Privacy Policy

Last update: 12 Sep 2025
Effective: 12 Sep 2025

At Listen Health Pty Ltd (“Listen Health”, “we”, “our”, or “us”), your privacy is our priority. This Privacy Policy explains how we collect, use, store, and disclose your personal and health information when you access our website, mobile applications, and related services (the “Services”).

We are committed to complying with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs).

1. Who This Policy Applies To
This Privacy Policy applies to all users of our Services in Australia.
- Users must be 18 years or older to create an account or use Listen Health.
- This Policy supplements our general terms of service.

2. Information We Collect
We may collect the following categories of information about you:

A. Personal Information
- Full name
- Contact details (email, phone number, postal address)
- Date of birth
- Account login credentials
- IP address, device identifiers, and general geolocation data

B. Health Information (Sensitive Information)
- Pathology and laboratory test results
- Self-reported health concerns and questionnaire responses
- Uploaded medical records
- Health data from linked wearables and connected devices
- Information relating to health conditions, diagnoses, treatments, or procedures
- Genetic information, reproductive or sexual health information, gender-affirming care information

C. Financial Information
- Payment details (processed securely through third-party providers such as Stripe; Listen Health does not store card details directly)

D. Usage and Device Data
- Website and app usage activity (pages visited, time spent, clickstream data)
- Browser, operating system, and mobile app information
- Cookies, pixels, or analytics tracking data (only where consented)

We may also create aggregated, de-identified, or anonymised data for research and service improvement. De-identified data is not considered Personal Information under the Privacy Act.

3. How We Collect Information
We collect Personal and Health Information from:
- Directly from you when you use our Services, complete forms, or communicate with us
- Partner pathology laboratories and healthcare providers, with your consent
- Linked wearable or connected devices
- Cookies or analytics tools (subject to your consent)
- Third parties you nominate (e.g., healthcare professionals)
- Inferences we generate from your interactions with our Services

4. Why We Collect and Use Your Information
We use your information to:
- Verify your identity and create your account
- Provide and manage access to pathology testing and results
- Communicate health insights and personalised recommendations
- Facilitate secure payments and transactions
- Improve our Services, research, and platform features
- Comply with legal and regulatory obligations (including health data retention requirements)
- Provide customer support and respond to enquiries
- Send permitted service updates and, where you have consented, marketing communications

Note: We do not use your sensitive health information for direct marketing.

5. Disclosure of Your Information
We may disclose your information to:
- Pathology and healthcare partners for test processing
- Healthcare professionals you nominate to receive your results
- Payment processors (e.g., Stripe)
- IT service providers, cloud hosting, and support partners (with contractual safeguards)
- Regulatory or legal authorities where required by law
- Professional advisors (e.g., insurers, auditors, or legal representatives)
- Entities involved in business transfers, mergers, or acquisitions
- We do not sell your personal or health information.

6. Overseas Disclosure
While most data is stored in Australia, we may use overseas service providers (e.g., cloud infrastructure or payment gateways). In such cases, we take reasonable steps to ensure compliance with APP 8 through contractual and technical safeguards.

7. Cookies and Analytics
Our website may use cookies or similar technologies to:
- Analyse site performance and improve usability
- Understand user behaviour
- Enable retargeting or marketing (only with your consent)
You may manage cookies through your browser settings. Some features of our Services may not function without essential cookies.

8. Your Privacy Rights
As an Australian resident, you have the following rights under the Privacy Act 1988 (Cth):
- Access – request access to the Personal or Health Information we hold about you
- Correction – request correction of inaccurate or incomplete data
- Deletion – request deletion of your information, subject to legal obligations
- Anonymity and Pseudonymity – deal with us anonymously or under a pseudonym where practicable
- Opt-Out – unsubscribe from direct marketing communications
- Complaint – lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your rights have been breached

To exercise these rights, contact us using the details in Section 12. We may need to verify your identity before actioning requests.

9. Data Retention
We retain your personal and health information:
- As long as your account is active
- For compliance with legal and medical record-keeping requirements
- For internal analytics and service improvement (de-identified where appropriate)

When no longer required, data is securely destroyed or anonymised.

10. Security of Your Information
We take reasonable steps to safeguard your data from misuse, interference, loss, unauthorised access, modification, or disclosure. This includes:
- Industry-standard encryption and secure storage systems
- Restricted access to sensitive data
- Ongoing monitoring and security testing

However, no system is 100% secure. Transmission of information via the internet is at your own risk.

11. Children’s Privacy
Our Services are not available to individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware of such collection, we will delete the data promptly.

12. Contact Us
For questions, requests, or complaints regarding this Privacy Policy, please contact us:

Email:
support@listenhealth.com.au
Legal inquiries:
legal@listenhealth.com.au

If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Website:
www.oaic.gov.au
Phone: 1300 363 992
Email:
enquiries@oaic.gov.au

13. Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be published on our website with a new “Effective Date.” Continued use of the Services after an update constitutes acceptance of the revised policy.