Privacy Policy
How K Family Dental collects, uses, stores and protects your personal and health information.
Last updated: 7 October 2026
About this policy
K Family Dental (“we”, “us”, “our”) is a dental practice at Unit 52/47 Neridah St, Chatswood NSW 2067. We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records and Information Privacy Act 2002 (NSW).
This policy explains what information we collect, why we collect it, how we use and protect it, and how you can access it or make a complaint. It applies to our patients, to people who contact us, and to visitors to this website.
Information we collect
If you are a patient
To give you safe, appropriate dental care we collect information that may include:
- your name, date of birth, address, phone number and email address
- emergency contact, parent or guardian details
- Medicare, health fund and concession card details
- your medical and dental history, medications and allergies
- clinical notes, X-rays, photographs, scans and treatment plans
- appointment, billing and payment records
Health information is sensitive information. We only collect it with your consent and where it is needed to provide our services, or where the law allows it.
If you contact us
When you phone, email or send an enquiry through our website, we collect the details you give us, such as your name, email address, phone number, your preferred way to be contacted and your message. Please don’t include detailed health information in a website enquiry; we will discuss it with you directly.
If you visit our website
We collect information about how our website is used. This is described in Website, cookies and analytics below.
How we collect information
We usually collect information directly from you: in person, over the phone, by email, through forms you complete, or through our website. Sometimes we collect it from other people with your consent or where the law allows, for example from your parent or guardian, another dentist, doctor or specialist who refers you to us, or your health fund.
You can deal with us anonymously or under a pseudonym for general enquiries. We cannot provide dental treatment without identifying you.
How we use your information
We use your information to:
- assess, diagnose and treat you, and manage your ongoing care
- book appointments and send appointment reminders
- process payments, Medicare and health fund claims
- respond to your enquiries
- communicate with other health practitioners involved in your care
- meet our legal, professional and insurance obligations
- improve our services and our website
We will only send you promotional messages if you have agreed to receive them, and you can opt out at any time.
When we share information
We do not sell your personal information. We may share it with:
- other health practitioners involved in your care, such as specialists, your doctor and dental laboratories
- Medicare, health funds and other payers, to process claims
- your parent, guardian or another person you have authorised
- service providers who help us run the practice, such as practice management, appointment reminder, IT and website providers, under appropriate confidentiality obligations
- government agencies, courts or regulators where we are required or authorised by law
Overseas disclosure
Some of our service providers store or process information outside Australia. In particular, our email and the enquiries you send through our website are handled by Google’s email services (Gmail and Google Workspace), and website analytics data is processed by Google Analytics. Google may store this information in the United States and other countries. Where we use an overseas provider, we take reasonable steps to make sure your information is handled in a way that is consistent with Australian privacy law.
Website, cookies and analytics
Google Analytics
We use Google Analytics to understand how people use our website so we can improve it. It records information such as the pages you view, which buttons and links you click (for example our phone numbers, booking buttons, team profiles and treatment pages), your approximate location (city or region), the device and browser you use, and how you arrived at our site.
We do not send your name, email address, phone number or anything you type into our forms to Google Analytics. Google Analytics does not store full IP addresses. We have turned off Google’s advertising and personalisation features, and we do not use this data to advertise to you.
When you first visit, a notice lets you accept or decline analytics cookies. If you decline, analytics cookies are not set. Visitors from the European Economic Area, the United Kingdom and Switzerland are not tracked unless they accept. You can change your choice at any time:
You can also block cookies in your browser settings, or install the Google Analytics opt-out browser add-on.
Cookies and similar storage we use
| Name | Purpose | How long it lasts |
|---|---|---|
_ga, _ga_2TF2Z1981H | Google Analytics: tells visits apart and measures how the site is used | Up to 2 years |
kfd_consent | Remembers whether you accepted or declined analytics (stored in your browser, not sent to us) | Until you clear your browser data |
wp-wpml_current_language | Remembers which language version of the site you are viewing | 1 day |
Other services on our website
- Our website is hosted on Google Firebase, which keeps standard server logs, such as IP addresses and the pages requested, to deliver and secure the site.
- We load fonts from Google Fonts, which means your browser connects to Google’s servers.
- Our contact form sends your enquiry to our email inbox using Google Apps Script and Gmail. We do not use third-party form services.
- Links to Google Maps, Google reviews, Facebook and Instagram take you to those services, which have their own privacy policies.
How we protect and store information
We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, change or disclosure. Access to patient records is limited to staff who need it for their work, and our staff are bound by confidentiality.
If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme.
How long we keep it
As required by NSW law, we keep health records for at least 7 years after your last visit. If you were under 18 when the information was collected, we keep the records until you turn 25. After that, we destroy or de-identify them securely. Google Analytics data is kept for no longer than 14 months.
Accessing and correcting your information
You can ask to see or get a copy of the personal and health information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Please contact us using the details below. We will respond within 30 days. We may ask you to confirm your identity, and we may charge a reasonable fee to cover the cost of giving you access, but never for making a request.
In limited situations the law allows us to refuse access, for example where it would pose a serious threat to someone’s life or health. If we refuse, we will tell you why in writing.
Complaints
If you have a concern about how we have handled your information, please contact us first so we can try to resolve it. We will respond within 30 days.
If you are not satisfied with our response, you can contact:
- the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992
- the NSW Information and Privacy Commission (for health records): ipc.nsw.gov.au, 1800 472 679
Contact us
Changes to this policy
We may update this policy from time to time. The current version is always available on this page, and the date at the top shows when it was last changed.