- The My RCH Portal mobile application (the
App) is a service provided by The Royal Children’s Hospital (ABN 35
655 720 546) (collectively referred to as “we”, “our” or “us”).
In this Privacy Policy, “you” and your” refers to any individuals who
access or use the App from whom we collect personal information.
This Privacy Policy
informs you how we collect, use, disclose, secure and store your personal
information when you use or access the App. We are committed to protecting your
privacy and personal information. This privacy policy complies with the
Information Privacy Principles contained in the Privacy and Data
Protection Act 2014 (Vic) (PDP Act) and the Health Privacy
Principles contained in the Health Records Act 2001 (Vic) (HR
Act) and all related Australian legislation (collectively, Victorian Privacy
Law).
If you use or access
the App, you are deemed to have accepted and consented to this Policy. The
personal information that we collect is used for providing and improving the
functionality of the App. We will not use or share your information with anyone
except as described in this Privacy Policy.
The terms used in this
Privacy Policy have the same meanings as in Victorian Privacy Law and our Terms
and Conditions, which are accessible at My RCH Portal and the RCH Privacy Policy (unless otherwise defined in this Privacy
Policy).
The
My RCH Portal App may interact with your sensitive data to provide certain
features. The first time you try to use any of these features, we will ask for
your consent within the app and will only allow you to use a feature if you
give consent. You do not have to provide consent if you do not want to allow
the My RCH Portal App to interact with your data as requested. The My RCH
Portal App is developed by Epic Systems Corporation; please refer to Epic’s Mobile Application
Privacy Policy for Patients for
more detailed information about the ways Epic may interact with your
information to make your use of My RCH Portal possible.
My
RCH Portal may offer location-based features. The first time you try to use any
features that use your location, we will ask for your consent within the app
and will only access your location if you give consent. You do not have to
provide consent if you do not want to allow My RCH Portal to use your location.
We do not store your location data.
How do we disclose
your personal information?
We may disclose your
personal information (excluding health and sensitive information) to other
health professionals and third parties, including but not limited to:
Subject to your
consent, we may provide information, including sensitive and health
information, about you to your healthcare provider and healthcare provider
organisation involved in your healthcare, as well as other healthcare
specialists.
When disclosing your
personal information to third parties, we will take reasonable steps to ensure
that the third party complies with laws substantially similar to Victorian
Privacy Law.
What information do
we collect and hold?
The types of
information we may collect includes:
The information that
we request will be retained by us and used as described in this Privacy
Policy.
We will only collect
and use sensitive information and health information with your consent or as
required by law. Such information will only be used for the purposes for which
it is collected or otherwise in accordance with Victorian Privacy Law. We will
not use or disclose your sensitive information or health information to any
third party except as required or permitted by law.
How do we collect
your personal information?
We may collect your
personal information in a variety of ways, including:
If your personal
information is collected from a third party, we will notify you of such where
reasonably practicable.
How do we use your
personal information?
We will only use your
personal information to fulfil the purpose for which it is collected or for
related purposes, in accordance with this Privacy Policy and Victorian Privacy
Law.
We may also use your
personal information for a range of different purposes, including to:
How do we store
your personal information?
We have in place steps
to protect your personal information from misuse, loss or unauthorised access
and disclosure. We store all registration information, encrypted user IDs,
device diagnostic information and contact data, in the data store. It is a
secure cloud-based facility, using infrastructure located in Australia, which
has been classified as appropriate for storage of data up to the ‘protected’
security level.
We will only transfer
personal or health information outside Victoria if the recipient is subject to
laws substantially similar to Victorian Privacy Law.
Openness
This Privacy Policy is
available on our website and upon request.
Cookies
Cookies are files with
a small amount of data that are commonly used as anonymous unique identifiers.
These are sent to your browser from the websites that you visit and are stored
on your device's internal memory.
This App does not use
“cookies” explicitly. However, the App may use third party code and libraries
that use “cookies” to collect information and improve their services. You have
the option to either accept or refuse these cookies and know when a cookie is
being sent to your device. If you choose to refuse our cookies, you may not be
able to use some portions of this App.
Links to Other
Sites
The App may contain
links to other sites. If you click on a third-party link, you will be directed
to that site. Note that these external sites are not operated by us. Therefore,
we strongly advise you to review the privacy policy of these websites. We have
no control over and assume no responsibility for the content, privacy policies,
or practices of any third-party sites or services.
Direct marketing
We do not sell or
otherwise provide personal information to unrelated third parties for their
direct marketing purposes or other use-based data mining purposes.
How can you access
or correct your personal information?
You can update your
personal information from within the App. If you are unable to update your
personal information, we can update such information we hold about you.
We take reasonable
steps in the circumstances to ensure that personal information we collect, use
or disclose is accurate, current, complete and relevant. If it is out of date,
incomplete, irrelevant or misleading, please contact us as set out below. We
may decline your request to access or correct your personal information in
accordance with the Victorian Privacy Law. If we do refuse your request, we
will provide you with a reason for our decision.
Dealing with us
anonymously
We will provide you
with the opportunity to deal with us anonymously or by pseudonym where it is
lawful and practicable (e.g. when making a general enquiry or requesting a
policy or other non-sensitive document from us). If you choose to deal with us
anonymously or pseudonymously, we may not be able to provide you with access to
and use of the App or any integrated products or services.
Unique identifiers
We do not assign, use
or disclose unique identifiers to you unless it is necessary to do so to carry
out one of our functions efficiently or is allowed or required by law. Examples
of unique identifiers belonging to other organisations include Medicare
numbers, tax file numbers and drivers licence numbers.
What can you do if
you have a question or complaint?
If you would like
further information about the way we manage personal information, or wish to
complain, please contact us using the details below and we will investigate the
issue. We will notify you of a decision in relation to your complaint as soon
as practicable after it has been made.
If you are not
satisfied with our decision, you may direct your concerns to either:
Office of the
Victorian Information Commissioner
Phone: 1300 006 842
Email: enquiries@ovic.vic.gov.au
Mail: PO Box 24274 Melbourne VIC
3001
or
Health Complaints
Commissioner
Phone: 1300 582 113
Online Form: https://hcc.vic.gov.au/make-complaint
Please note that the
relevant Commissioner may decline to hear your complaint if it has not first
been made to us.
Changes to this Privacy
Policy
We may modify or amend
this Privacy Policy at any time in our sole discretion. By continuing to use
the App, you accept this Privacy Policy as it applies from time to time. You
are encouraged to periodically review this Privacy Policy to stay informed of
any updates.
This policy is
effective as of 1 August 2022.
Contact Us
If you have any
privacy related questions or suggestions, please do not hesitate to contact us
at:
Phone: 03 9345 6106
Email: privacy.officer@rch.org.au
Mail: Privacy Officer
Health Information Services
The Royal Children’s Hospital
50 Flemington Road
Parkville VICTORIA 3052