Terms and Conditions

In this document, the term “The Group” refers to the collective operations of Enhance Health Group Pty Ltd. The Group is committed to adhering to the following regulations and principles:

– Privacy Act 1988

– Privacy Amendment Act 2000

– Australian Privacy Principles (APP)

– Health Records and Information Privacy Act 2002 (NSW)

This policy is designed to support the Group in mitigating risks that could impact compliance with the requirements of our customers and certifying bodies, including:

– Disability Employment Services Grant Agreement

– Workforce Australia Services Deed of Standing Offer

– Quality Assurance Framework

– National Standards for Disability Services (NSDS)

– National Disability Insurance Scheme Practice Standards and Quality Indicators, Code of Conduct, and Provider Requirements, including the Compliance Framework

– ISO 9001:2015 Quality Management System Requirements

– ISO 27001:2013 Information Security Management Systems

– Heads of Workers Compensation Authority Principles of Practice

The Group takes its obligations under the Privacy Act seriously and makes every effort to comply with the Act in order to safeguard the privacy of the personal information we hold, some of which may be health-related.

In order to ensure that the services provided align with the clients’ current situation and needs, the Group may need to collect and record personal and/or sensitive information. This information is collected on behalf of our contracted obligations with customers and is subject to the restrictions imposed by the Privacy Act 1988 (Cth).

As per the terms of our funding agreements, the Group is obligated to comply with the Privacy Act when collecting, using, and disclosing personal information of employees, customers, clients, and related stakeholders.

Personal information is collected for the provision of employment, disability, therapy, and occupational rehabilitation services in order to:

– Determine eligibility or appropriateness of services

– Tailor services to clients’ needs

– Evaluate and monitor outcomes, programs, and services

– Facilitate resolution of complaints made by stakeholders

– Include client personal details in communications developed by Enhance Health Group relevant to the scope of services.

Personal information held by Enhance Health Group, including information provided by employees, contractors, clients, and participants, may be disclosed to national or state/territory-based tribunals, commissions, courts, regulatory agencies, Department of Education Skills and Employment (DESE), Exercise and Sports Science Australia (ESSA), Australian Health Practitioner Regulation Agency (AHPRA), health practitioners, and third-party service providers, including providers with overseas operations.

SCOPE

This policy applies to the collection, use, and disclosure of information concerning the following parties:

– Stakeholders involved in the services delivered by The Group

– Employees or potential employees of The Group

– Contractors working with The Group

– Customers and certification bodies associated with the services provided

PURPOSE

The purpose of this policy is to affirm The Group’s commitment to complying with relevant legislation and customer contractual obligations regarding privacy. It outlines the methods adopted to ensure compliance.

Collection of Information

The Group will not collect personal and confidential information unless it serves a lawful purpose directly related to our organisation’s function or activity and is necessary for that purpose.

Examples of Personal Information that may be collected include:

– Contact information (e.g., name, age, address, telephone numbers, email address)

– Employment information (e.g., work history, performance, workplace incidents, next of kin details)

– Financial information (e.g., bank account details for reimbursements)

– Sensitive information (e.g., medical history, criminal record, religious beliefs, health information)

– Commonwealth government identifiers (e.g., CRN, TFN, Participant ID, JSID)

Whenever reasonable and feasible, personal information is collected directly from the individuals themselves. Collection may occur for various purposes, including service delivery or internal use in relation to an employee’s role within The Group.

Examples of collection scenarios:

– Providing occupational rehabilitation, therapy, assessment, and/or employment services as per contracted agreements, referrals, and legislative requirements

– Requesting completion of registration forms for a service

– Responding to written or verbal information requests

– During the recruitment and selection process and throughout employment with The Group

On occasion, personal information may be obtained from other sources, such as:

– Employers to establish and deliver services

– Insurance agents for the purpose of delivering occupational rehabilitation services

– Community services providers to facilitate engagement in services aligned with The Group’s scope

– Medical practitioners providing services or assessing the fitness for work of The Group’s employees

In most cases, individuals receiving services from Enhance Health Group will be required to provide signed consent forms, affirming their approval for the collection, use, or disclosure of personal information (including third-party phone recordings). Written consent is usually preferred, but verbal consent may be accepted and documented in specific circumstances, provided written consent has already been obtained. Verbal consent should serve as a reaffirmation of ongoing consent and must be recorded for record-keeping purposes.

Consent forms for each organisation within the group can be accessed through their respective case management platforms, including Enhance Health Group. The group strongly encourages maintaining best practice standards. If a consent form is over 12 months old from the date of signing, a new consent form must be obtained and signed. All consent forms should be securely stored in an access-controlled location by Enhance Health Group.

Consent must not be implied, even if legally acceptable. The Enhance Health Group strives to uphold best practices and always seeks signed consent forms for the services provided.

When a service delivery case is closed, the consent form no longer authorizes the collection, use, or disclosure of information regarding that individual.

If a client or participant is referred to Enhance Health Group for services following the completion or cessation of prior services, a new consent form must be obtained.

If a client or participant is referred for multiple services and they are provided concurrently, only one consent form is required while services are ongoing.