How Otivity collects, uses, stores, and protects your personal and health information — in strict accordance with Australian privacy law and clinical best practice.
At Otivity, our clinical focus is on bridging the gap between your clinical capacity and your real-world capability. We are committed to collecting only the “signal” — the specific information necessary to provide precise, evidence-informed occupational therapy.
We safeguard your personal and health data in strict accordance with:
To provide comprehensive assessments and interventions, we collect personal and sensitive health information. Under APP 2, you have the right to interact with us anonymously or using a pseudonym where it is lawful and practicable; however, for medicolegal assessments and funding claims, verifiable identification is legally required.
We collect:
Name, date of birth, contact information, and address.
Medical history, diagnoses, functional baseline data, psychological and physical assessments, and clinical session notes.
Details required to facilitate your specific funding pathway — NDIS, Medicare, WorkCover WA, Insurance Commission of Western Australia (ICWA), and the Department of Veterans’ Affairs (DVA).
Your data is utilised strictly for clinical reasoning, forensic reporting, and operational compliance. In line with the NDIS Code of Conduct, we presume you have the capacity to make decisions about your data. We will always seek your explicit, informed consent before using your information for:
Otivity operates a minimalist, highly secure digital infrastructure to protect your information from misuse, loss, or unauthorised access.
All clinical notes and communications are stored on encrypted, AHPRA-compliant practice management software. Access is strictly limited to Ian Cheok (Principal Occupational Therapist) and authorised administrative personnel.
In the unlikely event of a data breach that is likely to result in serious harm, we are legally obligated to notify you and the Office of the Australian Information Commissioner (OAIC) promptly, taking immediate steps to mitigate any risk.
We respect the strict boundaries of your health data. We will not disclose your information to third parties unless:
You are the ultimate owner of your health narrative. Under Australian privacy laws, you have the right to:
To discuss how we manage your data, to request access to your records, or to lodge a privacy concern, please contact:
This policy was last reviewed June 2026 and will be updated as required by changes in law or practice.