Privacy

Privacy_Brightwater Onslow Gardens flower pattern armchair, filtered light through curtains and indoor plant on side table

Brightwater's Privacy Statement

Our Commitment to Privacy

Brightwater Care Group Limited (Brightwater) respects your privacy and is committed to protecting your personal information. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other relevant laws, including the My Health Records Act, Aged Care Act, and NDIS Act.

This statement explains how we collect, use, store, disclose, and protect your personal information. It is designed to give you a clear understanding of our privacy practices.

Employee records held by Brightwater in relation to current or former employees are managed under separate internal policies as they are mostly exempt from the Privacy Act requirements.

What Information We Collect

We only collect personal information we need to deliver our services, operate our business and meet legal obligations. Personal information is defined under the Privacy Act as information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Personal information we collect can include the following, though not all may apply to everyone:

  • Contact details (name, address, phone, email)
  • Health and medical information
  • Demographic information (age, gender, location)
  • Details about client’s preferences, interests, and culturally relevant information to support care delivery
  • Financial information and bank account details
  • Government identifiers (e.g., Medicare, My Aged Care ID, NDIS reference numbers, tax file numbers)
  • Information provided through forms, calls, emails, or our website

How We Collect and Store Information

We collect information directly from you wherever possible, including but not limited to:

  • Completed forms (hardcopy and online) and surveys
  • Face-to-face meetings, phone calls, and emails
  • Online interactions - Brightwater’s website (including cookies and Google analytics)
  • CCTV for safety and security

Brightwater may collect information from third parties (e.g., family members, guardians, health professionals, My Health Care Record) with your consent or where you would reasonably expect us to do so. Whenever possible, you can interact with us anonymously or use a pseudonym if you prefer.

We will ask for your consent before collecting sensitive personal information unless permitted or required by law. Sensitive personal information includes health information, racial or ethnic origin, religious beliefs, sexual orientation, and other information that may reveal intimate aspects of an individual’s identity.

Brightwater stores personal information securely in both electronic systems and paper files. Archived client records are maintained with care, and paper files may be stored offsite in secure facilities.

Click here for more information regarding our website data

How We Use Your Information

We are committed to using any personal information we collect only for the purposes for which it was provided, or as permitted by law. Sensitive personal information is managed diligently and protected in accordance with the Privacy Act.

We use your personal information for:

  • The purpose it was collected such as to deliver and plan care and services
  • A secondary purpose related to the primary purpose that you would reasonably expect your information to be used for
  • Meeting legal and regulatory requirements
  • We sometimes use information to support research, service evaluation, and quality improvement so we can better understand how to improve care for our clients.

If decisions that affect you are made using automated systems, we will inform you and explain how those decisions are reached.

How We Share Your Information

We may share information with:

  • Health professionals and service partners involved in your care
  • Government agencies where required by law

We will only share it with your consent or as legally permitted.

Brightwater will advise if personal information is disclosed outside Australia and, where practicable, identify the countries involved. We take reasonable steps to ensure overseas recipients meet privacy obligations.

Your Right to Access and Correct Your Information

It is important to us that the personal information we hold about you is accurate and up to date. We may ask you, on occasion, to inform us if any of your personal information has changed.

You have the right to:

  • Access your personal information
  • Request corrections if it is inaccurate or incomplete
  • Request deletion when information is no longer needed or consent is withdrawn.

If you wish to request access, correction or deletion of your personal information, contact us at [email protected] or 1300 223 968. Alternatively you may complete the Application for Access to Information about Yourself Form or the Application to Amend Health Records Form. Proof of identity will be required to authorise your request.

If you wish to access the personal information of another person, you can complete an Application for access to information about another person form, you must provide applicable documents which authorise your access.

Keeping Your Information Safe

We understand that the security of your personal information is important to you. We take all reasonable steps to protect your information from misuse, loss, and unauthorised access. This includes secure systems, staff training, and confidentiality practices.

Data Breaches

Under the Privacy Act, a data breach occurs when personal information is accessed or disclosed without authorisation or is lost. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches Scheme. We will take steps to minimise any harm caused to affected individuals resulting from the breach.

Questions or Complaints

Brightwater is committed to providing quality customer service and a positive experience. If you believe your privacy has been breached, please contact our Privacy Officer at [email protected] or by phone 1300 223 968. If you are not satisfied with Brightwater’s response to your complaint, you can lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.

Changes to the Privacy Statement

Brightwater may update this Privacy Statement from time to time. The updated version will be posted on our website, and the revised effective date will indicate the date of the latest changes. We encourage you to review this Privacy Statement periodically.

Further Information and Assistance

If you have any questions about privacy, we’d love to hear from you. You can also request a copy of Brightwater’s full Privacy Policy by contacting us at:

Privacy Officer
Brightwater Care Group Limited 
Email: [email protected]
Phone: 1300 223 968