Cryosite's Privacy Policy

General information

Cryosite Limited, ABN 86 090 919 476 is committed to protecting the privacy of your personal information (including your health information).

This Privacy Policy explains how Cryosite manages the personal information that we collect, how we use and disclose it, how to seek access to and correction of the personal information we hold about you, how to contact us if you have any complaint or further queries about our management of your personal information, and how we will deal with complaints.

Cryosite is bound by the Privacy Act 1988 (Cth) (the Privacy Act) including the Australian Privacy Principles (APPs) in the Privacy Act, and applicable State and/or Territory health records legislation.

The APPs regulate the manner in which Cryosite handles personal information throughout its life cycle, from collection to use and disclosure, storage, accessibility and disposal.

This Privacy Policy does not apply to personal information collected or held by Cryosite about its employees in employee records.

Definitions

In this Privacy Policy, personal information is information or an opinion, in any form and whethere true or not, about an identified individual or an individual who is reasonably identifiable.

Special provisions apply to the collection and handling of personal information which is sensitive information. This includes health information (as defined in the Privacy Act and in applicable health records legislation) and information about a person’s race, ethnic origin, political opinions, membership of political, professional or trade associations, religious or philosophical beliefs, sexual preferences and criminal history.

Collection of personal information

We collect personal information (which may, because of the context or nature of our services or products, include health information or other sensitive information) in the course of our business for various purposes explained below.

We may collect your personal information through your use of our website, when you communicate with us (either by email, telephone, in writing or in person), when you apply for one of our products or services and when we provide products or services to you. Depending on who you are, we may collect your personal information directly from you or from other individuals or organisations, such as medical services engaged by you to support services provided by us.

You are not required to provide your personal information to us. However, if you do not provide us with all the information we request, we may not be able to provide the products or services that you, or others on your behalf, have sought.

The types of personal information we collect about you depends on who you are and our relationship with you. It may include:

• name, age, gender, date of birth, address, contact phone number(s) and email address;
• credit card, banking and other payment details;
• profession, business address and financial information;
• details of products or services purchased;
• name of doctor or treating physician;
• allergies, disease type or condition;
• medical history and medication details;
• test and trial results (including blood test results);
• blood type, biometric and genetic information (including cord blood and tissue samples);
• family history;
• records of our communications with you, including any complaints, requests or queries;
• any comments, suggestions on our products and services;
• other information that may be relevant in our dealings with you.

 

We collect personal informationfor number of purposes in connection with our business. The main purposes are to:

• provide you with information, products or services you have requested;
• assess enquiries for the provision of our products or services;
• respond to any queries, requests, complaints and data security incidents;
• conduct or support the conduct of clinical trials;
• conduct our own research;
• communicate with you by various means;
• manage and conduct our business; and
• comply with our legal obligations.

 

Use and disclosure of personal information

We use and disclose the personal information we collect and hold:

for the purposes for which it was collected, as described above;

for related purposes that would be reasonably expected by you in the circumstances of your relationship with us or as notified to you;

for any purpose which you have consented to, either expressly or that we can infer from your conduct and the nature of our relationship with you;

where required or authorised by or under law, including use or disclosure is permitted by the Privacy Act or applicable health records legislation (for example, as a necessary part of an investiga tion of suspected unlawful activity).

We may disclose your personal information to our related companies, and to other organisations or individuals. These are typically individuals who are related or associated to you in connection with the provision of our products and services; and organisations we contract to provide services to us, including pathology, credit card banking, secure storage facilities, IT and other service providers (including cloud, data storage and managed services providers).

In the event of a sale of the Cryosite business (in whole or part), we may need to disclose personal information to the purchaser (as an asset of the business).

Cryosite may disclose your personal information to recipients outside of Australia when it transfers data for storage and backup purposes to its service providers whose servers are located overseas, including in the USA.