Privacy Policy

ZEST PRIVACY POLICY

Nexus Australasia Pty Ltd ABN 81 115 828 941 (trading as ZEST Healthcare Communications) and its related bodies corporate (“ZEST”, “we”, “our” and “us”) are committed to responsible privacy practices and to complying with the Privacy Principles contained in the Privacy Act 1988 (Cth) (“Privacy Act”) and applicable health records legislation such as the Health Records Act 2001 (Vic), the Health Records (Privacy and Access) Act 1997 (ACT) and the Health Records and Information Privacy Act 2002 (NSW).

Where applicable, ZEST will handle personal information relying on the related bodies corporate exemption and the employee records exemption in the Privacy Act and any other applicable exemptions in the Privacy Act or other legislation.

This Privacy Policy sets out our policies on the management of personal information including how we collect personal information, the purposes for which we use this information, and to whom this information is disclosed. We may change our Privacy Policy from time to time at our discretion. At any time, the latest version of our Privacy Policy is available from our website at www.zest.com.au/privacy-policy.

Where it is practical for us to allow you to do so, you may deal with us anonymously (for example when enquiring generally about our products and services).

What is personal information?

In this Privacy Policy, “personal information” has the meaning set out in the Privacy Act. Essentially, personal information is information or an opinion about an individual who is reasonably identifiable.

A reference to “personal information” in this policy includes “health information”, as defined in the Privacy Act and applicable health records legislation. Essentially, health information is information or an opinion relating to the health or a disability of an individual who is reasonably identifiable.

What types of personal information does ZEST collect?

The types of personal information ZEST collects from you depend on the circumstances in which the information is collected.

ZEST may collect contact details including your name, occupation, address, email address, phone and fax numbers and your date of birth. We may collect answers you provide to questions we ask and other information in relation to your dealings with ZEST. If you purchase products or services from us, we may also collect certain transactional information and financial details to process the transaction.

If you are an individual contractor to ZEST, in addition to the information referred to in section 3.2 we may also collect information relevant to your engagement with ZEST including qualifications, resume, reference information from your nominated referees, tax file number, bank details, feedback from supervisors and training records.

If we are providing you with, or assisting your health service provider or treating health professional (such as a doctor, pharmacist or hospital) to provide you with, a health related service we may collect your health information and, in such circumstances, you consent to us collecting that information and to us using and disclosing that information for the purpose for which you disclosed it to us and as permitted by the Privacy Act, applicable health records legislation and other relevant laws.

When you use our websites, we may collect website usage information such as the IP address you are using, the name of your Internet service provider, your browser version, the website that referred you to us and the next website you go to, the pages you request, the date and time of those requests and the country you are in.

In certain circumstances we are required to collect government identifiers such as tax file numbers, Medicare numbers, health service provider numbers, pension numbers and Veteran’s Affairs numbers. We only collect, use and disclose such information as permitted or required by law.

In addition to the types of personal information identified above, ZEST may collect personal information as otherwise permitted or required by law.

How do we collect your personal information?

ZEST collects personal information in a number of ways. The most common ways we collect your personal information are:

directly from you when you provide it to us or our agents or contractors;
via our website or when you deal with us online (including through our social media pages);
if you are an individual contractor to ZEST, from your employer or recruitment agency;
from publicly available sources;
from credit reporting agencies;
from our related companies; and
from third parties (for example, from your health service provider or treating health professional (such as a doctor, pharmacist or hospital) in connection with providing a health-related service to you; from referees if you apply for a position as an employee or contractor with us).

For what purposes do we collect, hold, use and disclose your personal information?

The purposes for which we use and disclose your personal information will depend on the circumstances in which we collect it. Whenever practical we endeavour to inform you why we are collecting your personal information, how we intend to use that information and to whom we intend to disclose it at the time we collect your personal information.

We may use or disclose your personal information:

for the purposes for which we collected it (and certain secondary purposes where permitted by law);
for other purposes to which you have consented; and
as otherwise authorised or required by law.

In general we collect, use and disclose your personal information so that we can do business together and for purposes connected with our business operations.

Unless otherwise required or permitted by law, we will only collect health information about you with your consent and we will only use that information for the primary purpose for which it was collected. In some circumstances, we may collect your health information through third parties (e.g. from health care professionals, such as pharmacists, who are treating you). We will only do this if you have consented or where otherwise permitted or required by law.

