Freedom Physiology Pty Ltd (A.C.N. 682 273 767) (we, us and our) is committed to providing excellent services to you.
The Privacy Act 1988 (Cth) (the Privacy Act) protects personal information and requires that we comply with the Australian Privacy Principles when we handle your personal information.
This Privacy Policy explains our approach to dealing with your Personal Information. We set out how we collect, hold, manage and use Personal Information, including when you visit, interact with or use our website.
By using our website or engaging our services, you agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, do not use our website or engage our services.
We may update our Privacy Policy from time to time by posting a new version on our website and it will be binding on you and us from the date it is posted on our website.
Scope of Policy
- This Privacy Policy applies to all Personal Information we hold.
- “Personal Information” under the Privacy Act is defined to mean information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion. This may include an individual’s name, address, phone number, date of birth, Sensitive Information, photographs, etc.
- “Sensitive Information” under the Privacy Act is Personal Information that includes information about an individual’s racial or ethnic origin, political opinions or associations, religious or philosophical beliefs, membership of a trade union or associations, sexual orientation or practices, criminal record, health or genetic information.
Your Consent
- By using our website and accessing our goods and services, you consent to us using any Personal Information that we collect for any of the purposes set out in this Privacy Policy.
Dealing with Us Anonymously
- You have the right to deal with us anonymously or under a pseudonym unless it is impracticable for us to do so or unless we are required or authorised by law to only deal with identified individuals.
Collection of Personal Information
Why do we collect Personal Information?
- We collect and hold Personal Information (including Sensitive Information) that is reasonably necessary for the services we provide. We also use it for directly related business activities, such as for processing payments.
How do we collect Personal Information?
- We will generally collect Personal Information from you directly through email or other communication with you, applications, or through a face-to-face meeting or telephone conversation with you.
- We may also collect Personal Information from your use of our website including when you visit, access, contact us or use other services provided on our website.
- In some circumstances, we may collect Personal Information from other sources. This is often because it is not practical or reasonable to collect it from you directly. This may include information from:
- Your guardian or responsible person
- Other involved healthcare providers, such as specialists, allied health professionals, hospitals, community health services and pathology and diagnostic imaging services
- Your health fund, Medicare, or the Department of Veterans’ Affairs (as necessary)
What Personal Information do we collect?
- We may collect and hold the following types of Personal Information:
- Your name
- Your date of birth and age range
- Your gender
- Your phone number, email address, and other contact details
- Your nationality
- Medical information, including medical history, medications, allergies, adverse events, immunisations, social history, family history and risk factors
- Medicare number (where available) for identification and claiming purposes
- Health fund details
- Job title or description
- Organisation with which you are affiliated as an employee, contractor or agent
- Payment details
- Information provided by you when you use or request other services from us
- In the course of providing our services to you, we may also collect and hold more detailed Personal Information as required to perform our services.
- If you choose to correspond with us through email, we may retain the content of your email messages together with your email address and our responses. We provide the same protections for these electronic communications that we employ in the maintenance of information received by mail and telephone.
Retaining Your Personal Information
- We will retain your personal information for the duration of your use of our website or services. When you cease use of our services or website, we will retain your Personal Information for no longer than 7 years or for any such period that it is necessary for us to retain your Personal Information (the Retention Period).
- We will make your Personal Information available to you if requested.
Destruction of Your Personal Information
- Once the Retention Period has lapsed, we will ensure the timely and secure destruction and/or disposal of your Personal Information, including both physical information and cyber information.
- If at any other time, you request we destroy and/or dispose of your Personal Information, we will comply with your request in a timely matter, to the extent that it does not interfere with the conduct of our business.
How We Use Your Personal Information
- We collect, use and disclose Personal Information for purposes associated with conducting our business, providing services to you, marketing and promotional efforts, and to improve our content and service offerings, including:
- Facilitating services between you and us, entities associated with us and/or third-party individuals and organisations who we work with or alongside to provide services to you. This includes (but is not limited to) providing information relating to case coordination and support coordination for clients that engage us for services related to Return to Work SA and/or the NDIS
- Monitoring the use of our website
- Improving the quality of our service
- Administrative purposes
- Marketing communications purposes
- Recruitment
- Statistical analysis of the usage of our website
- Complying with the law, including privacy legislation
- We sometimes may share your Personal Information:
- With healthcare providers
- When required or authorised by law
- When it is necessary to lessen or prevent a serious threat to a person’s life, health or safety or public health or safety
- To assist in locating a missing person
- For the purpose of confidential dispute resolution process
- When there is a statutory requirement to share certain Personal Information
- Occasionally, we may also use the Personal Information we collect to notify you about important changes to our website and new services we think you will find valuable. You may notify us at any time if you do not wish to receive these offers by emailing us at the link provided on notifications, or by contacting us at our contact email address at the end of this policy.
