Additional Details

• Clearly outline the personal and sensitive information your entity collects and holds;

• Explain how and why your practice collects and holds this information;

• Detail how patients can access, correct or request deletion of their information;

• Provide details on how an individual can lodge a complaint and how your entity deals with the information;

• State what, if any, disclosures your practice makes to overseas recipients;

• Reflect current requirements around the use of automation and AI in practice operations; and

• Demonstrate the safeguards your practice uses to protect data, including both technical and organisational measures.

Interested in learning more about why medical practices need this bundle? You can read our article on this topic here .

• Terms regarding services, fees, payment and bookings or cancellation

• Various disclaimers

• Protection of your intellectual property (e.g. copyright)

• Limiting liability e.g. for information and material, or third-party links

• How you will collect and use personal information

1. You will provide us with the information we need to prepare the Website Terms and Conditions and Privacy Policy via an online form.

2. We will then prepare the first draft of the Terms and Conditions and Policy based on your instructions;

3. We will provide the draft Terms and Conditions and Policy to you by email;

4. You are welcome to either talk to us on the telephone (for up to 30 minutes) or email your comments and questions about the draft Agreement;

5. We will then finalise the Terms and Conditions and Policy (if any changes are required and if instructions are received within 30 days of us sending you the first draft); and

6. You have a new asset to use in your Practice.

Frequently Asked Questions

If you are considering engaging You Legal to prepare Website Terms and Conditions and a Privacy Policy, here’s what you need to know:

Website Terms and Conditions are essentially a legal contract between yourself and your patients, and anyone else using your website. It provides a governance framework outlining what must be complied with in order to access and utilise the website, and they are essential in providing you with protection from any potential claims by website users. Terms and Conditions also provide a platform to address commonly asked questions, and to clarify specific items that may, or may not be, clear through the practice’s other methods of advertising.

A Website Terms and Conditions agreement should include information about the permitted use of your practice’s website, an outline of the offered services, terms relating to payment, limitations of liability, disclaimers, dispute resolution processes, intellectual property rights and any other legal issues that may be relevant to your website.

A Privacy Policy is legally required for health service providers (as well as other organisations) under the Privacy Act 1988 (Cth). It also demonstrates accountability and protects your practice from regulatory penalties. It usually outlines the specific information that is collected by the practice and states whether the information collected is kept confidential, or shared or sold to researchers or other third-party organisations. Given medical practices collect sensitive information, such as health information, a Privacy Policy is required.

A Privacy Policy should clearly outline what personal and sensitive information your practice collects and why, how it is stored, used, and shared, and what automated, or AI systems are involved in managing that information. It should also describe the technical and organisational safeguards in place to protect data such as encryption, multi-factor authentication, restricted access, and staff training. Additionally, the policy must explain how individuals can access or correct their information, and how privacy complaints are managed.

These elements together ensure compliance with the Privacy Act 1988 (Cth), together with the Australian Privacy Principles (APPs) and demonstrate your practice’s commitment to transparency and patient trust.

Whilst a Privacy Policy is mandatory for medical practices and Website Terms and Conditions are not, if your practice has a website, then Terms and Conditions are highly recommended. Both contracts complement each other, and if your practice has third-party relationships (or is planning to have them soon), offers products for sale directly through the site, or takes booking and pre-payments online, then Website Terms and Conditions are equally as important.

Not a medical or allied health practice operating from a physical premises? We can still help! Contact us below to enquire about a Privacy Policy and/or Website Terms & Conditions best suited to your situation.

You can find more information about Privacy Policies here, and more information about Website Terms and Conditions here.

Have a question?