Privacy

Version 0.1 draft · Capital Women's Health Pty Ltd, ABN 68 650 033 533, trading as Artia

Who we are

Artia is operated by Capital Women's Health Pty Ltd. Because we provide a health service and hold health information, we are covered by the Privacy Act 1988 (Cth) and the Australian Privacy Principles regardless of our turnover. The small business exemption does not apply to us. Where we deliver services in a state or territory with its own health records legislation, those laws apply as well, including the Health Records and Information Privacy Act 2002 (NSW) and the Health Records (Privacy and Access) Act 1997 (ACT).

What we collect

• Health information you provide in the screening questionnaire, including symptoms, menstrual and cycle history, energy availability markers, bowel and bladder function, and any information shared in a follow up consultation.
• Identity and contact information: your name, date of birth, email address, phone number and the organisation that invited you.
• Account and technical information: login records, access logs and audit records showing who viewed your information and when.

Health information is sensitive information under the Privacy Act. We collect it only with your consent, only where it is reasonably necessary for the screening service, and directly from you.

Why we collect it

To deliver the screening service: to score validated instruments, for a clinician to review and triage your results, to produce your individual report, to deliver education resources matched to your result, and to arrange follow up care where it is warranted. We also use de-identified, aggregated results to produce squad level reports for your organisation.

Who can see your information

• You. You may access your own information at any time and ask us to correct anything that is wrong.
• The Artia clinical team. Registered health practitioners involved in your care.
• Your club sees de-identified squad results only. Club staff cannot see your individual responses or your individual report. We will not disclose your individual information to your club, coaching staff, selectors or team management without your express consent.
• Other practitioners, such as your club doctor or a medical specialist, only where you consent to a referral, or where disclosure is required or authorised by law.

We will never sell your information, use it for marketing, or disclose it to another sporting organisation. Data belonging to one organisation is kept completely separate from every other organisation.

Research

Research consent is separate, optional, and recorded independently of your screening consent. Choosing not to consent does not change your screen, your report or your care in any way. Where you do consent, only de-identified data is used, and only for research approved by a Human Research Ethics Committee. You may withdraw research consent at any time.

Where your information is stored

Your information is held in Australia. We do not disclose your health information to overseas recipients. See Data security for how it is protected.

How long we keep it

Health records are retained for the minimum periods required by the health records legislation applying in the relevant state or territory. Retention periods differ across jurisdictions, and longer periods apply to records of people who were under 18 when the record was made. Records are then securely destroyed or de-identified. When an organisation's engagement ends, we follow a documented process for returning or deleting that organisation's data.

Access, correction and complaints

You may request access to your information, ask us to correct it, or complain about how we have handled it, by emailing [email protected]. We will acknowledge your complaint and respond within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the relevant state privacy or health complaints body.

Changes

We will tell you before we make any material change to how we handle your information.