Last Updated: September 2026
Valentius is committed to protecting the privacy and confidentiality of the personal and health information entrusted to us.
This Privacy Policy explains how Valentius (“Valentius”, “we”, “us” or “our”) collects, holds, uses and discloses personal information in connection with the healthcare, clinical, administrative and support services we provide.
We manage personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and other applicable privacy, health records and healthcare laws.
This Privacy Policy applies to information collected through our healthcare services, consultations, websites, patient portals, telephone and electronic communications, referrals, forms and other interactions with Valentius.
The types of personal information we may collect and hold depend on the nature of our relationship with you and may include:
As a healthcare provider, we also collect sensitive information, including health information. This may include:
We only collect sensitive information where permitted by law, including where you have consented or where collection is otherwise authorised or required.
We may collect personal information:
Where reasonably practicable, we will collect personal information directly from you.
We may collect, hold, use and disclose personal information where reasonably necessary to provide, administer, coordinate and support our services and your healthcare.This may include:
Providing healthcare frequently requires information to be shared between the people and organisations involved in a patient's care.
Where appropriate and permitted by law, we may disclose relevant personal or health information to:
We seek to limit disclosures to information reasonably necessary for the relevant purpose.
Where specific consent is required for a disclosure, we will obtain that consent before the information is disclosed.
As part of your care, a Valentius clinician may identify another healthcare provider, treatment pathway, support service or healthcare organisation that may be relevant to your circumstances.
Where appropriate, we may discuss these services with you and, with your consent where required, facilitate a referral or introduction.
This may involve providing information to the receiving healthcare provider or organisation so that it can contact you, assess your needs, arrange an appointment or provide the relevant healthcare service.
The information disclosed will depend on the nature and purpose of the referral and may include your contact information and, where appropriate and authorised, relevant health or clinical information.
The receiving healthcare provider or organisation is responsible for its own privacy practices and for explaining how it will collect, use and manage any information it subsequently obtains directly from you.
Valentius may work with affiliated, related or associated entities and healthcare services as part of providing and facilitating healthcare and patient support.
Where permitted by law, personal information may be disclosed to or received from an affiliated, related or associated organisation where this is reasonably necessary, including to:
Where consent or another legal basis is required for a particular disclosure, we will ensure that requirement is met.
Consent may be obtained verbally, in writing or electronically, depending on the nature and circumstances of the disclosure and any applicable legal requirements. Where appropriate, we may ask you to complete an information release or consent form identifying the organisation, the purpose of the disclosure and the information that may be disclosed.
We use third-party providers to assist us in operating our healthcare services and business.
Subject to applicable privacy requirements, information may be disclosed to service providers including:
We take reasonable steps to ensure service providers handling personal information are subject to appropriate privacy, confidentiality and security requirements.
Where relevant to your care or eligibility for services, we may collect information from or disclose information to DVA, Medicare, Services Australia, regulatory bodies and other government agencies.
This may include information necessary to:
We will only use or disclose government-related identifiers where permitted by law.
Where consent is required for the collection, use or disclosure of personal information, we will obtain consent in a manner appropriate to the circumstances and in accordance with applicable legal requirements.
Consent may be verbal, written or provided electronically. The form of consent we seek may depend on the nature of the information, the purpose for which it will be collected, used or disclosed, the recipient of the information and any applicable legal or regulatory requirements.
Where appropriate, we may document consent in our records or ask you to complete a consent or information release form. For disclosures to external, affiliated or related organisations, this may include a third-party information release or other consent form identifying the organisation, the purpose of the disclosure and the information that may be disclosed.
Any consent you provide applies to the purposes and information described or explained when consent is obtained.
You may withdraw previously provided consent by contacting us, subject to any applicable legal or practical limitations. Withdrawal will generally apply to future uses or disclosures and will not affect actions already taken in reliance on consent that was validly provided.
Withdrawing consent may affect our ability to provide, coordinate or facilitate certain healthcare or related services where the relevant information is necessary for those services.
We may communicate with you about Valentius services, patient information, service updates and other matters where permitted by law.
We will only use or disclose personal information for direct marketing in accordance with applicable privacy and communications laws.
We will not use or disclose sensitive information, including your health information, for direct marketing unless you have provided the consent required by law.
Where required, marketing communications will provide a means for you to opt out of receiving further marketing communications.
Clinical, appointment, safety, service and administrative communications may not constitute marketing and may still be sent where necessary to provide or administer your healthcare.
Some technology or service providers we use may store, process or access information outside Australia.
Where personal information is likely to be disclosed to an overseas recipient, we will take reasonable steps required by applicable privacy law in relation to that disclosure.
Where practicable, this Privacy Policy or a relevant collection notice will identify the countries in which overseas recipients are likely to be located.
Where our information-handling arrangements change, we may update this section accordingly.
Where applicable, Valentius clinicians may access, use or contribute information to My Health Record and other authorised electronic health systems in accordance with applicable legislation, patient permissions and system requirements.
Information accessed through these systems will only be handled for authorised healthcare purposes.
Valentius consultations are not audio or video recorded, in keeping with our approach to patient privacy and confidentiality. We may retain clinical notes, correspondence, telephone records, electronic messages and other records of interactions where required or appropriate for clinical, administrative, governance or legal purposes.
If we propose to record a communication or consultation, we will obtain any consent required and comply with applicable legal requirements.
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.
These measures may include:
No information system is completely secure. If a suspected privacy or data-security incident occurs, we will assess and respond to it in accordance with applicable legal requirements, including the Notifiable Data Breaches scheme where applicable.
We retain personal and health information for as long as reasonably necessary to provide our services and meet our clinical, legal, regulatory, insurance, DVA and record-keeping obligations.
When information is no longer required to be retained, we will take reasonable steps to securely destroy or de-identify it where required by law.
We take reasonable steps to ensure that personal information we collect, use and disclose is accurate, up to date, complete and relevant.
If you believe information we hold about you is inaccurate, incomplete or out of date, you may request correction by contacting us.
We will consider correction requests in accordance with applicable privacy laws and will notify you of the outcome.
You may request access to personal information we hold about you.
We will respond to requests within a reasonable period and provide access in the manner requested where reasonable and practicable, subject to any lawful exceptions.
In some circumstances, we may be permitted or required to refuse access to some information. If this occurs, we will provide reasons where required by law.
You may authorise another person to communicate with us or access information on your behalf.
Before disclosing personal or health information to a representative, family member, partner, carer or other person, we may require evidence of your authority or another lawful basis for the disclosure.
If you believe Valentius has mishandled your personal information or breached your privacy, please contact us.
We will:
We will respond to privacy complaints within a reasonable period and will keep you informed of the progress and outcome of our review, where appropriate.
If you are dissatisfied with our response, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
We may update this Privacy Policy from time to time to reflect changes in our healthcare services, information-handling practices, technology, corporate structure, legal obligations or regulatory requirements.
The current version will be made available on the Valentius website and will display the date on which it was last updated.
Where a change materially affects how we handle personal information, we may take additional reasonable steps to bring the change to the attention of affected individuals.
For privacy enquiries, requests for access or correction, consent withdrawals or privacy complaints, please contact:
Valentius
Email: info@valentius.com.au
Phone: +61 7 4803 3016
.png)