Privacy policy

Privacy Policy

Stay Driving OT
A trading name of Stefan Barbas Pty Ltd, ABN 70 669 456 651

Last updated: 26/07/2026

1. About this policy

Stay Driving OT ("we", "us", "our") provides occupational therapy driving assessment and driver rehabilitation services in the Perth metropolitan area.

We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

As a provider of health services, we are bound by the Privacy Act regardless of our size, and we are subject to additional obligations relating to health information.

This policy explains what personal information we collect, why we collect it, how we use and disclose it, how we keep it secure, and how you can access it or make a complaint.

2. What information we collect

Personal information we may collect includes:

  • Your name, date of birth and contact details

  • Your address and the location where services are provided

  • Emergency contact and next-of-kin details

  • Driver licence details and licence status

  • Funding information, including NDIS participant details, plan management arrangements, or insurer and employer details

  • Payment and billing information

  • Details of your enquiry and how you found us

Health information we may collect includes:

  • Your medical history, diagnoses and health conditions

  • Medications you are taking

  • Reports and correspondence from your GP, treating specialists, neuropsychologists, optometrists and other health professionals

  • Results of assessments we conduct, including vision, physical function, cognition and on-road performance

  • Our clinical notes, findings and recommendations

Health information is a form of sensitive information and attracts higher protections under the Privacy Act.

3. How we collect information

We collect information:

  • Directly from you, in person, by phone, by email, or through forms on our website

  • From your family members or carers, where you have consented or where it is reasonably necessary

  • From referring health professionals, support coordinators, insurers or employers

  • From accredited driving instructors involved in your on-road assessment

  • From the Department of Transport, where relevant to your assessment

We collect information directly from you wherever it is reasonable and practicable to do so. Where we collect information about you from someone else, we will take reasonable steps to make you aware of it.

4. Why we collect and use your information

We collect and use your personal and health information to:

  • Assess your fitness to drive or potential to learn to drive

  • Plan and deliver driver rehabilitation

  • Prepare reports and recommendations

  • Communicate with you, your family or carers, and your treating professionals

  • Arrange on-road assessments with accredited driving instructors

  • Manage funding, invoicing and payment, including NDIS claims

  • Meet our professional, legal and regulatory obligations

  • Improve our services and manage our practice

We will not use your information for a purpose other than the one it was collected for, unless you consent, or unless the law permits or requires it.

5. Who we disclose your information to

We may disclose your personal and health information to:

  • Your nominated health professionals, including your GP, treating specialists and other providers involved in your care

  • The Department of Transport, where this forms part of a licence review or assessment process

  • Accredited driving instructors engaged to conduct your on-road assessment, limited to what is necessary for safety and for the conduct of the assessment

  • Your funding body, including the National Disability Insurance Agency, plan managers, insurers or employers, where they are funding your services

  • Your family members or carers, where you have consented

  • Our service providers, described in section 6

  • Others, where required or authorised by law

Before your assessment begins, we will explain who is expected to receive your report and obtain your consent. Who receives your information depends on your individual circumstances, the reason for your assessment and how it is funded.

There are limited circumstances in which the law may require or permit us to disclose information without your consent — for example, where there is a serious and imminent threat to the life, health or safety of any person, or where disclosure is required by law.

6. Service providers and information storage

We use the following third-party systems to deliver our services:

  • Splose — practice management, clinical records, scheduling and billing

  • GoHighLevel — enquiry forms, contact management and marketing communications

  • Google Workspace (including Google Drive and Gmail) — email and document storage

These providers store information on our behalf and are bound by their own privacy and security obligations. We take reasonable steps to ensure they handle your information appropriately.

7. Overseas disclosure

Some of our service providers may store or process information on servers located outside Australia, including in the United States.

Where this occurs, we take reasonable steps to ensure that overseas recipients handle your information in accordance with the Australian Privacy Principles. By providing your information to us, you acknowledge that it may be stored or processed overseas.

8. Our website and online advertising

When you visit our website or landing pages, we may collect:

  • Your IP address and general location

  • Your device and browser type

  • Pages visited and time spent

  • The source that referred you to us, including advertising campaign information

We use Meta Pixel, a tool provided by Meta Platforms Inc., on our enquiry pages. This collects information about your visit and how you interact with our pages, and allows us to measure the effectiveness of our advertising. Meta may use this information in accordance with its own privacy policy.

You can control this tracking through your browser settings, your device privacy settings, or your Meta ad preferences.

We do not collect health information through website tracking tools. Information you type into our enquiry form is collected only when you submit it.

9. Storage and security

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include:

  • Password protection and multi-factor authentication on our systems

  • Encrypted storage and transmission

  • Limiting access to information to those who need it

  • Secure disposal of information no longer required

No method of electronic storage or transmission is completely secure. While we take reasonable steps, we cannot guarantee absolute security.

10. How long we keep your information

We retain health records for the period required by law and by our professional obligations. For adults, this is generally a minimum of seven years from the date of last service. For clients under 18, records are generally retained until the person turns 25.

After this period, records are securely destroyed or de-identified.

11. Accessing and correcting your information

You have the right to request access to the personal and health information we hold about you, and to request that it be corrected if it is inaccurate, out of date, incomplete or misleading.

To make a request, contact us using the details in section 13. We will respond within a reasonable period, usually within 30 days.

We may need to verify your identity before providing access. In limited circumstances we may refuse access — for example, where providing it would pose a serious threat to the life, health or safety of any person, or where it would unreasonably affect the privacy of others. If we refuse, we will explain why in writing.

A fee may apply for retrieving and copying records. We will tell you about any fee before we proceed.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details below. We take complaints seriously and will aim to resolve the matter promptly.

If you are not satisfied with our response, you may contact:

Office of the Australian Information Commissioner (OAIC)
Phone: 1300 363 992
Website: oaic.gov.au

Health and Disability Services Complaints Office (HaDSCO) — for complaints relating to health services in Western Australia
Phone: 1800 813 583
Website: hadsco.wa.gov.au

13. Contact us

Privacy Officer — Stay Driving OT

Email: [[email protected]]
Phone: [0449 571 641]

We are a mobile service and do not operate from a fixed clinic address. Please contact us by email or phone for any privacy-related enquiry.

14. Changes to this policy

We may update this policy from time to time. The current version will always be available on our website, with the date it was last updated shown at the top.