Perth Adult Speech Pathology’s (PASP) payments gateway is powered by Braintree, a subsidiary of PayPal, who as one of the world’s largest payments providers are protected by bank-grade encryption and world-class security protocols.

As a security measure, card details are authorised through our partners and not stored by either us, or our practice management provider (Halaxy) directly, so payment data is not stored with patient records and both PASP and Halaxy cannot retrieve card details.

When a patient’s or client’s card details are entered into Halaxy via an intake form, they are stored and tokenised by PayPal’s payments gateway. This means that once initially entered and captured, card details are not visible to anybody within the clinic or via our practice management software. If card details need to be altered or updated, this requires the card to be completely re-entered, as a tokenised card is unable to be edited.

In the course of your treatment, personal information about you is collected to enable your treatment. All notes taken in the course of your treatment and all communications relating to your treatment become a part of your clinical records. Your clinical records are stored electronically in your patient file, which you consent to as a patient of this practice. You have a general right to access your records (subject to some exceptions which mainly relate to privacy, health or legal considerations) and can request access to your records. Your request must be made in writing, after which your request will be discussed with you.

We value the confidentiality of your clinical records. All information obtained during your treatment is kept confidential and secure in bank-grade secure servers, except when:

• It is subpoenaed by a court;
• Failure to disclose the information would place you or another person at risk of harm; or
• Your prior approval has been obtained to:
  • Provide a written report to another professional or agency, e.g. to a lawyer; or
  • Discuss the material with another person, e.g. a parent, relative, carer or employer.

If you claim rebates from funding bodies, doctors and health practitioners may be required to provide summary reports to referring doctors, specialists and/or agencies regarding your progress. Health research using de-identified data may be undertaken by this practice.

This practice does not use social media to communicate with our clients. As such, we are unable to accept requests to connect through LinkedIn, Facebook, Google Plus, Twitter or other social media technologies. This is to protect the identity and confidentiality of our clients. On occasions, we do write blog entries which may identify individuals, but only with their prior written permission to do so.