Privacy Policy

1. INTRODUCTION

This document sets out the privacy policy of HEALIO PTY LTD ABN 68 671 851 353 (referred to in these terms and conditions as 'we', 'us', or 'our').

We take our privacy obligations seriously and we've created this privacy policy to explain how we store, maintain, use and disclose the various type of personal information across our website desktop, mobile, tablet and app (as applicable) ('Healio Platform').

The collection of your personal information is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles ('APPs'). and the Health Records Act 2001 (Vic) and the Health Privacy Principles ('HPPs') or equivalent legislation in States other than Victoria.

If you consent to your healthcare provider providing us with your personal information (including health and sensitive information), we may be contractually obliged to comply with State privacy legislation if they are a public hospital.

By providing personal information to us, you consent to our storage, maintenance, use and disclosing of personal information in accordance with this privacy policy.

We may change this privacy policy from time to time by posting an updated copy on our Healio Platform and we encourage you to check the Healio Platform regularly to ensure that you are aware of our most current privacy policy. By continuing to use the Healio Platform, or otherwise continuing to deal with us, you accept this privacy policy as it is updated from time to time.

Your use of the Healio Platform is also subject to our EULA. The Healio Platform may include information related to your medical conditions and/or treatment. Any information provided by the Healio Platform must not be used as a substitute for medical judgment, advice, diagnosis, or treatment of any medical condition or problem. If you have a question about any medical condition, treatment or other health problem, you must consult with your healthcare provider directly. You are responsible for ensuring the accuracy of the outputs and the information you input into the Healio Platform are correct.

By using the Healio Platform you agree to the EULA and this Privacy Policy.

2. TYPES OF PERSONAL INFORMATION WE COLLECT

The personal information we collect may include the following:

name;
gender or sex;
mailing or street address;
email address;
social media information;
telephone number and other contact details;
age and/or date of birth;
information about your business or personal circumstances;
information in connection with surveys, questionnaires and promotions;
information from third parties such as your referees (if you apply for a job with us);
any other personal information provided by you to us via our Healio Platform (including your health information, medical appointments, your diagnosis and treatment, survey data, program completion and adherence data and/or any other sensitive information (as defined by relevant legislation) provided by you, with your consent); and
usage data in connection with the Healio Platform.

We may also collect personal information from third parties such as law enforcement agencies, government entities and healthcare providers where you have consented to sharing such personal information (including health or other sensitive information) with us or as permitted by law.

We may also collect non-personal information from you, including your device identity and type, I.P. address, geo-location information, page view statistics, advertising data, standard web log information and other technical information.

If we engage with you multiple times over a short period in relation to the same matter, we may not provide you with a separate notice about privacy each time we engage with you.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information either directly from you, or from third parties, including where you:

consent to your healthcare provider (and its personnel) to provide us with your personal information;
contact us through the Healio Platform;
consent to your health service provider sharing personal information (and sensitive information) with us;
submit any of our online sign up forms, including registration and other inputs, on the Healio Platform;
communicate with us via the Healio Platform, email, telephone, SMS, social applications (such as LinkedIn, Facebook or Twitter or otherwise);
use and/or interact with the Healio Platform, social media applications, services, content and advertising; and
invest in our business or enquire as to a potential purchase in our business.

We may also collect personal information from you when you use or access our social media pages.

We may also collect personal information and other data using web analytics tools, web beacons, click stream data, 'cookies' and similar tracking technologies that allow us to track and analyse your use of the Healio Platform. This information is not used to develop a personal profile of you. Cookies are small files that store information on your computer, mobile phone or other device and enable and allow the creator of the cookie to identify your device when it visits different websites. If you do not wish information to be stored as a cookie, you can disable cookies in your web browser (e.g. see https://allaboutcookies.org/how-to-manage-cookies for some helpful tips).

