Privacy Policy

Last updated: July 2026

Privacy Policy

Protecting your privacy is an important part of providing your care.

This Privacy Policy explains how your personal information is collected, used, stored and disclosed by Dr. Priyomi Wimalaguna. It applies to information collected through this website and during the provision of psychiatric services.

Personal information is handled in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable health records legislation.

What information is collected?

The practice collects personal information that is reasonably necessary to provide psychiatric care and manage the practice.

This may include:

• Your name, date of birth and contact details.

• Information about your health, medical history, medications and treatment.

• GP and referring practitioner details.

• Emergency contact information.

• Information you provide through enquiry forms, intake questionnaires and consultations.

• Appointment and billing information.

• Correspondence relating to your care.

Where reasonably practicable, information is collected directly from you. With your consent, relevant information may also be obtained from your GP, psychologist, referring practitioner or other treating healthcare professionals where this supports your care.

Why is your information collected?

Your information is collected to:

• Provide psychiatric assessment and treatment.

• Communicate with you about appointments and your care.

• Maintain accurate clinical records.

• Coordinate care with your GP and other healthcare professionals where appropriate.

• Meet legal, regulatory and professional obligations.

• Process payments and administer the practice.

Only information that is reasonably necessary for these purposes is collected.

How is your information used and disclosed?

Your personal information is used to support the delivery of your healthcare.

With your consent, relevant information may be shared with your GP, psychologist, referring practitioner or other healthcare professionals involved in your care to support continuity of treatment.

Information may also be disclosed where required or authorised by law, including where there are significant concerns regarding your safety or the safety of another person.

The practice does not sell, rent or disclose your personal information for marketing purposes.

How is your information stored?

Health information is stored securely using electronic medical record systems and other secure practice management software.

Reasonable steps are taken to protect personal information from unauthorised access, loss, misuse or disclosure.

Health records are retained for the period required under Australian law and professional record-keeping obligations.

Telehealth consultations

Consultations are conducted using secure telehealth technology.

While reasonable steps are taken to protect the security of online consultations, no method of electronic communication can be guaranteed to be completely secure.

Patients are encouraged to participate in appointments from a private location and to use a secure internet connection whenever possible.

Website analytics and cookies

This website uses Google Analytics to help understand how visitors use the website and to improve its performance and user experience.

Google Analytics may collect information such as:

• your IP address;

• browser and device type;

• pages visited;

• time spent on the website; and

• general website usage information.

This information is collected in an aggregated form and is not used to personally identify you.

Google may process this information in accordance with its own Privacy Policy.

Most web browsers allow you to manage or disable cookies through your browser settings if you prefer.

Third-party service providers

The practice uses trusted third-party providers to support the operation of the website and delivery of services.

These may include:

• Framer for website hosting.

• Google Analytics for website analytics.

• Xestro for secure patient communication, payment processing and practice administration.

• Secure telehealth and clinical practice management systems.

These providers are expected to maintain appropriate privacy and security standards when handling personal information.

Accessing or correcting your information

You may request access to your personal information or ask that it be corrected if you believe it is inaccurate, incomplete or out of date.

Requests should be made in writing using the contact details below.

Access may be limited in circumstances permitted by Australian law.

Contact

If you have any questions about this Privacy Policy or wish to request access to or correction of your personal information, please contact:

Dr. Priyomi Wimalaguna

Email: [your practice email]

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, professional obligations or practice procedures.

The most current version will always be available on this website.