Home / Privacy Policy

Privacy Policy

How Karratha Pilbara Therapy Pty Ltd collects, uses, and protects your personal and health information.

Effective Date: 15 April 2026  |  Last Reviewed: 15 April 2026  |  Jurisdiction: Western Australia, Australia

1. About This Policy

Karratha Pilbara Therapy Pty Ltd (ABN 81 697 043 664 / ACN 697 043 664) ("Karratha Pilbara Therapy", "we", "us", or "our") is committed to protecting the privacy of individuals who interact with us.

This Privacy Policy explains how we collect, hold, use, and disclose personal and health information in accordance with the Privacy Act 1988 (Cth) ("Privacy Act"), the Australian Privacy Principles ("APPs"), and the Health Practitioner Regulation National Law (WA) Act 2010.

By using our website (karrathapilbaratherapypty.online), contacting us, or engaging our services, you consent to the handling of your personal information as described in this Policy.

2. Who We Are

Karratha Pilbara Therapy Pty Ltd is an allied health practice providing physiotherapy, occupational therapy, and mental health counselling services in Karratha and the Pilbara region of Western Australia.

3. Information We Collect

We may collect the following types of personal and health information:

  • Identity information: full name, date of birth, gender
  • Contact details: email address, phone number, postal address
  • Health information: medical history, injury details, treatment notes, clinical assessments, referral letters, Medicare/DVA/NDIS numbers
  • Payment information: health fund details, billing address (we do not store credit card numbers)
  • Communication records: emails, enquiry form submissions, and clinical correspondence
  • Website usage data: IP address, browser type, pages visited

Health information is classified as "sensitive information" under the Privacy Act. We collect it only with your consent and only where reasonably necessary for your treatment.

4. How We Collect Information

We collect personal and health information through:

  • Patient intake forms and clinical assessments
  • Referrals from GPs, specialists, and other health providers
  • Enquiry forms submitted on our website
  • Direct email, telephone, or telehealth communications
  • Medicare, DVA, NDIS, and workers' compensation systems
  • Automatically via cookies and server logs when you visit our website

5. How We Use Your Information

We use personal and health information to:

  • Provide physiotherapy, occupational therapy, and counselling services
  • Maintain clinical records as required by AHPRA and relevant health legislation
  • Process Medicare, DVA, NDIS, health fund, and workers' compensation claims
  • Communicate with your referring practitioner and other members of your care team (with your consent)
  • Comply with legal and regulatory obligations under the Health Practitioner Regulation National Law (WA) Act 2010
  • Send appointment reminders and service-related communications
  • Improve our website and services

6. Disclosure of Personal Information

We may disclose your personal or health information to:

  • Our registered practitioners and clinical staff (on a need-to-know basis)
  • Your referring GP or specialist (with your consent)
  • Medicare, DVA, NDIS, or your private health insurer for claims processing
  • Workers' compensation insurers (where applicable and with your consent)
  • Third-party service providers (e.g. IT/hosting, accounting) — subject to confidentiality obligations
  • Government agencies or regulators where required by law

We do not sell or rent your personal information. We do not generally disclose information to overseas recipients.

7. Data Security

We take reasonable steps to protect your information including:

  • Secure, encrypted clinical record management systems
  • Access controls restricting health information to authorised practitioners
  • HTTPS encryption on our website
  • Secure telehealth platforms compliant with Australian healthcare standards

In the event of a data breach likely to cause serious harm, we will notify affected individuals and the OAIC as required under Part IIIC of the Privacy Act.

8. Retention of Health Records

We retain clinical records for the minimum periods required by law, including 7 years from the date of last treatment for adult patients and until the patient reaches 25 years of age for paediatric patients, in accordance with WA health records legislation.

9. Access and Correction

Under APP 12 and APP 13, you have the right to request access to and correction of the personal information we hold about you. To exercise these rights, contact us at ceo@karrathapilbaratherapypty.online. We will respond within 30 days.

10. Complaints

If you believe we have breached the APPs or this Policy, contact us at:

We will acknowledge your complaint within 5 business days. If unsatisfied, you may escalate to the OAIC at www.oaic.gov.au or to AHPRA for clinical matters.

11. Changes to This Policy

We may update this Policy from time to time. Updated versions will be published on our website with a revised effective date.

12. Governing Law

This Privacy Policy is governed by the laws of Western Australia and the Commonwealth of Australia.

13. Contact Us

For privacy queries, please contact: