Active Island EP
Privacy policy
Last updated 28/10/2026
Active Island EP (Patrick West, ABN 96 492 441 349) provides exercise physiology services. This policy explains how I collect, use, store and protect your personal and health information. I follow the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records Act 2001 (Vic).
What I collect
- Your name, contact details, date of birth and next of kin or emergency contact.
- Health information you or your referrer give me, such as your medical history, medications and the results of assessments.
- Notes about each session and your exercise program.
- Referral, Medicare, DVA, NDIS, private health insurance or home care package details needed to process payments and claims.
Why I collect it
To provide safe and effective care, keep accurate clinical records, communicate with you and with your GP or other health professionals involved in your care (with your consent, or where the law allows), and to process payments and claims.
Enquiries through this website
When you send an enquiry, your name, phone number, email address and message are emailed to me. The website does not keep a copy. Enquiries are received in a Gmail account provided by Google, which may store information outside Australia. Please don't include detailed medical information in the form.
This website is hosted in Australia by GoHosting, an Australian company. It does not use advertising or tracking cookies, or analytics.
How your information is stored
Your records are kept electronically using secure, password-protected services. Services I use include:
- Halaxy, for appointments, invoicing, claims and clinical records.
- Heidi Health, an AI scribe that helps me write session notes. I only use it with your consent.
- Physitrack, for your exercise programs.
- Gmail (Google), for email.
Some of these providers may store information outside Australia or outside Victoria. Where they do, I take reasonable steps to make sure your information is protected to the same standard as Australian privacy law.
How long I keep it
Health records are kept for at least 7 years after your last session. If you were under 18 when you were seen, they are kept until you turn 25, if that is later. After that, they are securely destroyed and a record is kept of what was destroyed and when.
Who I share it with
I only share your information with your consent, or where the law requires or allows it. This may include your GP or referring doctor, Medicare, DVA, the NDIS or your plan manager, your health fund, or your home care provider, so that your care and claims can be managed.
Seeing and correcting your information
You can ask for a copy of the information I hold about you, or ask me to correct it. Contact me using the details below. I will respond within 30 days. Corrections are added to your record rather than replacing what was there, as health records law requires.
If something goes wrong
If there is a data breach that is likely to cause you serious harm, I will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Questions and complaints
Please contact me first: 0480 427 441 or activeislandep@gmail.com. If you are not satisfied with my response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or the Health Complaints Commissioner in Victoria (hcc.vic.gov.au, 1300 582 113).