Some of the specific purposes for which we collect, use and disclose personal information are:

to respond to you if you have requested information (including via our websites or via an email or other correspondence you send to us);
to provide goods or services to you, to assist a health professional or service provider to provide you with certain services (e.g. health services) or to receive goods or services from you;
to administer and manage services, including charging, billing and collecting debts;
to enable you to participate in any loyalty programs that we conduct;
to improve our products and services and keep you up to date on such improvements;
to understand our customer base and help tailor our products and services;
to allow performance reporting and benchmarking of your business, if applicable;
to contact you (directly or through our service providers) to obtain your feedback, to find out your level of satisfaction with our products and services and for other market research activities;
to verify your identity;
to address any issues or complaints that we or you have regarding our relationship; and
to contact you regarding the above, including via electronic messaging such as SMS and email, by mail, by phone, by fax or in any other lawful manner.

We may also use and disclose your personal information for the purpose of direct marketing to you where:

you have consented to us doing so; or
it is otherwise permitted by law.

Direct marketing involves communicating directly with you for the purpose of promoting goods or services to you and to provide you with special offers. Direct marketing can be delivered by a range of methods including mail, fax, telephone, email or SMS. You can unsubscribe from our direct marketing, or change your contact preferences, by contacting us (see section 14 of this Privacy Policy).

What happens if you don’t provide personal information?

Generally, you have no obligation to provide any personal information requested by us. However, if you choose to withhold requested personal information, we may not be able to provide you with products and services that depend on the collection of that information.

To whom may we disclose your information?

We may disclose your personal information to third parties in connection with the purposes described in section 5 of this Privacy Policy.

This may include disclosing your personal information to the following types of third parties:

our related companies;
health service providers or treating health professionals (such as your doctor, pharmacist or hospital), in connection with providing health-related goods or services to you or as otherwise required or authorised by law;
our contractors and other third parties that provide goods and services to us (including suppliers, marketing agencies, data analysis specialists, data processing organisations, billing and debt recovery providers, website and data hosting providers, loyalty program administrators and other IT suppliers);
our accountants, insurers, lawyers, auditors and other professional advisers;
government and regulatory authorities, courts, tribunals and other bodies as required or authorised by law;
in an emergency, to medical and health service providers;
any third parties to whom you have directed or permitted us to disclose your personal information (e.g. referees);
in the event that we or our assets may be acquired or considered for acquisition by a third party, that third party and its advisors;
carefully selected third parties with whom we have data sharing arrangements;
third parties that require the information for law enforcement or to prevent a serious threat to public safety; and
otherwise as permitted or required by law.

Where we disclose your personal information to third parties we will use reasonable commercial efforts to ensure that such third parties only use your personal information as reasonably required for the purpose we disclosed it to them and in a manner consistent with the Privacy Principles under the Privacy Act and relevant health records legislation, e.g. by (where commercially practical) including suitable privacy and confidentiality clauses in our agreement with a third party service provider to which we disclose your personal information.

If you post information to public parts of our websites or to our social media pages, you acknowledge that such information (including your personal information) may be available to be viewed by the public. You should use discretion in deciding what information you upload to such sites.

Disclosure of information outside the State/Territory of collection

Some of the third parties to whom we disclose personal information may be located outside the state or territory in which the information was collected or outside Australia. The state/territories and countries in which such third parties are located will depend on the circumstances. For example, we may disclose personal information to our related companies overseas and to our overseas service providers.

In the ordinary course of business we commonly disclose personal information to parties for example, offshore data centres located in New Zealand, the USA, South Korea and Canada.

Except in some cases where we may rely on an exception under the Privacy Act or other law, we will take reasonable steps to ensure that such overseas recipients do not breach the Privacy Principles in the Privacy Act in relation to such information.

In respect of health information covered by health records legislation, unless otherwise required or permitted by law, we will only disclose your health information to a third party outside the state/territory of collection if we reasonably believe that the recipient of the information is subject to a law, binding scheme or contract which upholds principles for fair handling of the information that are substantially similar to those in the applicable health records legislation.

How do we protect personal information?

ZEST will take reasonable steps to keep any personal information we hold about you secure. Please notify us immediately if you become aware of any breach of security.

