Privacy Policy

1. Scope

This Policy applies to personal information collected through the Site and any related online services we operate. It does not cover third-party websites we link to.

2. What Personal Information We Collect

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable. We may collect:

• Identity & contact: name, email, phone, postal address.
• Account: username, passwords (stored using secure methods).
• Usage & device: IP address, device/browser type, pages viewed, time on page, referring URLs.
• Health data (optional): if you connect health services (e.g., Apple Health), biomarker data such as lab results, vitals, activity metrics.
• Payment: transactions processed via our payment providers (we do not store full card details).
• Communications: enquiries, support messages, survey responses.

3. How We Collect Personal Information

• Directly from you when you create an account, submit forms, purchase services, or connect integrations.
• Automatically via cookies and similar technologies when you browse the Site.
• From third parties (with your consent), e.g., when you link health-data integrations.

4. How We Use Personal Information

• Provide, operate, and improve the Site and our services.
• Enable account features and health-data integrations you choose to use.
• Personalise content and measure performance.
• Process payments and manage subscriptions.
• Communicate with you about updates, security alerts, and support.
• Send marketing (with your consent and opt-out options).
• Detect, prevent, and investigate fraud, abuse, or security incidents.
• Comply with legal obligations and respond to lawful requests.

5. Disclosure of Personal Information

We do not sell your personal information. We may disclose it:

• Service providers assisting with hosting, analytics, payment processing, customer support, email delivery, and security (bound by confidentiality/privacy obligations).
• Legal & safety to regulators, law enforcement, or others where required or permitted by law.
• Business transfers in connection with a merger, acquisition, or asset sale (where your information remains protected).
• Aggregated/de-identified data for research, analytics, and reporting that does not identify you.
• With your consent or at your direction.

6. Overseas Transfers

Some service providers may be located outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient protects it in a manner consistent with the APPs (e.g., contractual safeguards).

7. Health & Sensitive Information

We only collect health information with your explicit, informed consent and for the purposes described in this Policy. You may withdraw consent at any time; this may limit certain features. We apply heightened safeguards to sensitive information.

8. Security

We implement reasonable technical and organisational measures to protect personal information against misuse, interference, loss, and unauthorised access, modification, or disclosure. No method of transmission or storage is completely secure.

9. Data Retention

We keep personal information only as long as necessary for the purposes described, including legal and audit requirements. When no longer required, we take reasonable steps to destroy or de-identify it.

10. Your Rights

Subject to law, you may request to access or correct your personal information, object to certain processing (e.g., direct marketing), or request deletion/de-identification where appropriate. We may require identity verification.

To exercise these rights, contact us using the details below.

11. Cookies & Tracking

We use cookies and similar technologies to operate the Site, remember preferences, and analyse traffic. You can control cookies via your browser settings. Disabling cookies may affect some features. If we use third-party analytics/ads, those providers may set their own cookies.

12. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for their privacy practices. Review their policies before providing personal information.

13. Children’s Privacy

Our services are not directed to children under 16. If you believe a child has provided us personal information without consent, please contact us so we can delete it.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes to our practices or legal requirements. We will post the updated version on this page with an updated “Last updated” date. Your continued use of the Site means you accept the updated Policy.

15. Contact Us

If you have questions about this Policy or our handling of personal information, please contact us:

• Email: enquiries@biomarks.ai

16. Complaints

If you believe we have breached the APPs, please contact us using the details above. We will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au/privacy/privacy-complaints.