Privacy policy

Effective date: 27 September 2026

Who we are and which laws apply

This policy applies to AMK Dental Clinic, Shop 3, 46 Tennyson Road, Mortlake NSW 2137. In this policy, “we” and “us” mean AMK Dental Clinic.

As a health service provider, we must comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and with the NSW Health Records and Information Privacy Act 2002 and its Health Privacy Principles. Health information is sensitive information, and we handle it with extra care.

What information do we collect?

We collect only the information we need to provide dental care and run the practice. This may include:

• identity and contact details: name, date of birth, gender, address, phone, email and emergency contact
• health information: medical and dental history, medicines, allergies, clinical notes, X-rays, photographs, scans, treatment plans and referral letters
• Medicare, health fund and DVA details, including card numbers, for claims and eligibility checks
• payment details: records of payments, accounts and any payment plan arrangements
• website information: messages you send through our forms, and limited technical data described below

You can make a general enquiry without giving your name. To provide treatment, we need to identify you.

How do we collect it?

We collect most information directly from you: in person, by phone, by email, through our patient information form, through any enquiry form on our website and through our online booking provider. With your consent, or where the law allows, we may also collect information from other health practitioners, your GP, your health fund, Services Australia (Medicare) or a parent, guardian or carer.

Why do we collect, use and disclose it?

We use your information to:

• assess, diagnose and treat you, and keep accurate clinical records
• communicate with you, including appointment reminders and recalls
• process payments and claims with health funds (through HICAPS), Medicare (including the Child Dental Benefits Schedule) and DVA
• refer you to, or receive reports from, other practitioners, dental laboratories and radiology providers involved in your care
• manage the practice, including quality, safety, accreditation, insurance and legal obligations

We disclose information only for these purposes, with your consent, or where the law requires or allows it, for example to lessen a serious threat to someone’s health or safety.

Who do we share it with?

We may share information with:

• other health practitioners and dental laboratories involved in your care
• health funds, HICAPS, Services Australia and DVA, for claims
• service providers that help us run the practice, such as our practice management software provider, email provider, SMS reminder provider, IT support and online booking provider

Our service providers may access information only to provide their services to us.

Our website and enquiry forms

Our website asks only for your name, phone number, email address, preferred contact method and a short message. Please don’t include detailed health information in a web form.

• Form processing: form submissions are processed by Cloudflare, Inc., which hosts our website, and forwarded to our practice email inbox. Cloudflare may process this data outside Australia.
• Spam protection: our forms use Cloudflare Turnstile to check that a person, not an automated program, is submitting the form. Turnstile processes limited technical signals, such as your IP address and browser information, only to detect and block bots. See the Turnstile privacy addendum.
• Analytics: we use Cloudflare Web Analytics to count page visits. It does not use cookies or local storage and does not fingerprint individual visitors (Cloudflare Web Analytics).
• No tracking pixels: we do not use advertising or tracking pixels, such as Meta, TikTok or Google Ads remarketing tags, and we do not share page visits or form contents with advertising platforms.
• Maps: where our website shows a map, it loads only when you choose to open it, or links to Google Maps, which has its own privacy policy.

Online booking through MyHealth1st

When you book online, you use MyHealth1st, a third-party booking service. MyHealth1st collects the details needed to make your booking and passes them to us. It handles your information under its own privacy policy, so please read it before booking.

Is information sent overseas?

Some of our service providers store or process information outside Australia. Our website, form and email providers (including Cloudflare, Inc.) may process or store information in the United States and other countries where they operate. Cloudflare’s privacy policy says it primarily stores information in the United States and the European Economic Area. Other providers, such as our email and online booking providers, may also process data overseas. We take reasonable steps to make sure overseas providers protect your information in line with Australian privacy law.

How do we store and protect your information?

We hold records electronically and, in some cases, on paper. We protect them with access controls, passwords, secure software, staff confidentiality obligations and physical security at the practice. Under NSW law, we keep health records for at least 7 years after your last visit, or for records collected while you were under 18, until you turn 25. After that, records are destroyed securely or de-identified.

Do we send marketing?

We only send marketing messages if you have agreed to receive them, and you can opt out at any time. Appointment reminders and recall notices are not marketing. We never use your health information for marketing without your consent.

Automated decision-making

We do not use automated decision-making, including computer programs, that uses personal information to make, or substantially help make, decisions that significantly affect individuals.

How can you access or correct your information?

You can ask for access to the information we hold about you, or ask us to correct it, by contacting our privacy officer. We will respond within a reasonable time, usually within 30 days. We do not charge for making a request. We may charge a reasonable fee for copies of records, and we will tell you the fee before we proceed. If we refuse access or correction, we will explain why in writing and tell you how to complain.

What happens if there is a data breach?

If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

How can you make a complaint?

If you are concerned about how we have handled your information, please contact our privacy officer first. We will acknowledge your complaint within 7 days and aim to respond within 30 days.

If you are not satisfied, you can complain to:

• the OAIC: oaic.gov.au, phone 1300 363 992
• the Information and Privacy Commission NSW, about health information: ipc.nsw.gov.au

Contact our privacy officer

Privacy officer: Practice Manager, AMK Dental Clinic AMK Dental Clinic, Shop 3, 46 Tennyson Road, Mortlake NSW 2137 Phone: (02) 9739 6525 Email: info@amkdental.com.au

Changes to this policy

We may update this policy from time to time. The current version is always on this page, with its effective date. There is no charge to access this policy, and we can provide it in another format on request.