However, except to the extent liability cannot be excluded due to the operation of statute, we exclude all liability (including in negligence) for the consequences of any unauthorised access to, disclosure of, misuse of or loss or corruption of your personal information. Nothing in this Privacy Policy restricts, excludes or modifies or purports to restrict, exclude or modify any statutory consumer rights under any applicable law including the Competition and Consumer Act 2010 (Cth).

Accuracy of the personal information we hold

We try to maintain your personal information as accurately as reasonably possible. We rely on the accuracy of personal information as provided to us both directly (from you) and indirectly.

You may contact us if the personal information we hold about you is incorrect or to notify us of a change in your personal information. Our contact details are set out in section 14 of this Privacy Policy.

Links, cookies and use of ZEST websites and applications

ZEST websites may contain links to other sites. This Privacy Policy applies to our websites and not any linked sites which are not operated or controlled by ZEST. We encourage you to read the privacy policy of each website that collects your personal information.

ZEST uses “cookies” and similar technology on its websites and in other technology applications. The use of such technologies is an industry standard, and helps us monitor the effectiveness of our advertising and how visitors use our websites/applications. We use such technologies to generate statistics, measure your activity, improve the usefulness of our websites/applications and to enhance the “customer” experience.

If you prefer not to receive cookies you can adjust your internet browser to refuse cookies or to warn you when cookies are being used. However, our websites may not function properly or optimally if cookies have been turned off.

How can you access and correct personal information we hold about you?

You may seek access to personal information which ZEST holds about you by contacting us as described in section 14 of this Privacy Policy. We will provide access to that information in accordance with the Privacy Act and health records legislation, subject to certain exemptions which may apply. We may require that the person requesting access provide suitable identification and where permitted by law we may charge an administration fee for granting access to your personal information.

If you become aware that any personal information we hold about you is incorrect or if you wish to update your information, please contact us (see section 14 of this Privacy Policy).

Queries, comments and complaints about our handling of personal information

If you have any questions, comments or complaints about our collection, use or disclosure of personal information, or if you believe that we have not complied with this Privacy Policy, the Privacy Act or applicable health records legislation, please contact us (see section 14 of this Privacy Policy).

2When contacting us please provide as much detail as possible in relation to your question, comment or complaint.

3ZEST will take any privacy complaint seriously and any complaint will be assessed by an appropriate person with the aim of resolving any issue in a timely and efficient manner. We request that you cooperate with us during this process and provide us with any relevant information that we may need.

4If you are not satisfied with the outcome of our assessment of your complaint, you may wish to contact the Office of the Australian Information Commissioner (click here for information) or other relevant regulators.

How can you contact us?

Please address all privacy complaints and requests to update or access information to:

Attention: Privacy Officer
Nexus Australasia Pty Ltd
ABN 81 115 828 941

Level 7
737 Bourke Street
Docklands, VIC 3008
OR privacy@symbion.com.au

Any requests to access, update or correct your health information should be made in writing.

To unsubscribe from our direct marketing, you can also contact us at donotcontact@symbion.com.au and set out the contact details that you no longer want used for direct marketing.

ZENTIR PTY LTD COMPANY PRIVACY POLICY
Zentir Pty Ltd (Zentir) is a business that partners with various organisations and businesses to communicate information through a variety of platforms. Some of this information is of a medical or scientific nature and may from time to time require the collection of personal information.

This document is our privacy policy and it outlines how we collect, manage and disclose personal information we may have access to through programs and platforms that we administer. Zentir complies with the Australian Privacy Principles from Schedule 1 of the Privacy Amendment (Enhancing Privacy Protection) Act 2012, which amends the Privacy Act 1988.

What is personal information?

The term ‘personal information’ has the meaning given to it in the Privacy Act, which, in general terms, is any information about an individual, or an opinion about an individual, that could be used to identify an individual. This may include an individual’s name, address, telephone number or email address. If the information we collect identifies an individual, or an individual is reasonably identifiable from it, the information will be considered personal information.

For the purposes of this policy, no distinction has been made between the handling of personal information and sensitive information (as that term is defined in the Act); therefore, all information will be referred to as “personal information” throughout this document.

What personal information do we collect and hold?