Breach of Personal Information
Security of Your Personal Information
- We will endeavour to protect your Personal Information from unauthorised interference (including access or disclosure).
Informing You of a Data Breach
- A data breach will occur if there has been unauthorised interference to your Personal Information, and that interference is likely to result in serious harm to you (Data Breach).
- If there is a Data Breach, we will determine if the Data Breach has caused or is likely to cause serious harm. If we determine that serious harm has or will be caused, we will notify you and the relevant reporting body of the Data Breach.
Direct Marketing
- If you have given us your express consent to:
- Provide you with direct marketing communications; or
- Provide your Personal Information to third party individuals and organisations who we work with or alongside to provide services to you,
we may collect, hold, use and disclose Personal Information in accordance with that consent to enable us (or those third-party individuals and organisations, as the case may be) to provide you information about, and offer you, goods and services.
- If you give us consent to provide you with direct marketing communications, you can later request not to receive direct marketing communications. You may also request that we do not provide your Personal Information to any of our third-party providers in order for them to provide you with direct marketing communications.
Disclosure
- Such information may be shared with others as de-identified data in aggregated form.
- Personally-identifiable information or business information will not be shared with third parties except as required by law or where you have given us your express consent to do so.
- We may need to provide your Personal Information to third parties who we engage to assist us to provide goods and services to you, such as:
- Service providers who we engage to assist us in providing services to you
- Information technology service providers
- Payment processors
- Where your Personal Information is disclosed to these third parties, they will only be authorised to use your Personal Information for the purpose that we supplied it to them. If those third parties are located overseas, then your Personal Information may be transferred overseas.
Cookies and Data Activity
- We may use standard technology called ‘cookies’ and similar technologies on our Website. Cookies are small data files that are stored on your computer when you visit a particular app or website, which allow your web browser to remember certain information.
- By using our website, you agree to our use of cookies and our Website will issue cookies as soon as you visit our website. You may disable cookies by turning them off in your browser, however some functions of our website will not be available to you if you do this.
- Sometimes information that you upload is provided with associated metadata. If you do not want us to use the metadata you must remove it before uploading it onto our website and other applications and tools.
- We may collect data that is associated with your visit, including the pages you visit, the activities you do and the purchases you make etc. We may also collect information relating to the mobile phone or other device including the device type, the browser, location, IP address and search words used. We may collect, use and disclose and store this information in any of the ways set out in this Privacy Policy.
Data Security and Storage
- Personal Information collected by us will be stored and processed on servers located within and outside of Australia. To prevent unauthorised access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.
- In other limited circumstances, we may need to send your Personal Information overseas. These circumstances include:
- Where we have a supplier assisting us with the provision of goods and services and our business functions
- Where a third-party application is being used in connection with our interactions with you
- We will take all reasonable steps to maintain the security of Personal Information in these circumstances in accordance with this Privacy Policy, but our ability to ultimately control where these third-party providers host their applications or process their data may be limited.
Links to Other Applications and Websites
- Our website may contain links to other applications, websites and tools that are not owned, controlled or operated by us. We are not responsible for the practices employed by applications linked to or from our website or the information or content contained on them.
- Please remember that when you use a link to go from our website to another application, our Privacy Policy is no longer in effect. Your browsing and interaction on any other application, including applications that have a link on our Website, is subject to that application’s own rules and policies. Please read over those rules and policies before proceeding.
EU General Data Protection Regulation (GDPR)
- We are only subject to the GDPR to the extent the jurisdiction of the GDPR lawfully applies to us. Where your personal data is protected by the GDPR, we will process that data in accordance with the GDPR.
Legal Disclosure of Personal Information
- We reserve the right to disclose any Personal Information which identifies you as required by law and when we believe that disclosure is necessary to protect our rights, or to comply with a judicial proceeding, court order, or legal process served on our website.
How to Opt-out or Access Your Personal Information
- You have the right to request access to and correction of your Personal Information.
- If you:
- Want to find out what Personal Information we hold about you
- Believe any of your Personal Information held by us is inaccurate, out of date, incomplete or it is not necessary for us to continue to hold it
- Want to request not to receive direct marketing communications or that we do not provide your Personal Information to any of our third party providers in order for them to provide you with direct marketing communications
- Wish to make a complaint about a breach of the Privacy Act, Australian Privacy Principles or a privacy code that applies to us,
please contact us by emailing us at our contact email address at the end of this policy. We will respond within a reasonable time.
- From time to time, we may ask you to verify that your Personal Information held by us is accurate. You may also request that we correct or update your Personal Information.
- If you are not happy with our response, you may complain directly to the Office of the Australian Information Commissioner.
Contact Us
- We take complaints and concerns regarding your privacy seriously. You should express any privacy concerns you have in writing.
- For any queries, complaints or requests regarding this policy or our handling or use of your Personal Information, please contact us at [email protected].