North Perth NP & Co, Elayne Murray, Nurse Practitioner
North Perth NP & Co (operated by Elayne Murray, Nurse Practitioner) is committed to protecting your privacy and managing your personal and health information in accordance with applicable Australian law. This Privacy Policy outlines how we collect, use, store, disclose, and protect your personal information.
This policy applies to all personal information we collect, including through this website, by telephone, email, and during the course of providing health care services, including telehealth consultations delivered via video or phone.
Our privacy practices are governed by the following legislation:
"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not, and whether recorded in a material form or not (s 6, Privacy Act 1988).
"Sensitive information" includes health information and is afforded a higher level of protection under the APPs. Health information includes information or an opinion about the health, disability, or expressed wishes about future health services of an individual.
We may collect the following personal information:
As a health care provider, we may collect sensitive health information including but not limited to:
When you visit our website, we may collect non-personally-identifying information such as browser type, referring pages, and website usage data through standard web server logs and analytics tools. This is collected in an aggregated and de-identified form where possible.
We collect personal and health information in the following ways:
Where practicable, we will collect information directly from you. If we collect information about you from a third party, we will take reasonable steps to ensure you are aware of this.
We collect, use, and disclose personal and health information for the primary purpose of providing health care services, and for secondary purposes that are directly related to the primary purpose and that you would reasonably expect. These include:
Your personal and health information will not be sold, rented, or shared with third parties for marketing purposes. We may disclose your information in the following circumstances:
We will disclose your information to other health care providers, specialists, and allied health professionals involved in your care or your child's care, with your express or implied consent.
Disclosure without consent may occur in the following circumstances:
We may share personal information with trusted third-party service providers who assist us in operating our practice, including:
These providers are bound by confidentiality obligations and are not permitted to use your information for any purpose other than to assist us in our operations.
We take all reasonable steps to protect your personal and health information from misuse, interference, loss, unauthorised access, modification, or disclosure. Our security measures include:
In the event of a data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required under the Notifiable Data Breaches (NDB) scheme (Part IIIC, Privacy Act 1988).
Health care records are retained in accordance with applicable legislation and professional standards. Under general Australian health care guidance:
Where we provide services to children, we collect information from parents and/or legal guardians who are authorised to consent to treatment on behalf of the child. We handle children's health information with additional care given its sensitive nature.
As children mature and gain capacity, they may be entitled to access their own health information and exercise privacy rights independently. We will consider the age and maturity of the child when handling requests for access or correction of a child's records.
Children under the age of 12 months are exempt from the MBS established clinical relationship requirement for telehealth services, allowing their parent or guardian to access telehealth NP services without a prior in-person consultation.
We provide telehealth consultations (video and phone) as part of our Nurse Practitioner services. From 1 November 2025, MBS telehealth eligibility for Nurse Practitioner services requires an established clinical relationship between the patient and this practice, consistent with the MBS Review Advisory Committee (MRAC) recommendations.
To be eligible for an MBS Medicare rebate for a telehealth consultation, patients must have had at least one face-to-face consultation with a practitioner at this practice within the preceding 12 months. Patients who do not yet meet this requirement are encouraged to book an in-person consultation to establish eligibility for ongoing telehealth services.
Certain patients and service types are exempt from the established clinical relationship requirement, including:
Where an exemption applies, this will be documented in your clinical notes, including which exemption has been applied and the clinical justification, in accordance with MBS requirements. This information is treated as sensitive health information and handled accordingly under this Privacy Policy.
Please note that telehealth services not meeting MBS eligibility criteria may not attract a Medicare rebate. Patients are encouraged to speak with us about the most appropriate consultation type for their circumstances.
Under APP 12 and APP 13, you have the right to request access to the personal and health information we hold about you, and to request corrections where the information is inaccurate, out-of-date, incomplete, irrelevant, or misleading.
To make a request for access or correction, please contact us using the details in Section 15. We will:
We may charge a reasonable fee to cover the cost of providing access (e.g. copying and administrative costs), but we will not charge you for making the request itself.
In some circumstances we may refuse access, for example where providing access would be unlawful, may cause a serious threat to health or safety, or is subject to legal professional privilege. Any such refusal will be provided in writing.
We may access or upload information to your My Health Record where you have granted access, in accordance with the My Health Records Act 2012 (Cth). You may control access to your My Health Record through the MyGov portal. We will not access your My Health Record without your consent except as expressly permitted by the Act.
We will only add you to our mailing list and send you health-related updates or communications if you have given us express consent to do so (e.g., by completing our contact form and selecting the mailing list option).
You may withdraw your consent at any time by contacting us or clicking the unsubscribe link in any communication. We will not use your contact information for unsolicited marketing.
If you believe we have breached your privacy or failed to comply with the APPs, you are encouraged to contact us in the first instance so that we can attempt to resolve the matter.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
You may also contact the Health and Disability Services Complaints Office (HaDSCO) in Western Australia:
For all privacy-related enquiries, requests for access or correction, or complaints, please contact us at:
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. The current version of this policy will always be available on our website. We encourage you to review it periodically. Material changes will be communicated to patients where practicable.
This Privacy Policy has been prepared with reference to the Privacy Act 1988 (Cth), the Australian Privacy Principles, the My Health Records Act 2012 (Cth), the Medicare Benefits Schedule (MBS) and relevant Western Australian legislation. It is intended as a general guide. For specific legal advice, please consult a qualified Australian health law practitioner.