Heynoon Privacy Policy — Australia

This policy explains how Heynoon handles personal information for people in Australia in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It covers data we collect through our website, waitlist, and provider application forms, how we use and share it, and the choices you have.

What we collect

Contact and account details you provide (name, email, phone).
Health information you choose to share (symptoms, goals, preferences, notes on forms).
Usage and device data (pages visited, interactions, browser/device info, IP address, cookies).
Communications with us (emails, feedback, support inquiries).
Provider application details (name, specialty, location, and other professional information you submit).

How we use information

Provide and improve Heynoon services, including waitlist management and connecting you with AHPRA-registered clinicians.
Personalise recommendations and communications based on your preferences and submissions.
Secure our services, prevent fraud or abuse, and maintain reliability.
Analyse performance and improve products through aggregated insights.
Send product updates, waitlist notifications, marketing messages, or surveys (you can opt out of marketing at any time).
Comply with legal obligations, including record-keeping and reporting requirements, and enforce our Terms.

Sharing

Service providers who support hosting, analytics, communications, security, and operations under confidentiality obligations (some may be outside Australia).
AHPRA-registered clinicians or care partners involved in providing care or reviewing your submissions.
Business transactions (merger, acquisition, financing); your information remains protected under this policy or a successor policy.
Legal and safety needs, including compliance with law or protection of rights, safety, and security.

Overseas disclosure

Some data may be stored in or accessed from the United States or other countries by our service providers. We take reasonable steps to ensure recipients protect your information in line with the APPs.

Storage and retention

We apply industry-standard security controls.
We retain information only as long as needed for the purposes described or to meet legal obligations, after which it is de-identified or deleted.

Data breaches

If a notifiable data breach occurs, we will comply with the Notifiable Data Breaches scheme, including notifying affected individuals and the OAIC where required.

Your rights and choices

Request access to or correction of your personal information.
Withdraw consent for optional uses (such as marketing) and opt out of marketing emails via the unsubscribe link.
Raise a complaint with us; if unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).

Other notes

Children's data: Heynoon is for adults 18+. We do not knowingly collect information from children under 18.

Contact us

Questions, access/correction requests, or privacy complaints? Reach us at hello@heynoon.health.

OAIC contact: www.oaic.gov.au or GPO Box 5218, Sydney NSW 2001.