Privacy and Disclaimer.


Waverley Plastic Surgery” includes Mr David Ying and his staff, referred to hereon in as we” and “us”, is committed to providing quality health care to patients and their families, hereon in referred to as the “patient”.

We are committed to protecting the privacy of patient information and handling personal information in accordance with the Privacy Act 1998 (Cth), the Privacy Amendment (Enhancing Privacy Protection) Act 2012, and the Australian Privacy Principles and relevant Victorian legislation (referred to collectively as ‘privacy legislation’).

This Privacy Policy explains how we collect, use and disclose personal information, how patients may access and or correct any information. It also explains how to complain about a possible breach of privacy.

This Privacy Policy is current from 01st September 2016 and is reviewed annually. We may make changes to our policy, processes and systems in relation to how we handle personal information and will update our Privacy Policy to reflect any changes. Changes will be available on our website and in our practices.

We confirm the patients’ personal information is handled in accordance with our privacy policy and in a manner consistent with the privacy legislation.



We only collect information with the patient’s consent.

Information collected will be necessary and relevant to provide the patient with medical care and treatment, and manage our medical practice. This information may include name, address, date of birth, gender, health information, family history, credit card and direct debit details and contact details. This information may be stored on our computer medical records system and/or in handwritten medical records.

Wherever practicable, we will collect information from the patient. However, we may also need to collect information from other sources such as treating specialists, radiologists, pathologists, hospitals and other health care providers.

We may collect information over the phone, in writing, in person or by email. Patient information is collected by medically, and non-medical trained staff.

In emergency situations, we may collect information from patients’ relatives or friends.

We are required by law to retain patients’ records for a specified period, depending on their age at the time of service. We are required by law to retain patient information of adults, seven years from the date of last attendance and patients under the age of eighteen, until they turn twenty-five years of age.


Use and Disclosure.

Information may be shared with other health professional involved with the patient. We treat personal information as private and confidential. We only use or disclose information for purposes directly related to current and ongoing patient care and treatment. Examples are, the disclosure of test results to patients’ other specialists, requests for x-rays and communicating with referring doctors in writing after a consultation.

Circumstances where we are permitted or required by law to disclose personal information to third parties, include those to; Medicare or private health funds for billing and rebates, to police, solicitors, government regulatory bodies, tribunals, courts of law, hospitals, debt collection agents or the electronic transfer of prescription services. We also provide statistical data to third parties for teaching and research purposes. Medical practitioners are legally obliged to disclose personal information for mandatory reporting of some infectious diseases.

We may disclose information to third parties so they can carry out activities on our behalf, for example; IT providers (data backup), solicitors or debt collection agents. We impose encrypted, secure and confidential conditions needed to carryout such activities.

Data Quality and Security.

We take reasonable steps to ensure that personal information is accurate, complete, up to date. Our staff may ask to confirm that your contact details are correct when you attend a consultation. We request patients advise us of information which is incorrect or out of date.

Personal information we hold is protected by:

  • Securing our premises; and
  • Placing passwords, encryption and varying access levels on databases to limit access and protect electronic information from unauthorised interference, access, modification and disclosure.
  • Secure shredding of all documents


If any information is not accurate, complete or up to date, we ask that you contact us in writing (see details below).


Patients (and their agents) can request access to their own medical records. The request must be in writing and the request will be responded to within a reasonable time. The request may be to view information, request copies or parts thereof. A fee may be charged for administration costs of retrieving and providing copies of patient information.

We may deny access to medical records in certain circumstances permitted by law, if disclosure may cause a serious threat to patients’ health and safety. We are required by law to provide reason why access is denied and provide options, should the patient wish to respond to our decision.

Children’s Right to privacy regarding health information can be upheld by us and is based on professional judgement of the health practitioner and is consistent with law. We can restrict access to this information by parents or guardians.

Patients who find that their information is not accurate or complete, may request to have that information amended accordingly. Upon such request, the patient’s health information may be made available to another health practitioner.



Complaints about the privacy of personal information may be expressed in writing to us, so we can attempt to resolve it in accordance with our complaints handling procedures.

If you are dissatisfied with our handling of a complaint or the outcome, you may make an application to the Privacy Commissioner in your State or Territory or the Australian Information Commissioner via the following details:


  • Level 8, Piccadilly Tower,
133 Castlereagh Street,
  • Privacy Hotline: 1300 363 992 


We will not transfer personal information to an overseas recipient unless we have relevant consent or are required by law.


General disclaimer.

The content of the Waverley Plastic Surgery web site, such as text, graphics, images, and information obtained from third parties (the ‘content’), are for informational purposes only. The content is not intended to be a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider within your country or place of residency with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay in seeking it because of something you have read on the Waverley Plastic Surgery web site.

If you think you may have a medical emergency, call your doctor or emergency services immediately by phoning 000. While all attempts have been made to ensure its accuracy, the authors, Waverley Plastic Surgery, Mr David Ying and any associated parties, to the extent permitted by law, accept no responsibility for loss, injury, claim or damage resulting from the use or application of information on this web site.

Reliance on any information provided by Waverley Plastic Surgery, Waverley Plastic Surgery employees, others appearing on the Waverley Plastic Surgery web site at the invitation of, Mr David Ying or other visitors to the Waverley Plastic Surgery web site is solely at your own risk. While there is no intent on the part of authors, it may be possible that the Waverley Plastic Surgery web site may contain health or medical related materials, which you find offensive. If you do not want to view material of this nature or may be offended by such materials, please do not use the Waverley Plastic Surgery web site.

Our web site may contain links to other sites not produced or endorsed by Waverley Plastic Surgery. Whilst such links are provided for your convenience, you should be aware that the information handling practices of the linked web sites might not be the same as ours.

To the fullest extent permitted by law, Waverley Plastic Surgery is not responsible for the content of linked third-party sites; sites framed within the Waverley Plastic Surgery web site, or third-party advertisements, and do not make any representations regarding their content or accuracy. Your use of third-party web sites is at your own risk and subject to the terms and conditions of use for such sites.


Please direct any queries, complaints, requests for access to medical records to in writing to: Mr David Ying, 169 Waverley Rd, Chadstone. Victoria, 3148, phone: 03 9807 8300 or email


Members have extensive surgical education and training, including a minimum of 12 years medical and surgical education, with at least 5 years of specialist postgraduate training.

Contact Us Today For a Consultation 03 9807 8300