The way in which we collect personal information about you will depend on your relationship or interactions with us.

Certain parts of our Services may ask you to provide personal information voluntarily. For example, we may ask you to provide your contact details to register an account with us, to subscribe to marketing communications from us, or to submit enquiries to us. The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

When you access our Services online, we may collect certain information automatically from your device. Specifically, the information we collect automatically may include your internet protocol (IP) address, your login data, browser type and version, time zone setting and location and other technical information. We may also collect information about how your device has interacted with our Services, including what was accessed and the links clicked.

Collecting this information enables us to better understand the users of our Services, where they come from, and what content is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Services.

Some of this information may be collected using cookies and similar tracking technology, as explained further in our Cookies Policy.

Where possible, we collect information directly from you. However, there may be occasions where we receive information about you from third parties with whom we have a relationship.

The table below sets out the types of personal information we collect, why we use it, and where required under applicable law, the lawful basis for processing that personal information.

The lawful basis for processing your personal information are as follows:

• Consent: where you have given consent to the processing of your personal data for one or more specific purposes.
• Performance of a contract: where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
• Legal obligation: where processing is necessary for compliance with our legal obligations.
• Legitimate interests: where processing is necessary for a legitimate interest, and that legitimate interest is not overridden by your interests or fundamental rights and freedoms.

The lawful basis for processing your sensitive personal information are as follows:

• Health or social care: where processing is necessary for the provision of healthcare and services.
• Employment: where processing is necessary for the assessment of your working capacity sensitive personal information.

We may share your information within our operation to the following categories of recipients:

• To persons for whom we have your consent to share your personal information.
• To our group companies for the purposes for which we are entitled to process your personal information under this Privacy Policy.
• To third party service providers who work for us in the provision of our services and with whom we have contractual relationship. Your data may also be processed by a third party if required to deliver a service you have requested. For example, a product delivery, logistical or service request.
• To any competent law enforcement body, regulatory, government agency, court or other third party where we believe it is necessary (i) as a matter of applicable law or regulation; (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person. For example, we are required under the Australian Corporations Act 2001 (Cth) to maintain a register of shareholders and make it available for inspection by the public. We may also be required to disclose information about your shareholding to regulatory bodies such as the Australian Securities and Investments Commission and the Australian Taxation Office.
• To an actual or potential buyer (and its agents and advisors) in connection with any actual or proposed purchase, merger, or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes set out in this Privacy Policy.

We will check any third party that we use to ensure that they can provide sufficient guarantees regarding the confidentiality and security of your personal information.

Our websites may contain links to other websites operated by third parties and may include social media features such as LinkedIn, Facebook, Instagram and Twitter buttons (such as “Like,” “Tweet” or “Pin”). These third-party sites may collect information about you if you click on a link and the social media sites may automatically record information about your browsing behaviour every time you visit a website that has a social media button.

Your interactions with these features are governed by the privacy policy of the company providing the feature, not by this Privacy Policy. We do not control what information these third parties collect. Please review your privacy settings on your social media sites and think carefully before clicking on links which may take you to a third-party website.

We take security seriously and care about the integrity of your personal information. We use commercially reasonable physical, administrative, and technological methods to secure your personal information and protect it from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

If any information under our control is compromised because of a breach of security, we will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.

In order to deliver our core functions and to ensure we meet our legal data protection and privacy obligations, we will retain your information for at least as long as your account is active, as needed to provide you services, as long as is needed to fulfil the purpose for which it was collected (and any other linked purpose) or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

You have the following data protection rights:

• If you wish to access of your personal information, you can do so at any time by contacting us at info@optiscan.com.
• If you wish to correct or update your personal information you can do this contacting us at info@optiscan.com or clicking on the appropriate links within our marketing communications.

• You can opt out of marketing communications we send you at any time by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To opt-out of other forms of marketing, please contact us using the contact details provided in the “Contact” section of our website.
• You have the right to complain to a data protection authority about our collection and use of your personal information. 

Where you exercise your data protection rights, our response will depend on our role as a controller or processor, our legal basis for processing and whether any exemptions are available under applicable privacy or data protection laws. If you wish to exercise any of these rights in relation to personal information provided to us by your healthcare professional and for which we are a processor, please contact your healthcare professional directly.

We respond to all requests we receive from individuals wishing to exercise their rights in accordance with applicable privacy and data protection laws. To comply with a request, we may ask you to identify yourself. In such a situation, we will only request information to the extent required to confirm your identity. You also have the right not to identify yourself when dealing with us where it is lawful and practicable for us to allow it. However, if you don’t provide us with your personal information when requested, we may not be able to respond to your request or provide you with the Service that you are seeking.

If you have a question, comment, or complaint about how we have collected or handled your personal information, please contact our privacy officer using the contact information below and provide details of the incident so that we can investigate it.

If you are making a complaint, we will treat your complaint confidentially, investigate your complaint and aim to ensure that we contact you and your complaint is resolved within a reasonable time (and in any event within the time required by applicable law).

You also have the right to complain to the regulator, and to lodge an appeal if you are not happy with the outcome of a complaint.

• In Australia, please contact the Office of the Australian Information Commissioner.
• In all other jurisdictions, please contact us by email, phone or post using the details below. 

E: info@optiscan.com

T: +61 (3) 9538 3398

A: Optiscan Imaging Ltd, 16 Miles Street, Mulgrave, VIC 3170, Australia

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. You can see when this Privacy Policy was last updated by checking the “last updated” date displayed at the top of this Privacy Policy.

You should check our website frequently to see any recent changes. Unless otherwise stated, our current Privacy Policy applies to all information that we have about you. We will not materially change our policies to make them less protective of personal information collected in the past without the consent of those affected.