Privacy Policy

1. Introduction

PeakSpan Health Pty Ltd ("we", "our", "us") respects your privacy and is committed to protecting your personal and health information. This Privacy Policy explains how we collect, store, use, and disclose personal information in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Health Records and Information Privacy Act 2002 (NSW).

By using our services, you consent to the practices described in this Policy.

1A. Collection Notice (APP 5)

We collect your personal and health information to provide health and longevity services, including consultations, prescriptions, referrals for pathology/imaging, and ongoing care. We collect this information directly from you (forms, telehealth, email/phone) and, with your consent, from third parties such as pharmacies, pathology providers, and other practitioners. We use and disclose your information for your care, administration, billing, quality assurance, and to meet legal and regulatory obligations. Our client-management platform uses encrypted cloud infrastructure located in the United States (HIPAA-grade). We take reasonable steps to ensure comparable protections under the Australian Privacy Principles. See the rest of this Privacy Policy for security, access/correction, and retention details.

2. Information We Collect

We may collect:

• General details: name, date of birth, contact information, emergency contact.
• Health information: medical history, prescriptions, pathology and imaging reports, treatment notes, supplement and medication usage, and other sensitive health-related data.
• Payment information: billing address and payment details (processed via secure third-party providers).
• Website analytics: pages viewed, device and browser type, approximate location, and cookie identifiers, collected using Google Analytics. We don't send your health or form details to Google Analytics.

3. How We Collect Information

We collect personal and health information when you:

• Register or book consultations.
• Provide details to our practitioners or complete intake forms.
• Purchase prescribed or recommended products.
• Communicate via email, phone, or digital channels.

We may also receive information from third parties (e.g., pathology labs, pharmacies, or healthcare providers) with your consent.

4. How We Use Information

Your information is used to:

• Deliver health, wellness, and longevity services.
• Personalise programmes and recommendations.
• Arrange prescriptions or supplements via licensed partners.
• Manage appointments, billing, and administration.
• Maintain clinical records in accordance with AHPRA and HRIP Act standards.
• Comply with legal, professional, and insurance obligations.

5. Disclosure of Information

We may share information with:

• Registered medical practitioners and allied-health professionals engaged by PeakSpan Health.
• Partner pharmacies, pathology providers, and compounding facilities (where necessary).
• IT, hosting, and analytics providers for secure storage and operations.
• Regulators or insurers when required by law.

We never sell your personal or health information.

6. Cross-Border Disclosure

Our secure client-management platform (GoHighLevel, HIPAA-compliant) is hosted on encrypted cloud servers in the United States. We have entered into a Business Associate Agreement (BAA) with the provider and apply encryption and multi-factor authentication to all access. By engaging our services, you consent to this overseas storage, and we take reasonable steps to ensure that any overseas recipient handles your information consistently with the Australian Privacy Principles, particularly APP 8.

7. Data Security

We take reasonable and proportionate steps to protect your information, including:

• AES-256 encryption of stored data.
• Multi-factor authentication for staff access.
• Role-based permissions and activity logging.
• Regular encrypted backups to Australian cloud storage.
• Periodic privacy and security reviews.

If a data breach is likely to result in serious harm, we will follow the Notifiable Data Breach (NDB) procedure and notify affected individuals and the Office of the Australian Information Commissioner (OAIC).

8. Record Retention

We retain health records for at least 7 years after the last service, or until the client reaches 25 years of age (whichever is longer), in line with the NSW HRIP Act and AHPRA record-keeping obligations. After that period, records are securely destroyed or de-identified.

9. Access and Correction

You may request access to, or correction of, the personal information we hold about you by contacting us (details below). We will respond in accordance with the APPs.

10. Marketing & Opt-Out

We may use your contact information to send you service updates, offers, or newsletters. You may opt out of marketing communications at any time by following the unsubscribe instructions in the message or contacting us directly.

11. Your Rights & Complaints

You may:

• Request access to your data.
• Request corrections or updates.
• Opt-out of marketing communications at any time.
• Lodge a complaint if you believe we've breached the APPs.

If you wish to make a complaint, please contact us first. We will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Cookies & Website Tracking

Our websites (peakspan.com.au, and the sign-in and sign-up pages at portal.peakspan.com.au) use Google Analytics, provided by Google, to understand how many people visit and which pages they use. It sets cookies and may process data outside Australia. It isn't used on pages where you're logged in. You can block cookies in your browser settings or opt out with the Google Analytics opt-out add-on. Some site features may not work properly if cookies are disabled.

13. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their policies.

14. Disclaimer and Terms of Service

Use of our services is also subject to our Disclaimer and Terms of Service, which outline important information about the limitations of our services and your responsibilities.

15. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated date.

16. Contact Us

For privacy-related questions, please contact: