1. Personal Information We Collect and Hold

We collect personal information to conduct our business, fulfill orders, provide services, and comply with legal obligations. Information collected may include:

• Personal Information: such as your name, contact information (email, phone number, address), and payment details.
• Sensitive Information: in cases where sensitive health information is required to provide our services, we collect it with your consent. Sensitive information may include: Health status, medical history, gender, clinical test results, and other personal health-related information.
• Other Information: details related to your use of the Platform or communications with us.

In some cases, you may provide personal information about a third party (e.g., a minor for whom you are the guardian). By doing so, you confirm that the individual understands and agrees to this Privacy Policy or, in the case of a minor, that you consent on their behalf.

2. Collection and Use of Sensitive Information

To fulfill our services, MyHealthKits may collect sensitive health information from you or authorized third parties (e.g., laboratories). This includes information essential for processing your test results. We use sensitive information solely to fulfill orders, communicate results, and support our business functions, following the Privacy Act 1988 (Cth).

Sensitive information is de-identified or securely disposed of once it is no longer needed, unless otherwise stated at the time of collection.

3. How Personal Information Is Collected and Stored

We collect personal and sensitive information via:

• Forms submitted on the Platform;
• Information provided directly through the Platform (e.g., during the order process or inquiries);
• Test results received from third-party laboratories;
• Interactions with our team, including customer service; and
• Necessary records kept to manage and operate the Platform.

Personal information is stored in secure, password-protected digital systems. We protect it from unauthorized access, modification, or disclosure through various measures:

• Implementing access control protocols;
• Restricting physical access to paper files;
• Requiring third-party service providers to follow similar protective measures in line with Australian law; and
• Disposing of or de-identifying information when it is no longer needed.

4. Collection of Personal Information through Activity

When you interact with the Platform, information that identifies you may be gathered:

Cookies: The Platform may use cookies to enhance user experience by identifying user preferences. Cookies do not identify you individually but may log interactions and assist us in analyzing usage patterns.

You can configure your device to refuse cookies, though doing so may limit the Platform’s functionality.

5. Analytics and Anonymization

We use Google Analytics to analyze Platform usage and improve services. Google Analytics may record anonymous data such as geographic location, device, browser, and operating system, which does not personally identify you. Information gathered by cookies will be transmitted to Google servers and used on our behalf for analysis and reporting.

For details or to opt out of Google Analytics, please see Google’s Opt-Out Browser Add-On.

6. Purposes of Collection, Use, and Disclosure

We collect, hold, and use personal information for various business purposes, including but not limited to:

• Fulfilling orders and delivering test kits;
• Processing and delivering test results;
• Improving Platform services and customer experience;
• Marketing and promoting MyHealthKits’ services;
• Responding to inquiries and resolving issues; and
• Disclosing information to third parties as necessary for business purposes or legal compliance.

7. Direct Marketing

We may collect and use personal information to send direct marketing communications, including:

• Updates on new services and offers from MyHealthKits;
• Newsletters and other promotional materials;
• Marketing databases and client service management.

To opt-out of direct marketing communications, follow the instructions in the message or contact us via the details provided below.

8. Third-Party Service Providers

We may disclose personal information to third-party providers who assist with Platform operations, marketing, and improving services. This includes:

• Customer relationship management (CRM) services;
• Marketing consultants and website hosts;
• Partnered laboratories for test kit analysis; and
• Professional advisers and consultants.

9. Access and Correction of Personal Information

You have the right to request access to personal information we hold about you and to request corrections to ensure accuracy. To make a request, please contact us using the information below.

Access: Requests for access to personal information will be handled as soon as reasonably possible. In certain cases, we may charge a reasonable fee for processing access requests.

Correction: If you believe the information we hold about you is inaccurate or outdated, you can request corrections.

In cases where access is restricted, we will provide reasons for the refusal, except where it would be unreasonable to do so.

10. How to Contact Us or Make a Complaint

If you have questions about this Privacy Policy, need to update your information, or wish to make a complaint about our handling of personal information, please contact us:

Email: info@myhealthkits.com.au

We will acknowledge complaints and investigate any breaches of privacy obligations, taking steps to resolve issues promptly. We are committed to handling complaints in a fair and responsible manner and to complying with all legal requirements for privacy and information security.