Privacy Policy

Upstanding Health Group Pty Ltd (UHGroup, we, us, our) is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect, how we use and store it, and how you can access or correct it.

This policy applies to information collected through our website (uhgroup.au) and in the course of providing Occupational Therapy, Physiotherapy, Podiatry and Allied Health Assistant services.

What we collect

Depending on how you interact with us, we may collect:

• Contact details — name, email address, phone number, and any details you provide through our website contact form
• Referral and service information — when you make a referral or become a client, information such as your NDIS or aged care details, funding arrangements, and the reason for referral
• Health information — clinical notes, assessment results, and other health information relevant to the services we provide, collected as part of delivering therapy services
• Enquiry details — the content of any message you send us, including the subject you select and anything you write

We only collect health information (which is “sensitive information” under the Privacy Act) with your consent, or where reasonably necessary to provide our services to you.

How we collect it

• Directly from you — through our website contact form, by phone, by email, or in person
• Through referrals made on your behalf — by a support coordinator, case manager, family member, or other health professional (with appropriate consent)
• Through our clinical practice management software, Splose, which we use to manage referrals and appointments — if you submit a referral form through Splose, that information is collected and stored by Splose on our behalf; Splose has its own privacy and security practices, which you can review at splose.com

How we use your information

We use your personal information to:

• Assess and respond to referrals and enquiries
• Deliver and coordinate allied health services
• Communicate with you about appointments, reports, and your care
• Process funding and billing through NDIS, Medicare, HICAPS, or private health arrangements
• Meet our legal and regulatory obligations, including reporting obligations to bodies such as the NDIS Quality and Safeguards Commission, the Aged Care Quality and Safety Commission, or AHPRA where required

We do not use your personal information for marketing without your consent, and we do not sell your personal information to third parties.

Who we may share it with

We only share your information where necessary to deliver your care or where required by law, including with:

• Other treating practitioners involved in your care, with your consent
• Support coordinators, case managers, or plan managers you’ve authorised to liaise with us
• Splose, as our clinical software provider
• Regulatory or oversight bodies, where we are legally required to report (e.g. the NDIS Commission, Aged Care Quality and Safety Commission, AHPRA, or the Office of the Health Ombudsman Queensland)
• Our IT and website service providers, to the extent necessary to operate our systems

Our website specifically

Our contact form collects your name, email, phone number, the subject you select, and your message, and sends this directly to our admin email address. We use standard protections (including spam and rate-limit filters) to keep this form secure, and we don’t currently use Google Analytics or other visitor-tracking or advertising cookies on our site.

Our Contact page includes an embedded Google Map to help you find our clinic. When this map loads, Google may collect information in accordance with its own privacy policy — this occurs outside our control, and we encourage you to review Google’s privacy policy if you have concerns.

Referral forms linked from our Referrals page are hosted externally by Splose, not on our own website — information you enter there is collected under Splose’s own privacy practices.

Overseas disclosure

We primarily use Australian-based service providers. Some third-party services we rely on (such as Google, for the embedded map) may store or process data on servers located overseas. We take reasonable steps to ensure any third party we engage handles personal information in a manner consistent with the Australian Privacy Principles, but we cannot guarantee the privacy practices of services outside our control, such as Google.

Storage and security

We take reasonable steps to protect the personal information we hold from misuse and interference, loss, and unauthorised access, modification, or disclosure. Health information is stored in Splose, a purpose-built clinical software platform. We retain personal and health information only for as long as necessary to provide our services and to meet our legal and professional record-keeping obligations.

Cookies

Our website uses only the minimal cookies required for the site to function correctly (for example, session cookies used by WordPress). We do not currently use tracking, analytics, or advertising cookies.

Access and correction

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it’s inaccurate, out of date, or incomplete. To make a request, contact us using the details below.

Complaints

If you have a concern about how we’ve handled your personal information, please contact us directly first — see our Feedback and Complaints page for how this works. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The most current version will always be available on this page.

Contact us

Upstanding Health Group Pty Ltd
1/19 Railway Parade, Darra QLD 4076
PO Box 70, Underwood QLD 4119
admin@uhgroup.au
(07) 3187 5018
ABN 40 666 152 003