Privacy Policy

KDM Family Pty Ltd trading as The Dash – Health Hub
Last updated: 7th September 2026

1. We respect your privacy

1.1 The Dash – Health Hub (The Dash) respects your privacy and is committed to protecting personal and health information.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), together with our professional and legal obligations as a health service provider.

This Privacy Policy explains the kinds of personal information we collect and hold, how we collect, use, disclose and protect it, and your rights in relation to your information.

1.2 Personal information is information or an opinion about an identified person, or a person who is reasonably identifiable.

Health information includes personal information about your physical or psychological health, disability, assessment, treatment, support needs or use of a health service. Health information is sensitive information and receives additional protection under Australian privacy law.

2. Collection of personal information

2.1 The information we collect depends on your relationship with The Dash and the services you use. It may include:

your name, date of birth and contact details;

parent, guardian, caregiver, support-person or emergency-contact details;

referral and treating-provider information;

information about your health, wellbeing, disability, history, assessment, diagnosis, treatment or support needs;

assessment information, questionnaires, clinical notes, reports and correspondence;

appointment, billing and payment information;

Medicare, NDIS, EAP, private health, insurer or plan-manager information;

consent, legal authority or care-arrangement information where relevant; and

information you provide through our website, online forms, email, telephone or other communications.

Where an approved recording or AI-assisted documentation tool is proposed, relevant information will be provided and separate consent obtained where required.

2.2 We aim to collect only information that is reasonably necessary for the service or purpose involved.

You can make general enquiries without providing unnecessary health information. However, we may need particular information to provide clinical services safely, effectively or lawfully.

3. How we collect personal information

3.1 Where reasonable and practical, we collect personal information directly from you or from a person authorised to provide information on your behalf.

Information may be collected when you:

contact or communicate with us;

complete an enquiry, intake, consent or assessment form;

attend an appointment or use our services;

use our website or online systems; or

provide documents or other information to us.

3.2 With appropriate consent, authority or another lawful basis, we may also receive relevant information from third parties involved in your care or service. These may include parents or guardians, referrers, GPs and other health professionals, schools, support providers, previous practitioners, NDIS or EAP providers, insurers, funding bodies or statutory authorities.

If information is collected from another source, we will protect it in accordance with this Privacy Policy.

4. How we use your personal information

4.1 We collect, hold and use personal information where reasonably necessary to provide and manage our services. This may include:

responding to enquiries and referrals;

intake, assessment, treatment and review;

planning and coordinating care;

managing appointments and communications;

preparing authorised clinical documentation;

responding to safety concerns;

billing, rebates and funding administration;

Medicare, NDIS, EAP, private health or insurer administration;

appropriate clinical supervision, consultation and service governance;

responding to complaints, privacy requests or legal and regulatory requirements; and

maintaining secure clinical and administrative records and systems.

4.2 We may contact you by telephone, email, SMS or other agreed communication methods for purposes connected with your enquiry, appointments, care or service administration.

We do not use health information for direct marketing without the consent required by law. OAIC guidance specifically notes that health information cannot be used for direct marketing merely on the basis that an organisation holds it.

5. Disclosure of your personal information

5.1 Confidentiality is an important part of health care.

We do not ordinarily disclose clinical information outside the authorised care, administration or governance context without your consent.

Where appropriate and authorised, information may be disclosed to people or organisations such as:

your treating practitioner and authorised Dash staff;

another health professional or service involved in your care;

an authorised parent, guardian, caregiver or representative;

Medicare, Services Australia, NDIS providers, plan managers, EAP providers, private health funds, insurers or other funders;

professional supervisors or consultants;

approved technology and service providers supporting our systems; or

professional advisers such as legal advisers or insurers where reasonably necessary.

5.2 Some practitioners working from The Dash premises operate their own independent business.

Where this applies:

the practitioner's status will be made clear as part of the service arrangement;

the independent practitioner is responsible for their own legal and professional privacy obligations;

The Dash may handle information required for functions such as enquiries, intake, appointments, billing, communications, records administration, complaints or safety where Dash systems or administration are used; and

information is not automatically shared between practitioners simply because they work from the same premises or use some shared services.

Where information needs to be transferred between practitioners, appropriate consent or another lawful basis will be required.

5.3 There are circumstances in which we may be required or permitted to use or disclose information without consent. These may include where:

there is a serious threat to someone's life, health or safety;

child protection or mandatory reporting obligations apply;

urgent emergency assistance is required;

we receive a valid subpoena, court order, warrant or other lawful requirement;

disclosure is required or authorised by law or a regulatory body; or

information is reasonably necessary for a legal, insurance, complaint, audit or professional indemnity matter.

Where possible, we limit disclosure to the information reasonably necessary for the relevant purpose.

