will not collect personal information unless the information is necessary for one or more of Medikonnect's functions or activities. Medikonnect will collect the personal information only by lawful and fair means and not in an unreasonably intrusive way.

Below is a Summary of our Privacy Policy

• We will only collect personal information if it is necessary to fulfill Medikonnect's functions.
• Sensitive and health information will only be collected with the consent of the individual. Where an individual is incapable of giving consent to the provision of health information, Medikonnect will seek authorization from an authorized representative.
• We will use personal information in ways that an individual would reasonably expect us to use it.
• We will not provide access to personal information to external organizations without an individual’s consent. We will, however, provide information to legal authorities where required to do so.
• We strive to ensure that our personal information is accurate, complete and up to date.
• We are committed to protecting personal information from misuse, loss and unauthorized access, modification or disclosure.
• We encourage you to contact us for correction of personal information.
• Commonwealth or State identifiers will not be inappropriately used.
• We will, where lawful and feasible, provide individuals with the option of interacting anonymously with us.
• Where we transfer personal information, we will take all reasonable steps to ensure that the privacy protections travel with the personal information.
• We seek to comply with all relevant privacy laws as part of our compliance program.

Use and Disclosure
As a general rule, Medikonnect will not use or disclose personal information about an individual other than for its primary purpose of collection, unless:

• The individual has consented to the use or disclosure; Medikonnect has reason to suspect that unlawful activity has been, or may be engaged in, and uses or discloses the personal information as a necessary part of its investigation of the matter or in reporting its concerns to relevant persons or authorities; The use or disclosure is required or authorized by or under law; or Medikonnect reasonably believes that the use or disclosure is reasonably necessary for a specified purpose by or on behalf of an enforcement body.
• Medikonnect will use the information for marketing purposes only where:
• It is impractical for Medikonnect to seek the individual’s consent before that particular use; or
• The individual has not made a request not to receive direct marketing communications;

Data Quality
Medikonnect will take all reasonable steps to make sure that the personal information it collects, uses or discloses is accurate, complete and up to date.

Data Security
Medikonnect will take all reasonable steps to protect the personal information it holds from misuse and loss and from unauthorized access, modification or disclosure.
Medikonnect will take all reasonable steps to destroy or permanently de-identify personal information if it is no longer needed.

Openness
Medikonnect has set out in this document its policies of management of personal information and will make this document available to anyone who asks for it.
On request, Medikonnect will take reasonable steps to let an individual know, generally, what sort of personal information is held, for what purposes, and how that information is collected, held, used and disclosed.

Access and Correction
As a general rule, Medikonnect will, on request, provide access to an individual’s personal information. Medikonnect however may choose not to provide individuals with access to such information. This will include cases where:

• Providing access would have an unreasonable impact on the privacy of other individuals;
• The request for access is frivolous or vexatious;
• The information relates to anticipated or existing legal proceedings and would not be discoverable in those proceedings;
• Providing access would reveal the intentions of Medikonnect in relation to negotiations with the individual in such a way as to prejudice those negotiations;
• Providing access would be unlawful;
• Providing access would be likely to prejudice an investigation of possible unlawful activity;
• Providing access would be likely to prejudice activities which are carried out by Medikonnect on behalf of an enforcement body.
• Medikonnect may decide to impose a charge upon the individual to cover the cost of verifying a request for information and locating, retrieving, reviewing and copying any material requested.

Identifiers
Medikonnect will not adopt a government agency identifier as its identifier of an individual.

Anonymity
Wherever it is lawful and practical, Medikonnect will allow individuals the option of not identifying themselves when entering into transactions with us.

Transborder Data Flows
Medikonnect will only transfer personal information about an individual to a third party who is in a foreign country in specified circumstances. This would include:

• Where the individual consents to the transfer; or
• Where Medikonnect has taken reasonable steps to ensure that the information which has transferred will not be held, used or disclosed by the recipient of the information inconsistently with the NPPs.

Complaint Handling Process
A complaint by an individual regarding an alleged breach of privacy by Medikonnect should be forwarded in writing to the following address:
Privacy Compliance Officer
Medikonnect
e-mail: admin@medikonnect.com.au
The Privacy Complaints Officer will be made available to investigate and resolve the complaint internally through mediation with the individual.
If the individual is not happy with the resolution of their complaint by the Privacy Complaints Officer they may then complain to the Privacy Commissioner or Industry Code adjudicator about the act or practice they consider to be an interference with their privacy. The Commissioner then has the power to investigate the alleged breach by examining witnesses, obtaining documents and directing individuals to attend compulsory conferences. The Privacy Commissioner’s determination in such cases is enforceable by a court of law.
Medikonnect
e-mail: admin@medikonnect.com.au