Privacy policy
How our clinics collect, use, store and protect your personal and health information, and what you can do if you want to see it, correct it or raise a concern.
Last updated: 15 September 2026
Who we are
Dao Yuan Medical Group is the name our clinics share. Each clinic is operated by its own company, and that company is responsible for the information it holds about you.
- Melbourne CBD
- Instant Action Pty Ltd, ABN 97 669 954 107
- 2/16 Liverpool St, Melbourne VIC 3000
- Preston
- Penny Medical Services Pty. Ltd., ABN 13 605 096 133
- 431–433 High St, Preston VIC 3072
- Bundoora
- Penny Medical Services Pty. Ltd., ABN 13 605 096 133
- 1396 Plenty Rd, Bundoora VIC 3083
We handle your information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Health Records Act 2001 (Vic).
What we collect
We only collect what we need to look after you properly. This information is recorded in our clinical system, Best Practice. Our website does not collect it.
- Your name, date of birth, address, phone number and email
- Your Medicare, Department of Veterans' Affairs and concession card details
- Your emergency contact and, where relevant, your next of kin
- Your medical history, medicines, allergies, immunisations and family history
- Test results, referrals, letters and reports from other health professionals
- What we need to bill your appointments and claim your Medicare rebate
You can see us without giving your name where it is lawful and practical, although it limits the care we can give, and you will not be able to claim a Medicare rebate.
How we collect it
- From you, when you register, during your consultations and when you contact us
- Through HotDoc, when you book an appointment online
- From other health professionals involved in your care, such as specialists, hospitals, pathology and imaging services
- From the Australian Immunisation Register
- From your My Health Record, such as test results and hospital discharge summaries
- From a parent, guardian or carer, when you cannot give it yourself
How we use and share it
We use your information to:
- Provide your health care
- Write referrals and request tests
- Bill your appointments and claim your Medicare rebate
- Send appointment reminders and let you know when there is something to discuss, usually by SMS
- Meet our accreditation, quality and legal obligations
We share it only when your care needs it, when you agree, or when the law requires it. That can include:
- The specialists, hospitals, pathology and imaging services involved in your care
- Another clinic in our group, if your doctor refers you there
- Medicare and Services Australia, to process your rebate
- The Australian Immunisation Register
- Your My Health Record, if you have one, where we upload your test results and health information. You can ask us not to.
- Government bodies where the law requires it, for example to report certain infectious diseases
We never sell your information, and we do not use it for marketing without your consent.
How we store and protect it
Your health record is kept electronically in Best Practice, the clinical system used by our clinics. Only staff who need it to do their job can open it, and every member of staff is bound by confidentiality.
We keep health records for at least seven years after your last visit. If we saw you as a child, we keep them until you turn 25. This is what the Health Records Act 2001 (Vic) requires.
We do not send your health information outside Australia.
Seeing and correcting your record
You can ask to see your health record or get a copy. Ask at reception or put your request in writing, and we will reply within 30 days.
Copying a record takes staff time, so a reasonable fee may apply. We will tell you the cost before we charge anything, and asking is always free.
In a few situations the law allows us to refuse, for example where access could put someone at serious risk. If that happens, we will explain why in writing.
If something in your record is wrong or out of date, tell us and we will correct it.
Our website
This section covers daoyuanmedicalgroup.com.au and the websites of each of our clinics.
- Analytics
- We use Google Analytics, through Google Tag Manager, to understand how the site is used: which pages are visited, the type of device, the approximate city and how people found us. It uses cookies and does not identify you personally. We never send health information to Google.
- Google may process this information outside Australia. You can block these cookies in your browser settings.
- Booking
- When you select Book online, you leave our site for HotDoc, which handles your booking under its own privacy policy (opens in a new tab).
- Forms
- Our website has no forms and does not collect your personal or health information. Your health record is kept only in our clinical system.
- Maps
- Address links open Google Maps, which is covered by Google's privacy policy (opens in a new tab).
Making a complaint
If you are unhappy with how we have handled your information, please tell us first. Speak with the practice manager, tell reception, or email the clinic you attend. We will respond within 30 days.
- Melbourne CBD
- Bundoora
If you are not satisfied with our response, you can contact:
- Office of the Australian Information Commissioner
- Health Complaints Commissioner, Victoria
Changes to this policy
We may update this policy from time to time. The current version is always on this page, and you can ask for a copy at reception.
This policy is also available in Chinese. If the two versions differ, the English version applies.