5.4 Overseas disclosure

The Dash uses third-party technology and service providers to support its clinical, administrative, financial and website functions.

Some providers may store, process or permit access to personal information outside Australia. Depending on the service involved, overseas recipients may be located in countries including the United States, Ireland and New Zealand.

We take reasonable steps required under Australian privacy law when using providers that handle personal information overseas and periodically review our provider arrangements.

6. Security and storage of your personal information

6.1 The Dash takes reasonable steps to protect personal and health information from misuse, interference, loss, unauthorised access, modification and disclosure.

Information may be held in approved clinical, administrative and cloud-based systems and, where necessary, in securely stored physical records. Safeguards include appropriate access controls, account security, confidentiality requirements, secure record storage and privacy and data-breach procedures.

6.2 No electronic transmission or information system can be guaranteed to be completely secure. We nevertheless take reasonable physical, administrative and technical steps to manage privacy and information-security risks.

6.3 We retain clinical and other records for the periods required by applicable legal, professional and operational requirements. When information is no longer required and may lawfully be destroyed, it is securely destroyed, deleted or de-identified.

7. Access to and correction of your personal information

7.1 You may request access to personal information that we hold about you. You may also ask us to correct information if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.

Requests can be made to:

Practice Manager
The Dash – Health Hub
2C / 2 Gemstone Boulevard
Carine WA 6020
admin@thedashhub.com.au

We may need to verify your identity before providing access or making a correction.

7.2 We aim to respond to access and correction requests within 30 calendar days.

In some circumstances, access may lawfully be restricted or refused, including where another person's privacy, safety or a legal obligation is involved. If we refuse or limit a request, we will provide reasons where required and explain available complaint options.

A reasonable administrative charge may apply to providing access where permitted by law. We will tell you about any proposed charge before it is incurred.

8. Privacy questions and complaints

8.1 If you have a question or complaint about how we have handled your personal information, please contact:

Practice Manager
The Dash – Health Hub
2C / 2 Gemstone Boulevard
Carine WA 6020
admin@thedashhub.com.au

We will acknowledge your concern as soon as reasonably practicable, review the relevant circumstances and information, and provide a response within a reasonable timeframe.

8.2 If you are not satisfied with our response, you may make a complaint to the Office of the Australian Information Commissioner (OAIC).

9. Changes to this Privacy Policy

9.1 We review this Privacy Policy regularly and may update it where our services, systems, information-handling practices, legal obligations or privacy requirements change.

The current version will be published on our website and will show the date it was last updated.

10. Website, cookies and online forms

10.1 Website information and analytics

Our website is hosted through Squarespace.

When you visit our website, technical and usage information may be collected to operate, secure and understand use of the site. This may include information such as pages visited, browser or device type, referral source and other website-interaction information.

We currently use Squarespace's built-in website analytics to understand broad patterns of website use and improve our website.

We do not currently use Google Analytics or Meta/Facebook Pixel through our Squarespace integrations.

10.2 Cookies

Our website uses cookies that are necessary for the website to operate. Optional analytics or performance cookies may also be used.

Non-essential cookies are restricted unless you choose to accept them.

Our cookie controls allow you to:

Accept non-essential cookies;

Decline All non-essential cookies; or

Manage Cookies and choose your preferences.

You may also manage cookies through your browser settings, although this may affect some website functions.

We do not routinely use third-party advertising pixels to track visitors across health-related pages. This is particularly appropriate for a health-service website: the OAIC's 2026 findings confirm that tracking pixels can involve collection of sensitive information where browsing activity reveals health-related information.

10.3 Online forms

Information submitted through an online form is used for the purpose for which the form is provided and related service administration.

Please avoid including extensive or unnecessary clinical information in a general website enquiry form. Where more detailed health information is required, we will collect it through an appropriate clinical or intake process.

10.4 Third-party websites

Our website may contain links to websites or services that are not owned or controlled by The Dash. These links are provided for convenience and do not mean that we endorse the privacy practices of those organisations.

Privacy Policy

1. We respect your privacy

1.1 The Dash – Health Hub (The Dash) respects your privacy and is committed to protecting personal and health information.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), together with our professional and legal obligations as a health service provider.

This Privacy Policy explains the kinds of personal information we collect and hold, how we collect, use, disclose and protect it, and your rights in relation to your information.

1.2 Personal information is information or an opinion about an identified person, or a person who is reasonably identifiable.

Health information includes personal information about your physical or psychological health, disability, assessment, treatment, support needs or use of a health service. Health information is sensitive information and receives additional protection under Australian privacy law.

