PRIVACY POLICY

This policy outlines the way we at Vitality Lifestyle Medicine Pty Ltd (ABN 77675934620) collect, hold, use and disclose personal information. 

 

WHAT PERSONAL INFORMATION WE COLLECT & HOW AND WHY WE COLLECT IT?

What personal information do we collect?

The personal information we collect is generally limited to: 

• name and contact details;
• date of birth;
• job information;
• opinions; and
• any communications we have.

However, we may also collect:

• sensitive information from you with your consent, such as where we ask for information about your membership of professional or trade associations; and
• information about how you use our website, via third parties.

 

How do we collect your personal information?

The main way we collect information is when you give it to us, for example, via our website sign-up, intake, or other forms, via phone, email, when you submit comments or feedback or via social media. Additionally, we may collect information from SMS interactions, such as responses to SMS notifications or promotional messages sent by us.

 

We also use cookies on our website which may identify you and track your actions and the pages you visit. This helps make our website work more securely and efficiently, such as enhancing security on our contact form, and storing your information, so you don’t have to put it afresh when you visit us again. 

At times personal information may also be gathered from third parties, such as Google Analytics or Facebook Pixel. These third parties may use cookies, web beacons and similar technology to collect or receive information about you from our website and elsewhere on the internet.

 

Why do we collect your personal information?

We need your personal information to:

• communicate with you in relation to your enquiry;
• send you news if you have signed up, either via email or SMS. You have the right to unsubscribe from either of these channels at any time;
• conduct our business, and enable your use of our website, products, and services; and
• in some cases, to comply with our legal obligations, such as record keeping.

We also collect personal information to analyse and enhance our business operations and improve your experience with our business. This is used as statistical information to analyse the traffic to our website, and to customise the content and advertising we provide. 

 

You can opt-out of the collection and use of this information by changing your privacy settings or opting out. To opt-out you can go here: https://tools.google.com/dlpage/gaoptout

To change your LinkedIn ad preferences, you can go here: https://www.linkedin.com/mypreferences/d/categories/ads

To change your Facebook ad preferences, you can change your privacy settings. 

To opt out of our SMS you can text back on the opt out link.

WHEN DO WE DISCLOSE PERSONAL INFORMATION & HOW YOU CAN ACCESS IT? 

When do we disclose your personal information?

We will take reasonable precautions to protect your personal information, including against loss, unauthorised access, disclosure, misuse, or modification. It is kept securely and accessible only to authorised personnel. Information is kept in accordance with our legal record keeping obligations and then destroyed appropriately. If it is unsolicited, it is also destroyed. We generally will not disclose your personal information unless:

• you consent;
• it is required or authorised by law*; or
• it is reasonably necessary for one of the purposes for which we collect it.

* This can include where we are of the reasonable belief that there is a serious risk to life, health or safety of you or another person. For example, if there is evidence of clear danger of harm to self-and/or others, we may be legally required to report this information to the authorities responsible for ensuring safety. This includes if there is a strong suspicion of physical or sexual abuse or emotional, or neglect or exposure to family violence of any person under 18 years of age. A court order could also require us to release information contained in records. 

However, we do disclose your personal information where it is necessary to obtain third party services, such as analytics, data storage, payment service providers or marketing and advertising services. We do not disclose your medical information for this purpose, and we protect it in accordance with the law. To protect your personal information, we endeavour to ensure that our third-party service providers also comply with the Australian Privacy Principles, but some third parties we use may collect, hold, and process personal information overseas.  You can opt-out of the collection and use of this information by changing your privacy settings or opting out.

 

How can you access or delete your information? 

If you want access to your information to correct it, have it deleted, or to change your communication preferences for either email or SMS notifications, please email us at [email protected]. Except where we are permitted or required by law to withhold it, we will help you. If you consider that we have breached any privacy laws, please also email us at [email protected]. You can make a complaint with the Office of the Australian Information Commissioner by phone at 1300 363 992, online at http://www.oaic.gov.au/privacy/making-a- privacy-complaint or post to: Office of the Australian Information Commissioner, GPO Box 5218, Sydney, NSW 2001.

 

ADDITIONAL PROVISIONS FOR EUROPEAN CITIZENS

If you are a resident of the European Economic Area (“EEA”) or the UK you have certain rights and protections under the General Data Protection Regulations ("GDPR") or its UK equivalent, The Data Protection Act 2018. We want you to know that we take these rights seriously and will always do our best to protect your personal information. We're what's called a "controller" under the GDPR as we collect, use and store your personal information to provide you with our website services and information about them.

We'll always rely on a lawful reason for processing your information like:

• where you have given us valid express consent to use your personal information we will rely on that consent, and only use the personal or sensitive information for the specific purpose for which you have given consent; and
• where we need comply with the law or act in an emergency, we will rely on that lawful means of processing your personal information.

Your Rights

As an EEA or UK resident, you have various rights including the right to be informed; right of access; to rectification; to object; to restrict processing; to erasure or to be forgotten; to data portability; and the right not to be subject to automated processing.  If you want to access personal information we hold about you, or ask if that the information be corrected, or deleted or otherwise exercise your rights, please contact us at [email protected]. You can also opt out of email newsletter communications by following the instructions in those emails or by clicking unsubscribe. In some circumstances where we have a legal basis to do so we may continue to process your information after you have withdrawn consent, for example if it is necessary to comply with an independent legal obligation or if it is necessary to do so to protect our legitimate interest in keeping our services secure.

Security

We keep all personal information on our website platform confidential and secure, and it can only be accessed by authorised personnel. We collect what's necessary, and keep it only as long as is necessary, taking into account the purpose for which it was collected. We implement and maintain appropriate technical, security and organisational measures to protect your personal information against unauthorised or unlawful processing and use, and against accidental loss, destruction, damage, theft, or disclosure. We ensure the encryption and pseudonymisation of personal information and we have adequate cyber security measures in place. By providing us with your personal information you consent to us disclosing it to third parties who reside outside the EEA countries and the UK. We will ensure that those third parties are GDPR compliant as much as possible.

Thank you!

Thank you for trusting us with your personal information. Above all, we will do our best to keep it safe and use it responsibly.