Privacy Policy

Company & Website Information

This is the privacy policy for Prescience Health.

The responsible controller for the processing on this site is:

Prescience Health

P.O. Box 5013

Maroochydore BC QLD 4558

Australia

Email: contact@presciencehealth.com.au

Phone: +61 493 112 323

Data protection Officer

You may reach our Data Protection Officer at: director@presciencehealth.com.au

The protection of your personal data is of particular concern to us. We treat the personal data provided by you in the context of the use of our website and services confidentially and in accordance with the applicable data protection laws as well as this privacy policy.

In the following sections, we inform you in detail about the personal data we collect, the purposes for which it is used, with whom we share data, and which privacy rights you may be entitled to.

Definitions

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Legal basis means a lawful ground for data processing under the applicable privacy laws.

Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The terms personal data and personal information have been used interchangeably in this Privacy Policy.

Privacy Policy refers to the current policy designed to inform you how our Website collects, stores, protects, processes, discloses, and retains your personal data.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, including both processors and controllers.

Sensitive personal data means personal data which reveals racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Service providers are entities to whom data is disclosed and the processing of data takes by the service provider on our behalf as per the provisions of the contract/data processing agreement signed with them.

Scope

Under Australian privacy laws, Prescience Health acts as a data controller for the personal information you provide when using our website and services. This includes, but is not limited to, data collected during health testing processes, payment transactions, and user interactions on our website.

Data Processing Activities

We collect certain personal information to provide specific services and functionalities on our website. Below is an overview of the types of data we collect and how we process it:

Health Testing Services

  • Personal Data Collected: Health information, contact details, and other relevant personal data necessary for conducting private health tests.
  • Legal Basis: The processing of this data is necessary for the performance of a contract (e.g., the health services you have requested).
  • Retention: Health information, contact details, and other relevant personal data necessary for conducting private health tests.

Payment Processing

  • Personal Data Collected: Contact details and payment data.
  • Service Provider: Stripe is used to process payments securely on our behalf.
  • Legal Basis: The processing is requried for the performance of the contract.
  • Retention: Payment data is retained according to legal requirements for financial record-keeping.

Newsletter

  • Personal Data Collected: First name, last name, email address.
  • Purpose: To provide you with our newsletter, which is independent of the health testing services.
  • Legal Basis: Consent, which you can withdraw at any time by unsubscribing.
  • Retention: The deidentified data will be retained while you are subscribed to the newsletter.

Product Research

  • Personal Data Collected: Deidentified health results and purchase details
  • Purpose: To better our services and gain insights.
  • Legal Basis: Legitimate interests in improving our products and conducting medical research, or consent where required by law. Deidentified data may be used for scientific research purposes in compliance with applicable privacy regulations.
  • Retention: Your deidentified data will be retained only as long as necessary for the purposes for which it was collected.

Data sharing

We share your personal data with third-party service providers such as Stripe solely for the purpose of providing the services you have requested. All data resides in Australia, and we do not transfer your data internationally.

Cookies and Tracking Technologies

At this time, we do not use cookies or similar tracking technologies on our website. However, we may implement essential and non-essential cookies in the future to improve our services. If we do so, this policy will be updated accordingly.

Your Rights

As a user of Prescience Health's services, you are entitled to various rights regarding your personal data under the Australian Privacy Act 1988 (Cth):

1. Right to Access Personal Data

You have the right to request access to the personal data we hold about you. This includes any personal information collected and processed during your interactions with our webste and services.

  • How to exercise this right: To request access, please contact us at contact@presciencehealth.com.au. We may required you to verify your identity before fulfilling your request to ensure the privacy and security of your data.
  • Response time: We will respond to your request within a reasonable timeframe, typically within 30 days.

2. Right to Correction

If you believe that any of the personal data we hold about you is incorrect, incomplete, or outdated, you have the right to request that we correct this information.

  • How to exercise this right: Contact us at contact@presciencehealth.com.au with details of the correction required. We may take steps to verify the accuracy of the information before making any changes.
  • Response time: We aim to correct any inaccuracies as soon as possible, usually within 30 days of your request.

3. Right to Deletion (Right to Erasure)

You may request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or if you withdraw your consent (where consent was the legal basis for processing).

  • How to exercise this right: To request deletion, please email us at contact@presciencehealth.com.au. Please note that we may be required to retain certain data to comply with legal obligations, such as record-keeping requirements.
  • Response time: We will review your request and respond within 30 days, advising whether your data can be deleted or if retention is required for legal reasons.

4. Right to Complain

If you believe that we have breached our obligations under the Privacy Act or have mishandled your personal data, you have the right to lodge a complaint.

  • How to lodge a complaint: Complaints can be submitted to us directly at contact@presciencehealth.com.au. Please provide detailed information about your complaint, including any relevant documents or correspondence.
  • How to lodge a complaint: We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If we are unable to resolve the complaint within this timeframe, we will inform you of the delay and provide an updated timeframe for resolution.
  • Escalation to the Office of the Australian Information Commissioner (OAIC): If you are not satisfied with our response, you can escalate your complaint to the OAIC. More information about this process can be found on the OAIC's website at www.oaic.gov.au.

5. Right to Object to Processing

You have the right to object to the processing of your personal data based on legitimate interests, or where processing is for direct marketing purposes.

  • How to exercise this right: To object to processing, please contact us at contact@presciencehealth.com.au. If you object to processing for direct marketing, we will cease processing your data for this purpose immediately. For objections related to other legitimate interests, we will assess your request and either stop processing your data or provide you with compelling legitimate grounds for continuing the processing.

6. Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

  • How to exercise this right: You can withdraw your consent by contacting us at contact@presciencehealth.com.au or by using any opt-out mechanisms provided in our communications (e.g., unsubscribe links in emails).
  • Response time: We will review your request and respond within 30 days, advising whether your data can be deleted or if retention is required for legal reasons.

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected or as required by Australian law. Specific retention periods are detailed in the relevant sections above.

Updates to this Notice

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. If significant changes are made, we may also notify you through other means, such as email or a notification on our website.

Updated 4/9/2024