2. Collection of personal information

2.1 The information we collect depends on your relationship with The Dash and the services you use. It may include:

your name, date of birth and contact details;

parent, guardian, caregiver, support-person or emergency-contact details;

referral and treating-provider information;

information about your health, wellbeing, disability, history, assessment, diagnosis, treatment or support needs;

assessment information, questionnaires, clinical notes, reports and correspondence;

appointment, billing and payment information;

Medicare, NDIS, EAP, private health, insurer or plan-manager information;

consent, legal authority or care-arrangement information where relevant; and

information you provide through our website, online forms, email, telephone or other communications.

Where an approved recording or AI-assisted documentation tool is proposed, relevant information will be provided and separate consent obtained where required.

2.2 We aim to collect only information that is reasonably necessary for the service or purpose involved.

You can make general enquiries without providing unnecessary health information. However, we may need particular information to provide clinical services safely, effectively or lawfully.

3. How we collect personal information

3.1 Where reasonable and practical, we collect personal information directly from you or from a person authorised to provide information on your behalf.

Information may be collected when you:

contact or communicate with us;

complete an enquiry, intake, consent or assessment form;

attend an appointment or use our services;

use our website or online systems; or

provide documents or other information to us.

If information is collected from another source, we will protect it in accordance with this Privacy Policy.

4. How we use your personal information

4.1 We collect, hold and use personal information where reasonably necessary to provide and manage our services. This may include:

responding to enquiries and referrals;

intake, assessment, treatment and review;

planning and coordinating care;

managing appointments and communications;

preparing authorised clinical documentation;

responding to safety concerns;

billing, rebates and funding administration;

Medicare, NDIS, EAP, private health or insurer administration;

appropriate clinical supervision, consultation and service governance;

responding to complaints, privacy requests or legal and regulatory requirements; and

maintaining secure clinical and administrative records and systems.

4.2 We may contact you by telephone, email, SMS or other agreed communication methods for purposes connected with your enquiry, appointments, care or service administration.

We do not use health information for direct marketing without the consent required by law. OAIC guidance specifically notes that health information cannot be used for direct marketing merely on the basis that an organisation holds it.

5. Disclosure of your personal information

5.1 Confidentiality is an important part of health care.

We do not ordinarily disclose clinical information outside the authorised care, administration or governance context without your consent.

Where appropriate and authorised, information may be disclosed to people or organisations such as:

your treating practitioner and authorised Dash staff;

another health professional or service involved in your care;

an authorised parent, guardian, caregiver or representative;

Medicare, Services Australia, NDIS providers, plan managers, EAP providers, private health funds, insurers or other funders;

professional supervisors or consultants;

approved technology and service providers supporting our systems; or

professional advisers such as legal advisers or insurers where reasonably necessary.

5.2 Some practitioners working from The Dash premises operate their own independent business.

Where this applies:

the practitioner's status will be made clear as part of the service arrangement;

the independent practitioner is responsible for their own legal and professional privacy obligations;

The Dash may handle information required for functions such as enquiries, intake, appointments, billing, communications, records administration, complaints or safety where Dash systems or administration are used; and

information is not automatically shared between practitioners simply because they work from the same premises or use some shared services.

Where information needs to be transferred between practitioners, appropriate consent or another lawful basis will be required.

5.3 There are circumstances in which we may be required or permitted to use or disclose information without consent. These may include where:

there is a serious threat to someone's life, health or safety;

child protection or mandatory reporting obligations apply;

urgent emergency assistance is required;

we receive a valid subpoena, court order, warrant or other lawful requirement;

disclosure is required or authorised by law or a regulatory body; or

information is reasonably necessary for a legal, insurance, complaint, audit or professional indemnity matter.

Where possible, we limit disclosure to the information reasonably necessary for the relevant purpose.

5.4 Overseas disclosure

The Dash uses third-party technology and service providers to support its clinical, administrative, financial and website functions.

Some providers may store, process or permit access to personal information outside Australia. Depending on the service involved, overseas recipients may be located in countries including the United States, Ireland and New Zealand.

We take reasonable steps required under Australian privacy law when using providers that handle personal information overseas and periodically review our provider arrangements.

6. Security and storage of your personal information

6.1 The Dash takes reasonable steps to protect personal and health information from misuse, interference, loss, unauthorised access, modification and disclosure.

6.2 No electronic transmission or information system can be guaranteed to be completely secure. We nevertheless take reasonable physical, administrative and technical steps to manage privacy and information-security risks.

6.3 We retain clinical and other records for the periods required by applicable legal, professional and operational requirements. When information is no longer required and may lawfully be destroyed, it is securely destroyed, deleted or de-identified.

7. Access to and correction of your personal information

Practice Manager
The Dash – Health Hub
2C / 2 Gemstone Boulevard
Carine WA 6020
admin@thedashhub.com.au

Practice Manager
The Dash – Health Hub
2C / 2 Gemstone Boulevard
Carine WA 6020
admin@thedashhub.com.au