Privacy Policy

1. Introduction

Varney Health ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our health assessment services.

This Privacy Policy complies with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and, where applicable, the General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you use our services:

• Contact Information: Name, email address
• Health Information: Responses to health assessment questions, including symptoms, lifestyle factors, and health concerns
• Technical Information: IP address, browser type, device information, pages visited, time spent on pages
• Marketing Information: Communication preferences, email engagement data

2.2 Sensitive Information

The health information you provide through our assessment questionnaire is considered "sensitive information" under Australian privacy law. We only collect this information with your explicit consent and use it solely for the purposes described in this policy.

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Analyse website traffic and user behaviour
• Deliver personalised content and advertisements
• Track conversion events from advertising campaigns

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide you with personalised health reports and recommendations based on your assessment responses
• Referrals: To match you with appropriate healthcare providers, testing services, and supplement recommendations
• Communication: To send you your health report, follow-up emails, and educational content related to your health concerns
• Marketing: To send you information about products and services we believe may interest you (with your consent)
• Analytics: To improve our website, services, and user experience
• Legal Compliance: To comply with applicable laws and regulations

4. How We Share Your Information

4.1 Healthcare Providers

If you choose to book a consultation with one of our partner healthcare providers, we will share your assessment responses and contact information with that provider to facilitate your consultation. This is done with your explicit consent.

4.2 Service Providers

We share your information with trusted third-party service providers who assist us in operating our website and services, including:

• Email Service Provider: Brevo (for sending emails and managing contact lists)
• Analytics Providers: Google Analytics, Microsoft Clarity (for website analytics)
• Advertising Platforms: Microsoft Advertising, Meta Ads (for conversion tracking)
• Hosting Provider: Vercel (for website hosting)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Affiliate Partners

When you click on links to testing services or supplement providers, you will be directed to their websites. We may receive a commission if you make a purchase. Your interactions with these third-party websites are governed by their own privacy policies.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Secure data storage with access controls
• Regular security assessments and updates
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact Information: Retained until you request deletion or unsubscribe from our communications
• Health Assessment Data: Retained for 7 years to comply with health records legislation
• Analytics Data: Retained for 26 months (Google Analytics default)

7. Your Rights

Under Australian privacy law, you have the following rights:

• Access: You can request access to the personal information we hold about you
• Correction: You can request correction of inaccurate or incomplete information
• Deletion: You can request deletion of your personal information (subject to legal retention requirements)
• Opt-Out: You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails
• Complaint: You can lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, please contact us at privacy@varney.health.

8. International Data Transfers

Some of our service providers are located outside Australia (e.g., Brevo in France, Vercel in the United States). When we transfer your personal information overseas, we ensure that appropriate safeguards are in place to protect your information in accordance with Australian privacy law.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

12. Complaints

If you have a complaint about how we have handled your personal information, please contact us first at privacy@varney.health. We will investigate your complaint and respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):