Privacy Policy | CPAP Online Australia

– Updated 11 September 2024

This following document sets forth the Privacy Policy for the CPAP Online Australia website, https://www.cpaponline.com.au.

CPAP Online Australia is committed to protecting your privacy and complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy outlines how we collect, use, hold, disclose, and protect your personal information. It also explains your rights and how we use modern marketing tools and remote monitoring systems.

By using our website, services, or engaging with us, you agree to the terms of this Privacy Policy.

1. What Personal Information We Collect

We may collect the following types of personal information depending on how you interact with us:

General Information

Name, date of birth, gender, phone number, email address, and postal address.
Payment information (e.g., credit/debit card details) collected securely through approved payment platforms (e.g., Stripe, PayPal).
Account details, preferences, and transaction history.

Credit information and eligibility data, including repayment history and credit scores, from credit reporting bodies (e.g., Equifax).
Financial details such as income, expenses, liabilities, and assets (if required for purchase plans or financing).

Usage Data

Information about your browsing activity on our site, including:
- IP address, device type, browser type, operating system, and geolocation.
- Pages visited, time spent on pages, search terms, and referring websites.
Data collected through cookies, pixels, and similar technologies to enhance user experience and deliver targeted advertising.

Remote Monitoring Data

For customers who consent, we may collect therapy-related data via remote patient monitoring systems:

Therapy metrics (e.g., usage hours, pressure settings, AHI, and mask fit).
Device serial numbers and personal details (e.g., name and contact details).

Sensitive Information

In limited cases (e.g., hardship requests), we may collect sensitive information such as health conditions or medical history, with your explicit consent.

2. How We Collect Your Information

We collect personal information in the following ways:

Directly From You

When you register an account, make a purchase, complete a survey, or contact customer support.
Through forms, emails, phone calls, or live chat.

Automatically

Using cookies, web beacons, and tracking technologies when you visit our website or use the CPAP Online Australia app.

From Third Parties

From payment processors, credit reporting bodies, and publicly available sources (e.g., social media profiles).
From manufacturers or service providers of remote monitoring systems (e.g., ResMed, Philips).

3. How We Use Your Information

We use your personal information for the following purposes:

Providing Products and Services

To process orders, deliver products, and manage your account.
To provide therapy monitoring services and tailored recommendations to improve your CPAP experience.

Marketing and Advertising

To deliver personalised marketing messages via email, SMS, or notifications, including promotions and offers.
To display targeted advertising through platforms such as Google Ads, Facebook, and Instagram based on your browsing activity or interactions with our site.
To use tools like Facebook’s Custom Audience and Google Ads remarketing to show ads tailored to your preferences.

Analytics and Improvements

To analyse website usage and optimise the user experience.
To develop and improve our products and services using aggregated, anonymised data.

Fraud Prevention and Compliance

To detect and prevent fraud, unauthorised transactions, or misuse of our services.
To comply with legal obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).

Remote Monitoring Systems

To monitor CPAP therapy progress, resolve issues, and assist with third-party services (e.g., SleepHQ, Fisher & Paykel InfoSmart).

Third Parties

We may share your personal information with:

Service providers: payment processors (e.g., Stripe, PayPal), marketing agencies, IT support, and logistics companies.
Advertising partners: Google Ads, Facebook, and other analytics platforms to display targeted ads.
Manufacturers and monitoring platforms: For therapy monitoring services (e.g., ResMed AirView, SleepHQ).
Credit reporting bodies: For purchase plans or financing (e.g., Equifax, Illion).
Government authorities: If required by law (e.g., under the Privacy Act or AML/CTF Act).

Cookies and Marketing Tools

We use cookies, tracking pixels, and similar technologies to:

Track website activity and deliver personalised experiences.
Share anonymised data with platforms like Google Ads and Meta for retargeting purposes.

You can opt out of targeted advertising by adjusting your browser settings or visiting:

5. Usage of Personal Data in Remote Monitoring Systems

What We Collect

Therapy metrics (e.g., CPAP usage hours, pressure settings, and mask fit).
Device serial numbers and associated personal details.

How We Use Your Data

Monitor your CPAP therapy progress and provide support.
Identify and resolve treatment issues.
Connect you with third-party platforms (e.g., SleepHQ, Fisher & Paykel InfoSmart).

Who Can Access Your Data

Authorised personnel within CPAP Online Australia.
Manufacturers or service providers of monitoring platforms (e.g., ResMed, Philips).

Your Rights

Access: Request a copy of your therapy data.
Correction: Request corrections to inaccuracies.
Withdrawal of Consent: Opt out of remote monitoring by contacting us.

Data Security

We follow strict protocols to protect your data from unauthorised access, alteration, or misuse.

6. Your Rights

You have the right to:

Access: Request the personal data we hold about you.
Correction: Request corrections to inaccurate information.
Deletion: Request data deletion where legally permissible.
Opt-Out: Stop receiving marketing messages or targeted ads.
Withdraw Consent: Revoke consent for remote monitoring or other services.

To exercise your rights, contact our Privacy Officer here.

7. Keeping Your Information Secure

We use industry-standard measures, including encryption and secure servers, to protect your personal information. Access to your data is restricted to authorised personnel only. While we strive to protect your data, no system is entirely secure. Please notify us immediately if you suspect unauthorised access to your account.

8. Retention of Information

We retain your personal information for as long as necessary to:

Provide our services to you.
Comply with legal obligations (e.g., tax or AML laws).
Resolve disputes or enforce our agreements.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Updates will be published on our website, and significant changes may be communicated via email.

10. Contact Us

If you would like to: access, correct, amend or delete any personal information we have about you, simply contact our Customer Service team here.