Privacy

Privacy policy

Your dental records contain some of the most personal information you have. This page sets out plainly what we collect, why we collect it, who else may see it, and what you can ask us to do with it.

Who we are

Red Hill Dental Practice is a registered business name of Sorrento Dental Pty Ltd (ACN 613 387 036) as trustee for the Sorrento Dental Trust (ABN 53 223 159 971), of 135 Shoreham Road, Red Hill VIC 3937. In this policy, “we”, “us” and “the practice” mean Red Hill Dental Practice.

We are bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, as a private health service provider in Victoria, by the Health Privacy Principles in the Health Records Act 2001 (Vic). Our clinicians are also bound by the Dental Board of Australia's code of conduct and Ahpra's advertising guidelines, and we follow Australian Dental Association guidance on patient records and confidentiality.

What we collect

We collect only what we need in order to provide safe dental care and to run the practice. That generally includes:

  • Your name, date of birth, address, phone number and email address
  • Medicare, health fund, DVA or concession details where relevant to your account
  • Your medical and dental history, medicines, allergies and relevant health conditions
  • Clinical records, treatment notes, photographs, scans and radiographs taken as part of your care
  • Appointment history, correspondence with us, and payment and account records
  • Where you contact us by phone or email, the content of that contact

How we collect it

Usually directly from you: in person, over the phone, by email, or on the health history form you complete as a new patient. Where you are a child or where you have asked someone to act for you, we may collect information from a parent, guardian or authorised representative.

Sometimes we receive information from others involved in your care, such as a referring dentist or doctor, a specialist, your health fund or Medicare. We will only do this where it is reasonably necessary for your care or your account.

Why we use it

  • To assess, plan, provide and review your dental treatment
  • To communicate with you about appointments, recalls, results and treatment
  • To process payments and health fund, Medicare or DVA claims
  • To meet our legal, professional, insurance and record-keeping obligations
  • To manage complaints, feedback and the day-to-day running of the practice

Who we may share it with

We do not sell your information and we do not share it for marketing by others. We may disclose it:

  • To clinicians and staff within the practice involved in your care
  • To dental laboratories and technicians who make appliances, crowns or dentures for you
  • To specialists, other dentists, your doctor or a hospital where you are referred, or where they refer you to us
  • To your health fund, Medicare, DVA or a government scheme in order to process a claim you have made
  • To our payment processors and terminals (including HICAPS) to complete a transaction
  • To our IT and software providers, who may access records incidentally while supporting the systems that hold them, under confidentiality obligations
  • To our accountants, insurers or lawyers, or a debt recovery agency, where reasonably necessary
  • Where we are required or permitted by law, including where there is a serious threat to someone's life, health or safety

Overseas handling

Your information is stored in our practice management system, provided by CareStack (Good Methods Pty Ltd). CareStack stores information on servers located in Australia and overseas, including in the United States, the United Kingdom, Ireland, the Netherlands, Singapore and Japan. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.

This website is hosted by Lovable, a company based in the United States and Sweden. Technical information about your visit (described under “This website”) may be processed outside Australia, including in the United States and Europe. Google may also process the map requests described under “This website” outside Australia, including in the United States.

This website

This website does not include a contact or booking form, and we do not ask you to submit health information through it. The way to reach us is by phone or email.

Our website host, Lovable, records standard technical information such as your IP address, browser type and the pages requested, in order to serve the site and keep it secure.

Lovable also gives us visitor statistics for this site: the number of visitors and page views, how long visits last, and summaries by page, referring website, device type and country. We see these only as totals, and we use them to understand how the site is used and to improve it. Lovable says its analytics measures overall traffic rather than individual people and does not build profiles of visitors. The statistics we see contain no health information and do not identify anyone. Our host still processes the technical information described above, including your IP address and the pages you request, in order to serve the site.

The site carries no advertising and uses no advertising cookies, and we do not use your browsing of this site to build a profile of you.

Our typefaces are served from this website itself, so opening a page does not contact Google. The map on the contact page loads from Google only if you select “Show map”. Once it loads, Google receives your IP address and standard request details, and may set cookies in your browser. Google handles this information under its own privacy policy. If you would rather not load the map, our address is in the footer of every page, and you can call us for directions.

Photographs

Clinical photographs and radiographs form part of your record and are used for your diagnosis, treatment and review. We do not publish any image in which a patient is identifiable without that person's separate, documented consent, which you are free to decline or later withdraw.

Keeping it secure

Patient records are held in our practice management software, CareStack, which is access-controlled and backed up. Any paper records are kept securely on the premises. Access is limited to staff who need it for your care or your account, and everyone at the practice is bound by confidentiality.

If a data breach is likely to cause serious harm to anyone whose information is involved, we will notify them and the Office of the Australian Information Commissioner, as required under the Notifiable Data Breaches scheme.

How long we keep it

We retain patient health records for a minimum of seven years from the date of your last appointment. Where a record was created while you were under 18, we retain it at least until you turn 25. We may retain records for longer where this is clinically appropriate or required for legal reasons.

Access and correction

You may ask to see the personal and health information we hold about you, and to have anything inaccurate corrected. Please ask us in writing at info@rhdp.com.au or speak to our practice manager.

We will respond as soon as we can, and within 30 days. In limited circumstances permitted by law we may need to decline a request, or provide the information in another form such as a summary or a supervised viewing; if so, we will explain why in writing. There is no charge for making a request. If giving you access involves copying records or supervising a viewing, we may charge a fee, which will not exceed the maximum allowed under the Health Records Act 2001 (Vic), and we will tell you the cost first. We do not charge for correcting your information.

Complaints

If you are concerned about how we have handled your information, please tell us first. Email info@rhdp.com.au, write to us at 135 Shoreham Road, Red Hill VIC 3937, or call 03 5989 2144 and ask for the practice manager. We will acknowledge your complaint, look into it, and aim to give you a written response within 30 days. If we need longer, we will tell you why.

If you are not satisfied with our response, you can contact the Health Complaints Commissioner (Victoria) on 1300 582 113 or at hcc.vic.gov.au, or the Office of the Australian Information Commissioner on 1300 363 992 or at oaic.gov.au.

About the information on this website

Everything written about treatment on this site is general information only. It is not a diagnosis, a recommendation or a substitute for an examination and a conversation with a dentist or doctor. Whether any treatment is suitable for you, and what it may achieve, can only be determined individually.

If you see anything on this site that appears inaccurate or out of date, please tell us and we will correct it.

Changes to this policy

We review this policy from time to time. The current version is always the one published on this page. Last updated: September 2026.

Questions about your information? Call us on 03 5989 2144 or email info@rhdp.com.au.