About Menova Health and This Privacy Policy

Menova Health is a brand trading under Medora Group Pty Ltd (ABN 49 680 309 282) ("Menova Health," "we," "us," or "our"). We provide tailored and managed health solutions to support men’s well-being.

Menova Health is deeply committed to safeguarding your personal information and ensuring compliance with Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the Health Records and Information Privacy Act 2002 (NSW), and international standards such as HIPAA where relevant.

This Privacy Policy (“Policy”) explains how we collect, use, disclose, store, and protect your personal information. It also outlines your rights to access or correct your information and how to contact us with privacy-related concerns.

What is Personal Information?

Personal information refers to any information or opinion about an identified individual or an individual who is reasonably identifiable. This includes sensitive information, such as:

• Health and medical history.
• Racial or ethnic origin.
• Religious or philosophical beliefs.
• Sexual orientation or practices.

De-identified information (information that does not identify you) is not considered personal information under this Policy unless it is re-identified.

Why Do We Collect Your Personal Information?

We collect your personal information for purposes including, but not limited to:

1. Service Delivery:
   • To provide tailored healthcare services and treatments.
   • To assess and address your health needs.
2. Communication:
   • To notify you about services, results, or upcoming appointments.
   • To respond to your inquiries or complaints.
3. Operational Purposes:
   • To facilitate billing, payment, and insurance claims.
   • To improve patient outcomes using advanced technologies, including AI.
4. Marketing and Research:
   • To send you marketing communications (with your consent).
   • To conduct surveys, quality improvement activities, and research projects.
5. Legal and Regulatory Compliance:
   • To comply with reporting obligations, such as mandatory reporting of abuse or communicable diseases.

How Do We Collect Your Personal Information?

We collect your personal information in the following ways:

1. Direct Collection:
   • Through consultations, forms, or online interactions with our website.
   • When you sign up for newsletters or participate in surveys or quizzes.
2. Third-Party Collection(with consent or as permitted by law):
   • From other healthcare providers, pharmacies, diagnostic services, Medicare, private insurers, or pathology laboratories.
   • From referees or screening checks if you are a job applicant, contractor, or service provider.
3. Technical Data:
   • Automatically via cookies or analytics tools when you visit our website.

We will notify you, where practicable, when we collect your information indirectly.

What Types of Personal Information Do We Collect?

The types of personal information we collect may include:

• Personal Details: Name, date of birth, contact details, gender, and marital status.
• Health Information: Medical history, test results, diagnoses, and prescriptions.
• Financial Information: Payment details, Medicare numbers, or private health insurance information.
• Technical Data: IP address, browser type, and website usage.
• Marketing Preferences: Communication preferences, interests, and feedback.

How Do We Use Your Personal Information?

We use your personal information to:

• Deliver personalized healthcare services.
• Communicate with you about your health or emergency situations.
• Improve patient outcomes through AI-driven analysis and predictive care models.
• Conduct research, training, and quality improvement (using de-identified data when possible).
• Send marketing communications about our services or events (with your consent).

If you wish to opt-out of marketing communications, you can do so at any time via the unsubscribe link or by contacting us.

Disclosure of Your Personal Information

We may disclose your personal information to:

• Healthcare providers, pharmacies, or diagnostic services involved in your treatment.
• Medicare, private insurers, or other insurers for billing or claims processing.
• Regulatory bodies where disclosure is required by law.
• Contractors, staff, or service providers located offshore in countries like the Philippines, India, UAE, or the UK, for operational or marketing purposes.

Offshore Data Access
We take all reasonable steps to ensure offshore contractors and staff comply with the APPs, HIPAA, and applicable encryption standards.

Data Security and Retention

Your personal information is stored securely using encryption and access controls. We regularly review and update our security protocols to protect against unauthorized access, misuse, or loss.

We retain health records in line with legal requirements, typically for at least 7 years from the last date of service, or longer if required by law. When no longer needed, data is securely destroyed or de-identified.

Data Breaches

If a data breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) promptly, as required under the Notifiable Data Breach Scheme.

AI and De-Identified Data

We may use de-identified information for:

• AI development to improve patient outcomes.
• Statistical analysis and service evaluation.

Your personal information will only be used in identifiable form for AI purposes with your explicit consent.

Cookies and Website Analytics

Our website uses cookies to:

• Improve your browsing experience.
• Analyse website usage patterns.

You can manage or block cookies using your browser settings.

Your Rights

You have the right to:

• Access: Request access to the personal information we hold about you.
• Correction: Request corrections if your information is inaccurate.
• Consent Withdrawal: Withdraw your consent for specific uses of your data.
• Data Portability: Request your information in a portable format (where feasible).

Requests can be made using the contact details provided below.

Privacy Complaints

If you have concerns about our handling of your privacy:

1. Contact us directly at:
   • Email: compliance@menovahealth.com
   • Phone: 1300 001 459
2. If unresolved, you may escalate your complaint to:

Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au NSW Health Care Complaints Commission: www.hccc.nsw.gov.au

Updates to This Policy

We review and update this Policy periodically to reflect changes in our practices or legal obligations. The latest version will always be available on our website or upon request.