Privacy policy
How we handle your information.
This privacy policy describes how Dr Amir Waly collects, holds, uses, and discloses personal and health information. It is published in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Last updated: 5 June 2026
1. About this practice
This website and practice are operated by Dr Amir Waly (BPharm, MBBS, FRACGP), an independent specialist general practitioner, through Draw Group Pty Ltd (ABN 40 630 049 599), the practice’s registered business entity. The registered office is at Suite 413, 85 Whatley Crescent, Bayswater WA 6053. Dr Waly’s AHPRA registration is MED0002079575.
Patient-facing consulting takes place at Rudloc Road Medical & Dental Centre in Morley, and at the other engagements described on the About page. Written correspondence about this practice can be sent to either the registered business office above or to reception at Rudloc Road Medical & Dental Centre.
Throughout this policy, “the practice” refers to Dr Amir Waly’s independent specialist GP practice. Rudloc Road Medical & Dental Centre provides reception, nursing, billing, and facility services to the practice under a standard services arrangement; however, clinical records and the patient relationship remain the responsibility of Dr Waly.
2. What information we collect
The practice collects personal and health information that is reasonably necessary to provide medical care. This typically includes:
- identifying information (name, date of birth, address, contact details, Medicare and concession card numbers);
- health information (medical history, current concerns, medications, allergies, family history);
- consultation records, investigation results, imaging, and correspondence with other treating practitioners;
- information you provide via the website contact form (name, email, phone, message);
- limited technical information your browser sends when you visit this website (e.g. IP address, browser type) — see “Website analytics” below.
3. How we collect information
Personal and health information is generally collected directly from you — in writing, in conversation, or through forms (paper or electronic). It may also be collected from a person you authorise to act on your behalf, from referring practitioners, or from health services involved in your care.
4. Why we collect it
The practice collects, holds, and uses your information for the purposes of:
- providing you with clinical care, including consultations, procedures, investigations, and follow-up;
- communicating with other practitioners involved in your care (with your consent);
- billing, Medicare and health-fund claiming, and managing accounts;
- responding to your enquiries;
- meeting legal and professional obligations (including AHPRA, Medical Board of Australia, and notifiable disease reporting where required by law).
5. Who we share information with
Your information may be shared with:
- other treating practitioners and health services involved in your care, with your consent;
- administrative and clinical staff of Rudloc Road Medical & Dental Centre who support the practice (under appropriate confidentiality obligations);
- pathology, radiology, and other diagnostic providers, where required for your investigations;
- Medicare, private health insurers, and the Department of Veterans’ Affairs, for billing where applicable;
- government bodies, regulators, and courts where disclosure is required or authorised by law (for example, mandatory notification or response to a subpoena).
The practice does not disclose your information for direct marketing, and does not sell or rent your information.
6. Storage and security
Clinical records are stored in a secure electronic medical record system maintained on the practice’s behalf at Rudloc Road Medical & Dental Centre. Reasonable steps are taken to protect your information from misuse, loss, unauthorised access, modification, and disclosure — including access controls, audit logging, secure backups, and confidentiality agreements with all personnel.
Records are retained in accordance with Western Australian and Commonwealth requirements for medical records (typically 7 years after the last consultation, or until age 25 for minors, whichever is longer).
7. Accessing and correcting your information
You may request access to, or correction of, the personal and health information the practice holds about you. Requests should be made in writing to reception at Rudloc Road Medical & Dental Centre, or via the contact page. Reasonable steps will be taken to confirm your identity before granting access. A fee may apply for the time and materials involved in providing copies of records.
8. Website contact form
The contact form on this website transmits the information you provide (name, email, phone, subject, message) to the practice by email via Netlify Forms (form-processing infrastructure used by this website). Please do not include sensitive clinical, financial, or identity information in the contact form. Use the form only for non-clinical enquiries.
9. Website analytics
Where website analytics are in use, this practice uses Plausible Analytics — a privacy-respecting, cookieless analytics service that does not track individual visitors, does not collect personal information, does not use advertising or behavioural tracking, and complies with the GDPR, ePrivacy Directive, and the Australian Privacy Principles. Plausible records only aggregate counts of page views, referring websites, and approximate location (country level). No individually identifying information is collected or stored. The Plausible script can be inspected at plausible.io/privacy.
Limited technical information (such as your IP address, browser type, and request timing) may be retained briefly by the website’s hosting provider (Netlify) for security and operational purposes.
10. Overseas disclosure
The website’s hosting and form-processing infrastructure (Netlify) may store technical data on servers located outside Australia. No clinical or health information is sent overseas in the ordinary course of providing care.
11. Making a complaint
If you believe your privacy has been breached, please contact reception at Rudloc Road Medical & Dental Centre in the first instance and ask for your concern to be referred to Dr Waly. Complaints are taken seriously and responded to promptly.
If you are not satisfied with the response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, or by phone on 1300 363 992.
12. Updates
This policy may be updated from time to time. The current version, and the date it was last updated, will always appear at the top of this page.
13. Contact
For any privacy-related question, please contact reception on (08) 6188 5555 and ask to speak with Dr Waly, or use the contact page.