4. USE OF YOUR PERSONAL INFORMATION

We collect and use personal information for the following purposes:

to provide services or information to you, including services you have requested us to provide via the Healio Platform with your health service provider e.g. support materials, tasks, reminders and events and to track your progress and adherence to your assigned care programs, as performed by nominated health service provider;
for record keeping and administrative purposes, including managing and maintaining your user account;
to monitor and assess your usage of the Healio Platform;
to confirm your identity when using the Healio Platform;
to provide information about you to our contractors, employees, consultants, agents or other third parties for the purpose of providing the Healio Platform and our services to you;
to research the needs of our users to improve and optimise our service offering and customer experience;
to comply with our legal obligations, resolve disputes or enforce our agreements with third parties;
to send you marketing and promotional messages and other information that may be of interest to you and for the purpose of direct marketing (subject to the obligations under applicable laws). In this regard, we may use email, SMS, social media or mail to send you direct marketing communications. You can opt out of receiving marketing materials from us by using the opt-out facility provided (e.g. an unsubscribe link or contacting us as set out below in section 8 of this Privacy Policy);
to assist you with your inquiries, including to be connected with your healthcare provider;
to communicate with you, including updates to the Healio Platform, privacy policy or EULA;
to send you administrative messages, reminders, notices, updates, security alerts, and/or other information requested by you;
to provide services for a purpose that is directly related to the primary purpose for which your personal information was collected;
for a purpose permitted or required by law; and
to consider an application of employment from you.

5. Disclosure of your personal information to third parties

We may disclose, or provide access to, your personal information to:

third parties in connection with the purposes described in this privacy policy;
third parties that provide products and services to us or through us, or to other third parties e.g. we disclose your personal information to the Healio Platform hosting, back-up and other software and technology service providers; marketing or advertising providers;
our employees, contractors and/or related entities;
your permitted healthcare providers (and their personnel) in connection with your treatment and their permitted use of the Healio Platform;
our existing or potential agents or business partners;
anyone to whom our business or assets (or any parts of them) are or may (in good faith) be, transferred;
courts, tribunals, regulatory authorities and law enforcement officers;
for purposes permitted or as required by law; and
any actual or prospective legal proceedings, or to establish, exercise or defend our legal rights.

We may also disclose and transfer personal information in connection with a merger or sale or as part of a corporate reorganisation or share sale or other change in corporate control.

We do not transfer your personal information (including your health information) to third parties located outside of Australia without your consent or unless the transfer is authorised or required by law. If we do transfer your personal information overseas, we will take reasonable steps to ensure that any overseas recipient deals with such personal information in a manner consistent with how we deal with it (e.g. with appropriate contractual safeguards) and in accordance with applicable laws.

6. SECURITY AND RETENTION

We take reasonable steps to ensure your personal information is secure and protected from misuse or unauthorised access. This includes ensuring our third party service providers commit to an appropriate level of security. Our information technology systems are password protected, and we use a range of administrative and technical measures to protect these systems. However, we cannot guarantee the security of your personal information.

Your personal information will only be retained in line with legal and regulatory retention periods. At the end of any retention period, your personal information will either be securely deleted in its entirety or anonymised so that you can no longer be identified from that data. We may aggregate anonymised data and use it for statistical analysis.

7. LINKS

The Healio Platform may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of those linked websites, and we recommend you review the privacy policies of those websites before using them. This includes social media pages.

8. ACCESS, CORRECTION, QUESTIONS OR COMPLAINTS

you have any questions, or complaints about our collection, use or disclosure of personal information or if you believe that we have not complied with this privacy policy or any relevant privacy laws;
you would like to access, correct or update your personal information held by us; or
you would like to opt out of direct marketing,

please contact us at our contact details below.

Name: Privacy Officer
Email: hello@healio.cloud

We will investigate your query, complaint or request and endeavour to respond to you as soon as practicable. Please provide as much detail as possible in relation to the query, complaint or request.

If you don’t think your privacy concerns have been resolved satisfactorily by us, or you wish to obtain more information on privacy requirements, you can contact the Office of the Australian Information Commissioner on 1300 363 992 or visit their website at www.oaic.gov.au.

Our privacy policy was last updated on 12 January 2025. We may update this privacy policy from time to time. Any changes will be communicated to you by updating this page or via the Healio Platform.