Zentir may collect the following types of personal information:

Name, address, telephone number or email address;
Age or date of birth;
Ethnicity;
Profession, occupation or job title;
The names of health service providers or specialists to whom you are referred;
Current medications or treatments;
Information relevant to medical care, that may be relevant to the program or service you are registering for, including but not limited to personal medical history, and family medical history (where clinically relevant);

We may also collect some information that is not personal information because it does not identify you or anyone else. For example, we may collect anonymous answers to surveys or aggregated information about how users use websites we administer.

If we need to collect sensitive information (such as your ethnic background), we will not collect that information unless we have first obtained your consent.

How do we collect your personal information?

We collect your personal information directly from you when you register in a program, with a service or on a website that we administer.

For what purposes do we collect, hold, use and disclose your personal information?

We collect personal information so that we can perform our business activities and functions, and provide the best possible quality of service.

We collect, hold, use and disclose your personal information for the following purposes:

to provide you access to a program or service that we administer that you choose to register with;
to comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, or in co-operation with any governmental authority of any country, resolve any disputes that we may have and enforce our agreements with third parties;
for administrative and billing purposes;
to process and respond to any complaint made by you;
to conduct business processing functions including providing personal information to our related bodies corporate, contractors, service providers or other third parties;
to meet obligations of notification to our insurers, sponsoring pharmaceutical companies, health regulatory authorities.

What happens if we can’t collect your personal information?

If you do not provide us with the personal information described above we may not be able to provide you with access to the requested program or service, either to the same standard or at all;

To whom may we disclose your information?

We may disclose your personal information to:

our employees, program facilitators and organisations, related bodies, contractors or service providers, for the purposes of operation of our business, fulfilling requests by you, and to otherwise provide products and services to you including, without limitation, web hosting providers, IT systems administrators, mailing houses, couriers, payment processors, data entry service providers, electronic network administrators, debt collectors, and professional advisors such as accountants, solicitors, business advisors and consultants;
suppliers and other third parties with whom we have commercial relationships, for business, marketing, and related purposes;
anyone to whom our assets or businesses (or any part of them) are transferred;
any organisation or person for any authorised purpose with your express consent; and
other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

Your personal information will not be shared, sold, rented or disclosed other than as described in this Privacy Policy, a relevant collection notice, or as permitted under the Act.

How can an individual access and correct their personal information?

An individual may request access to any personal information we hold about them at any time by contacting us. Where we hold information that an individual is entitled to access, we will try to provide suitable means of accessing it (for example, by emailing it to you). We may charge a fee to cover our administrative and other reasonable costs in providing the information and, if so, the fees will be as advised from time to time. We will not charge for simply making the request and will not charge for making any corrections to personal information. There may be instances where we cannot grant access to the personal information we hold; however, we will only do so in accordance with our rights and obligations under the Privacy Act. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will provide written reasons for any refusal.

If an individual believes that personal information held about you is incorrect, incomplete or inaccurate, then individuals may send us a written request to amend it, including the basis on which amendment is requested. We will consider if the information requires amendment. If we do not agree that there are grounds for amendment then we will add a note to the personal information stating that the individual disagrees with it.

What is the process for complaining about a breach of privacy?

If an individual believes that their privacy has been breached, the individual should contact us in accordance with the arrangements set out below and provide details of the incident so that we can investigate it. Our procedure for investigating and dealing with privacy breaches is for the incident to be investigated by our Privacy Officer.

Data security

We take reasonable steps to ensure personal information is protected from misuse and loss and from unauthorised access, modification or disclosure. We may hold information in either electronic or hard copy form. Personal information is destroyed or de-identified when no longer needed.

As our website is linked to the internet, and the internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information communicated to us online. We also cannot guarantee that the information supplied will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which is transmitted to us online is transmitted at an individual’s own risk.

Contacting us

If you have any questions about this privacy policy, any concerns or a complaint regarding the treatment of your privacy, or a possible breach of your privacy, please contact us at privacy@zentir.com.

We will treat requests or complaints confidentially. We will contact individuals within a reasonable time after receipt of a complaint to discuss concerns and outline options regarding how they may be resolved. We will aim to ensure that concerns or a complaint is resolved in a timely and appropriate manner.

Changes to our privacy policy

We may change this privacy policy from time to time and any updated versions of this privacy policy will be posted on our website. This privacy policy was last updated on 19th August 2019.

AU-N-CZ-axSpA-2200019. May 2023. z23_2239