This Policy describes how Precedence Health Care Pty Ltd (Precedence), and any company which it owns or controls, manages personal information for which it is responsible, specifically personal information which is accessible via the Inca Evo platform.
Kind of Personal Information Collected by Precedence
Precedence’s Integrated Care Platform, Inca Evo, is a cloud-based health and wellness service. A description of the Inca Evo platform is set out on the website, incahealth.com.au.
Personal information which may be accessible via Inca Evo embraces:
Personal information provided by Inca Evo users is stored in a secure database and managed by Precedence. This information is provided by the user on purchase and registration of the Inca Evo product.
Precedence cannot verify and does not take responsibility for identifying persons entering information into Inca Evo, nor can it verify or take responsibility for the accuracy of such information. Inca Evo is a tool, or intermediary, enabling providers to build care plans. It is necessarily dependent upon the quality and integrity of input. Users are required to acknowledge this feature at the time of registration.
Personal information stored in the Inca Evo database is handled by Precedence in accordance with the requirements of the Privacy Act 1988 (Cth), the Health Records Act 2001 (Vic) and any other privacy, data protection or medical records legislation which may be applicable in particular circumstances.
Personal information is collected from medical practitioners and other healthcare providers when they register to use the service.
Patient personal information is not stored by Inca Evo. Patient personal information is transferred to the Inca Evo cloud platform for processing but is not retained once processed. De-identified (that is, converted to a form in which identifiers have been permanently removed and from which no specific patient can be identified or re-identified) care planning information may be stored in the cloud for remote editing and finalisation.
If medical practitioners choose to use the Inca Evo machine learning algorithms and upload an existing care plan for processing, this information is de-identified first before being uploaded to algorithms hosted in Australia. No patient identifying information is updated to these algorithms at any stage.
The only persons with incidental access to the Inca Evo database will be technical personnel who may be involved with Precedence's host website or who are engaged to maintain Precedence's web-based health tools and to provide other customer services. To the extent that such consultants may have limited access to any personal information in the Inca Evo database, they are required to provide an undertaking to comply with the terms of this privacy policy and other internal privacy protection procedures, as well as give an undertaking to limit their access to the minimum extent necessary for the performance of their obligations.
All information in the Inca Evo database is protected by logical, physical, and operational security measures of high commercial standard and the data storage facility is professionally managed.
Precedence has implemented appropriate technology and security policies, rules and other measures to protect personal information in the database from unauthorised access, improper use, alteration, unlawful or accidental destruction and accidental loss.
Account information is located on a secured server in an accredited Australian facility behind appropriate firewalls. When sensitive information is entered, it is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology.
Subscription management information (practice name and address is stored by our partner organisation Chargebee; information on their privacy and security can be found at chargebee.com.
Credit/Debit card information used for subscription purposes is stored by our partner organisation Stripe; information on their privacy and security can be found at stripe.com.
Precedence's security policy and practices are regularly reviewed and updated. They are subject to audit procedures by suitably qualified external organisations.
Where it is lawful and practicable to do so, individuals may remain anonymous or use a pseudonym, but Precedence cannot accept responsibility for any loss or damage suffered by the individual as a consequence.
The Inca Evo platform uses per-session cookies to identify a user's browser during the time that the user is logged into Inca Evo. By temporarily storing this cookie on the user's computer, Precedence avoids having to re-authenticate the user on every secure page each time the user visits the Inca Evo site. The cookie is deleted when the user logs out of Inca Evo and does not contain any personally identifiable information. If a user's browser is set to disallow per-session cookies, or if the user rejects the cookie, it will not be possible to use the relevant websites.
Purpose of Collection
Information held in the Inca Evo database is used only for the following purposes:
A patient's personal information will only be transmitted securely to the Inca Evo servers for processing and never stored. A patient’s care plan, de-identified of any patient personal information, may be stored for remote editing or finalisation by the provider.
A healthcare provider's personal information will only be disclosed to a person other than the patient's other healthcare providers where such disclosure is required or authorised by law.
Access and Correction
Registered users can obtain access by login into the system via the Inca Evo website. Alternatively, individuals can contact the Precedence Privacy Officer at the contact numbers below. Subject to adequate identification of an individual making a request, that individual will be provided with a copy of the information sought.
A user may, at any time, manually correct, update or delete any personal information contained in the Inca Evo database.
An account may be de-activated at any time by contacting Precedence.
If Precedence discovers any misuse or unauthorised handling of personal information held in the Inca Evo database, any individuals who are potentially affected will be notified and Precedence will take immediate steps to contain the problem and prevent further occurrences.
Complaints
An individual who believes that Precedence is in breach of the Australian Privacy Principles may contact the Precedence Privacy Officer on (03) 9023 0800 or send an email to privacy@precedencehealthcare.com.
Alternatively, an individual can contact (as appropriate) the Privacy Commissioner or Health Services Commissioner in their local area.
Privacy Questions or Concerns About Inca Evo
For privacy questions or concerns about Inca Evo please contact the Precedence Health Care Privacy Officer on (03) 9023 0800 or send email to privacy@precedencehealthcare.com.
Updated 22 May 2024