Privacy Policy

Introduction

In this Privacy Policy, “us”, “we” or “our” means Wini Health Pty Ltd ABN 71 661 885 132, and any related bodies corporate. We are committed to respecting your privacy. This Privacy Policy sets out how we collect, use, store and disclose your personal information.

By providing personal information to us (or authorising your employer to provide such information), you consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy and any other arrangements that apply between us. We may change this Privacy Policy from time to time by publishing updates on our website.

Personal information includes information or an opinion about an individual that is reasonably identifiable. This may include your name, age, gender, postcode, contact details and financial information.

*These privacy policies are effective as of October 1, 2024.

1. What personal information do we collect?

We may collect the following types of personal information:

Name
Mailing or street address
Email address
Telephone number and other contact details
Age or date of birth
Credit card information
Device ID, device type, geo‑location information, computer and connection information, statistics on page views, traffic to and from the sites, ad data, IP address and standard web log information
Details of products and services we have provided to you or that you have enquired about
Information you provide directly through our website or app, or indirectly through your use of our website, app or online presence
Information provided through customer surveys
Information generated from your use of our products and services, including interactions with notification systems
Information regarding your employer and employment status where access is facilitated through an employer
Any other personal information required to facilitate your dealings with us

We may collect this information directly from you or from third parties (e.g., your employer).

We may collect information when you:

Register on our website or app
Communicate with us through correspondence, chats or email
Interact with our sites, services, content and advertising
Invest in or enquire about our business

When you apply for a job with us, we may collect information from recruitment consultants, previous employers and others who assist in assessing your application. This Privacy Policy does not apply to employee records of current or former employees.

2. Why do we collect, use and disclose personal information?

We may collect, hold, use and disclose your personal information to:

Enable you to access and use our website, services, apps and software
Operate, protect, improve and optimise our website, services, apps, software and user experience
Send service, support and administrative messages, reminders, technical notices, updates and security alerts
Track your interactions with our website, services, apps and software
Develop anonymised or aggregated data regarding use of our services
Provide information to an Inviting Party (e.g., employer) where they facilitated your access
Send marketing and promotional messages
Administer rewards, surveys, contests or promotional activities
Comply with legal obligations, resolve disputes and enforce agreements
Consider your employment application

We may also disclose your personal information to a trusted third party who holds other information about you and may combine that information to develop anonymised consumer insights.

3. Direct marketing

We and/or our business partners may send you direct marketing communications about our services. You may opt out at any time.

4. To whom do we disclose your personal information?

We may disclose personal information to:

Our employees and related bodies corporate
An Inviting Party (e.g., employer)
Third‑party suppliers and service providers
Professional advisers, dealers and agents
Payment system operators
Existing or potential agents, business partners or partners
Sponsors or promoters of competitions
Parties to whom our assets or businesses are transferred
Specific third parties authorised by you
Government agencies, regulatory bodies and law enforcement agencies

5. Using our website and cookies

We may collect personal information when you use and access our website. We may record information such as pages visited, time and date of visit and IP address.

We may use cookies or similar technologies to track usage and remember preferences. You may disable cookies, but our website may not function as intended.

6. Security

We may hold your personal information in electronic or hard copy form. We take reasonable steps to protect your personal information from misuse, interference, loss and unauthorised access, modification or disclosure. However, we cannot guarantee security.

7. Links

Our website may contain links to third‑party websites. We are not responsible for the privacy practices or content of linked websites.

8. Accessing or correcting your personal information

You may access the personal information we hold about you by contacting us. We may need to verify your identity.

If you believe any personal information we hold is inaccurate, please contact us and we will take reasonable steps to correct it.

You may also request that we delete your personal information, subject to any legal obligations requiring us to retain certain records.

9. How long do we retain your personal information?

We retain your personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law.

In general:

Account‑related information is retained while your account remains active
Usage and interaction data is retained for up to 24 months
Financial and transaction records are retained for 7 years
Anonymised or aggregated data may be retained indefinitely

Once personal information is no longer required, we take reasonable steps to delete, destroy or de‑identify it.

10. Requesting deletion of your personal information

You may request deletion of your personal information at any time by contacting us. We may need to verify your identity.

We will take reasonable steps to delete your personal information within 30 days, unless retention is required for legal, regulatory or legitimate business purposes (e.g., financial records, security logs, dispute resolution).

If your access is provided through an employer or other Inviting Party, we may notify that Inviting Party of your deletion request where appropriate.

11. Making a complaint

If you believe we have breached the Privacy Act or mishandled your personal information, you may contact us. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge and respond within a reasonable period. If unresolved, we will advise you of further steps.

12. Contact Us

For privacy enquiries, including requests to access, correct or delete your personal information, please contact:

Wini Health – Privacy Officer
Email: hello@winihealth.com