Privacy Policy

Last Updated: 15 June 2026

1. Introduction

KOR Physio Pty Ltd ("KOR Physio", "we", "our", or "us") is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information and health information when you:

  • Attend our clinic for physiotherapy services;

  • Participate in rehabilitation, exercise, performance, or telehealth services;

  • Use our website or online booking systems; or

  • Communicate with us by phone, email, social media, or other means.

We manage personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable health records legislation.

2. The Information We Collect

To provide safe and effective healthcare services, we may collect the following information:

Personal Information

  • Full name

  • Date of birth

  • Gender

  • Residential address

  • Email address

  • Phone number

  • Emergency contact details

Health Information

  • Medical history

  • Injury history

  • Clinical notes and treatment records

  • Assessment findings

  • Exercise and rehabilitation programs

  • Imaging reports (e.g. X-rays, MRI, CT scans, ultrasound reports)

  • Current medications

  • Referral letters and specialist correspondence

  • Relevant health information provided by other healthcare professionals

Financial and Billing Information

  • Medicare details

  • Private health insurance information

  • WorkCover claim information

  • NDIS participant information

  • DVA details

  • Payment and billing records

Technical Information

When you interact with our website or online systems, we may collect:

  • IP address

  • Device information

  • Browser type

  • Website usage information

  • Booking platform activity

3. How We Collect Information

We collect information directly from you through:

  • New patient registration forms

  • Consent forms

  • Clinical consultations

  • Physical assessments and treatment sessions

  • Telehealth appointments

  • Website enquiries

  • Online bookings

  • Email, SMS, phone, and social media communications

With your consent, or where permitted by law, we may also collect information from:

  • General practitioners (GPs)

  • Medical specialists

  • Hospitals

  • Allied health practitioners

  • Insurers

  • Employers

  • Case managers

  • Family members or carers involved in your care

4. Why We Collect Your Information

We collect, hold, use, and disclose information for purposes including:

Clinical Care

  • Assessing and treating injuries and conditions

  • Developing rehabilitation and exercise programs

  • Monitoring treatment outcomes

  • Maintaining accurate clinical records

Administration

  • Managing appointments

  • Communicating with patients

  • Processing payments and accounts

  • Managing Medicare, WorkCover, NDIS, DVA, and private health claims

Professional Communication

  • Communicating with referring practitioners

  • Coordinating care with other healthcare providers

  • Preparing reports where authorised or required

Legal and Regulatory Obligations

  • Meeting professional record-keeping obligations

  • Complying with legal requirements

  • Managing complaints and disputes

  • Protecting patient safety

5. Consent

By providing your personal information and engaging our services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

Where required by law, we will obtain additional consent before collecting or disclosing sensitive health information.

You may withdraw consent in certain circumstances, although this may affect our ability to provide services.

6. Disclosure of Information

We do not sell, rent, or trade personal information.

We may disclose your information to:

Healthcare Providers

  • General practitioners

  • Specialists

  • Allied health professionals

  • Hospitals and medical facilities

where necessary for your treatment and continuity of care.

Government and Funding Bodies

  • Medicare

  • Department of Veterans' Affairs (DVA)

  • WorkCover authorities

  • NDIS administrators

for claims processing and funding purposes.

Insurers and Claims Managers

  • Private health insurers

  • Workers compensation insurers

  • Income protection insurers

  • Third-party claims administrators

where relevant to your care or claim.

Service Providers

We may use trusted third-party providers to assist with:

  • Practice management software

  • Online bookings

  • Secure cloud storage

  • IT support

  • Payment processing

  • Business administration

These providers are required to maintain appropriate confidentiality and security safeguards.

Legal Requirements

We may disclose information where required or authorised by law, including:

  • Court orders

  • Subpoenas

  • Regulatory investigations

  • Serious threats to life, health, or safety

7. Overseas Disclosure

Some of our service providers may store or process information using servers located outside Australia.

Where personal information is transferred overseas, we take reasonable steps to ensure that service providers maintain privacy protections consistent with Australian privacy requirements.

8. Website, Cookies and Analytics

Our website may use cookies and similar technologies to improve functionality and analyse website usage.

These technologies may collect information such as:

  • Pages visited

  • Time spent on pages

  • Device information

  • Browser type

  • Referral sources

We may use analytics tools to understand website performance and improve user experience.

You can disable cookies through your browser settings, although some website functions may not operate correctly.

9. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Security measures may include:

  • Secure cloud-based practice management systems

  • Encryption technologies

  • Password protection

  • Restricted staff access

  • Secure network infrastructure

  • Physical security measures for paper records

While we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

10. Data Breach Response

If we become aware of an eligible data breach that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme.

This may include notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required by law.

11. Retention of Records

We retain clinical records in accordance with applicable legal and professional requirements.

Generally:

  • Adult patient records are retained for at least 7 years from the date of last treatment.

  • Records relating to minors are retained until the patient reaches at least 25 years of age.

Records may be retained longer where required by law or operational necessity.

12. Access and Correction

You may request access to personal information we hold about you.

You may also request correction of information that is inaccurate, incomplete, out of date, or misleading.

Requests should be made in writing using the contact details below.

In some circumstances, access may be limited or refused where permitted by law.

13. Anonymity and Pseudonymity

Where practical, individuals may interact with us anonymously or using a pseudonym.

However, because physiotherapy services require accurate identification and clinical record keeping, we will generally need to collect identifying information to provide treatment safely and effectively.

14. Marketing Communications

From time to time, we may send:

  • Clinic updates

  • Educational resources

  • Health and wellness content

  • Promotional information about our services

You may opt out of marketing communications at any time by using the unsubscribe facility or contacting us directly.

We will not send marketing communications where prohibited by law.

15. Consequences of Not Providing Information

If you choose not to provide information requested by us, we may be unable to:

  • Provide physiotherapy treatment safely

  • Verify your identity

  • Process Medicare or insurance claims

  • Maintain accurate clinical records

  • Communicate effectively regarding your care

16. Privacy Complaints

If you believe we have breached your privacy or mishandled your information, please contact us using the details below.

We will:

  • Acknowledge your complaint within a reasonable timeframe;

  • Investigate the matter;

  • Attempt to resolve the issue promptly; and

  • Provide a written response where appropriate.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, operations, or legal obligations.

The current version will always be available on our website and will include the most recent revision date.

18. Contact Us

KOR Physio Pty Ltd

Address: 4/65 Manilla Street, East Brisbane QLD 4169

Email: admin@korphysio.com.au

Phone: 0400 050 882

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au