(03) 9416 1466admin@drnatemyhill.com.au

Privacy Policy

Last updated: August 2026

Dr Nate Myhill ("we", "us", "our") is committed to protecting the privacy of individuals who interact with this website and our practice. This policy explains how we collect, use, disclose and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What personal information we collect

When you contact the practice or use this website, we may collect:

  • Contact information: name, phone number, email address, postal address
  • Referral information: referring practitioner details
  • Health information: where you have provided it directly to us as part of booking or clinical communication (this is treated as sensitive information under the Privacy Act)
  • Website usage data: such as IP address, browser type and pages requested, which our website host may record in standard server logs

2. How we collect personal information

We collect personal information directly from you when you:

  • Contact us by phone, email or online form
  • Contact the practice to make an appointment
  • Download resources from this website
  • Are referred to us by a GP, specialist or other health practitioner

3. Why we collect personal information

We collect and use personal information to:

  • Provide orthopaedic surgical and medical services
  • Schedule and manage appointments
  • Communicate with you and your referring practitioner about your care
  • Process billing and Medicare/health fund claims
  • Comply with legal and professional obligations
  • Improve this website and our services

4. Disclosure of personal information

We may disclose your personal information to:

  • Your referring GP or treating practitioners involved in your care
  • Hospitals and anaesthetists involved in your procedure
  • Medicare Australia and your health fund for billing purposes
  • WorkCover or TAC, where applicable
  • Our practice management software provider (Xestro)
  • IT service providers who assist in operating our systems, including email and website hosting, under confidentiality obligations

Our practice management software provider (Xestro) stores clinical and appointment records in Australia. Some of our service providers, including our email and website hosting providers, may store or process information outside Australia. You can contact us for more information about how we handle your information.

We will not sell, rent or otherwise disclose your personal information to third parties for marketing purposes without your consent.

5. Health information

Health information is sensitive information under the Privacy Act and is handled with additional care. We collect health information only where necessary for providing care, and we take reasonable steps to protect it from misuse, interference, loss, and unauthorised access or disclosure.

This website does not collect detailed clinical health information. Clinical communication is handled through secure channels, by phone, fax or secure email, or through secure messaging services such as HealthLink and Medical Objects.

6. Storage and security

Personal information is stored securely. Electronic records are held in systems with appropriate access controls and encryption. We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.

We retain information for as long as required by law or professional obligations, and destroy or de-identify it when it is no longer needed.

7. Access and correction

You have the right to access personal information we hold about you and to request correction of inaccurate information. To make a request, contact us using the details below. We will respond within a reasonable time (generally within 30 days).

8. Complaints

If you have a concern about how we have handled your personal information, please contact us in the first instance. If you remain dissatisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Website usage

This website does not use analytics or advertising tools. Our website hosting provider may keep standard server logs (such as IP address, browser type and the pages requested) to keep the site secure and running.

10. Contact

For privacy-related enquiries, please contact the practice: