Privacy Policy
Draft — legal review required. Prepared for review before adoption as the final policy.
STAK TECH PTY LTD operates Vitals. This policy explains how we handle personal, health and genetic information.
What we collect and why
We collect account and contact details, the health records and other information you choose to submit or connect, and technical, usage and security information needed to operate the service. We use this information to provide, secure and support Vitals, respond to requests and meet legal obligations. Without information needed for a feature, that feature may not work.
Product and service improvement
We may use de-identified, aggregated service data to analyse usage, assess reliability, develop and evaluate features, and improve our products and services. De-identification must address the risk of a person being reasonably identifiable; removing a name alone is not enough.
We do not currently use identifiable health or genetic information for product development, research or model training. Any future change would require a separate opt-in before that use. Declining it would not affect access to the core service. Accepting the terms is not that opt-in.
Sharing, AI and overseas processing
We use specialist services to operate Vitals and process information for the features you request. Records are currently stored outside Australia; specialist processing includes recipients in the United States. We seek informed consent before overseas processing of health information and explain the relevant storage or processing when seeking that consent.
Providers may handle information only for the agreed service purposes, not their independent use. We may also disclose information where required by law or for a corporate transaction, subject to applicable privacy requirements and notices. See our data-protection approach.
Retention and your choices
We retain information for your account and legitimate service, security and legal needs, then delete or de-identify it when no longer required. You can access, correct, export or request deletion of your record through Vitals or by contacting us, subject to lawful retention requirements. You can withdraw consent for optional processing; affected features may then be unavailable.
Requests and complaints
Contact info@staktech.com.au for access, correction, deletion or privacy concerns. We will acknowledge your complaint, investigate and aim to respond within 30 days. If unresolved, you can contact the Office of the Australian Information Commissioner.
Policy updates
We may update this policy as our services or practices change. We will give notice of material changes and obtain further consent where required. An update does not retrospectively authorise a new use of your health information.
Last updated