Privacy Policy
Physiology First respects your privacy and recognises that health and physiological information is particularly sensitive. This Privacy Policy explains how we collect, use, store and protect personal information when you use the Physiology First website, services, assessments and related platforms.
1. Information We May Collect
Depending on how you use Physiology First, we may collect information including:
- your name, email address, telephone number and other contact information;
- age, sex and other information relevant to physiological assessment;
- information you voluntarily provide through questionnaires, surveys, forms or consultations;
- health history and information about existing medical conditions;
- medications and supplements you tell us you are taking;
- pathology and laboratory results that you choose to provide;
- physiological measurements such as blood pressure, heart rate, heart-rate variability, sleep, blood glucose, body composition, activity, fitness and other health-related measurements;
- information obtained from wearable devices, health-monitoring devices or services that you choose to connect to Physiology First;
- information about your interaction with our website and communications; and
- technical information such as browser type, device information, IP address and website usage data.
We aim to collect only information reasonably required to provide or improve the services you have requested.
2. Connected Devices and Third-Party Services
Physiology First may allow you to connect compatible devices, applications and health platforms. These may include wearable devices, continuous glucose monitors, sleep monitors, body-composition systems and other health or fitness technologies.
Where you authorise such a connection, Physiology First may receive information made available by that service in accordance with the permissions you have granted. You remain in control of whether you connect a third-party service and may withdraw that permission where the relevant technology allows.
Third-party services operate under their own privacy policies and terms. Physiology First is not responsible for the privacy practices or security of independent third-party providers.
3. How We Use Your Information
We may use your information to:
- provide Physiology First services;
- establish an individual physiological baseline;
- organise and display health and physiological information;
- identify patterns, trends and changes within your data;
- help you understand factors that may be influencing your physiology;
- provide personalised educational information and recommendations;
- track progress over time;
- improve our services, systems and analytical methods;
- communicate with you about your account, enquiries or services; and
- comply with applicable legal and regulatory requirements.
4. Health Information
Health information is sensitive personal information. Physiology First will only collect and use health information where you have provided it voluntarily, authorised its collection, connected an appropriate data source, or where collection is otherwise permitted by law.
Your identifiable health information will not be sold to advertisers, data brokers or other third parties. We will not disclose identifiable health information for unrelated marketing purposes without your consent.
5. Artificial Intelligence and Automated Analysis
Physiology First may use software, algorithms and artificial intelligence technologies to assist with organising, analysing and interpreting physiological information. These technologies may help identify relationships, trends or areas that warrant further investigation.
AI-generated analysis is not considered a medical diagnosis and should not be relied upon as a substitute for professional medical judgement. Where third-party artificial intelligence or data-processing services are used, Physiology First will take reasonable steps to ensure that appropriate privacy and data-protection arrangements are in place.
6. Physiology First Is Not a Medical Service
Physiology First is designed to help people better understand their physiology and the information generated by their bodies, devices and health data. Unless expressly stated otherwise, Physiology First does not provide medical diagnosis, emergency medical care or replace the relationship between an individual and their doctor or other qualified healthcare professional.
Information provided through Physiology First should be used to support informed discussion and decision-making. Anyone experiencing a medical emergency or serious symptoms should seek appropriate medical assistance.
7. Disclosure of Information
We may disclose information where reasonably necessary to:
- technology providers that host, secure or operate the Physiology First platform;
- service providers acting on our behalf;
- healthcare professionals where you specifically request or authorise us to share information;
- comply with a legal obligation, court order or lawful government request; or
- protect the security, integrity or legal rights of Physiology First and its users.
Where service providers process information on our behalf, we expect them to use that information only for the services they provide to us and to maintain appropriate confidentiality and security.
8. Data Security
Physiology First takes reasonable technical and organisational measures to protect personal and health information against unauthorised access, disclosure, alteration, loss or misuse. These measures may include encryption, secure authentication, access controls, monitoring, backups and restrictions on administrative access.
However, no internet-based system can guarantee absolute security.
9. Data Storage and Overseas Processing
Information may be stored or processed using reputable cloud, technology or analytical service providers. Some providers may operate infrastructure outside Australia.
Where personal information is transferred or processed internationally, Physiology First will take reasonable steps to ensure appropriate safeguards are applied in accordance with applicable privacy requirements.
10. Data Retention
We retain personal information only for as long as reasonably necessary to provide our services, maintain appropriate records, meet legal obligations and resolve disputes. Information that is no longer reasonably required will be deleted, de-identified or securely archived where appropriate.
11. Access, Correction and Deletion
You may contact Physiology First to request:
- access to personal information we hold about you;
- correction of inaccurate or outdated information;
- deletion of information where legally and technically appropriate;
- withdrawal of consent for particular uses of your information; or
- disconnection of supported third-party data sources.
Some information may need to be retained where required by law, security requirements or legitimate record-keeping obligations.
12. Research, Statistics and De-Identified Information
Physiology First may use aggregated or appropriately de-identified information to understand physiological trends, improve services, conduct analysis or develop new features. Information used for these purposes should not reasonably identify an individual.
Identifiable health information will not be used for independent research or provided to researchers without appropriate consent or another lawful basis.
13. Cookies and Website Analytics
The Physiology First website may use cookies and similar technologies to operate the website, maintain security, understand website usage and improve the user experience. Where required, users will be provided with appropriate choices regarding non-essential cookies and tracking technologies.
14. Marketing Communications
If you choose to receive information from Physiology First, we may contact you about relevant services, educational material, programs or updates. You may unsubscribe from marketing communications at any time.
Health information will not be disclosed to advertisers for targeted advertising.
15. Children
Physiology First is not intended to independently collect sensitive health information from children without appropriate consent from a parent, guardian or other person legally authorised to provide that consent.
16. Changes to This Privacy Policy
We may update this Privacy Policy as Physiology First develops, new technologies or integrations are introduced, or legal requirements change. The current version will be published on the Physiology First website together with its effective or last-updated date.
17. Contact Us
Questions, privacy requests or concerns regarding the handling of personal information can be directed to:
Physiology First
Email: marco@zatta.au
Website: physiologyfirst.au
If you believe we have not appropriately addressed a privacy concern, you may also have the right to lodge a complaint with the relevant privacy or data-protection authority.