[LEGAL COMPANY NAME] (ABN [ABN]) trading as Aussiemed ("Aussiemed", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you use [WEBSITE URL] and any related mobile applications (the "Platform").

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"). This Policy forms part of our Terms and Conditions.

1. The Personal Information We Collect

1.1 Information you give us

• Account details - first and last name, email address, mobile and alternate phone numbers, username and password (stored in hashed form), gender and date of birth where you choose to provide them, and your account or customer type.
• Delivery and billing details - delivery addresses, building or unit details, nearby-landmark information, suburb, state, country, and the name and contact number of the person receiving a delivery.
• Business details - business or practice name, department, purchase order number, ABN and tax or VAT registration number.
• Verification documents - where a Product is restricted to healthcare professionals or licensed practices, the professional registration, licence or accreditation details and any supporting documents you upload.
• Order and enquiry content - your orders, quotation and bulk-purchase requests, special delivery instructions, cancellation and return reasons, support messages, contact-form enquiries and any reviews or ratings you submit.

1.2 Information we generate about your use of the Platform

• Shopping activity - items in your cart (including carts you do not check out, which we may flag as abandoned), wishlist items, products you view, and "Notify Me" back-in-stock subscriptions.
• Verification codes - one-time passcodes issued for email or phone verification and password resets, which are short-lived.
• Communications log - a record of transactional emails and notifications we send you, including the recipient address, subject, content and delivery outcome, kept for support and audit purposes.
• Technical data - IP address, browser and device information, and pages or products accessed.

1.3 Information from third parties

• Payment confirmation and status from our payment provider (we do not receive your full card number).
• Delivery and tracking updates from our courier.
• Where you sign in using a third-party account, the basic profile details that provider shares with us.
• Where you provide a professional registration number, verification results from the relevant registration authority.

1.4 Sensitive information

We do not seek health information about you. Please do not send us clinical details, patient information or health records through the Platform, contact forms or support messages. Professional registration and licence details are collected only to confirm eligibility to purchase regulated Products, and are treated as confidential.

2. How We Collect It

We collect personal information directly from you when you register, place an order, request a quotation, upload a document, contact us or subscribe to notifications; automatically as you use the Platform; and from the third parties described in clause 1.3. Where it is reasonable and practicable to do so, we collect personal information directly from you.

3. Why We Collect and Use It

• To create and administer your account and verify your identity or professional eligibility.
• To process, fulfil, invoice, deliver and support your orders, including splitting an order into a separate invoice for each supplier.
• To take payment and to verify a payment with our payment provider before fulfilment.
• To arrange delivery and provide tracking information.
• To handle cancellations, returns, refunds and warranty or consumer-guarantee claims.
• To send transactional messages - order confirmations, invoices, status updates, back-in-stock notifications and password resets.
• To send a reminder where you leave items in your cart, and marketing communications where you have consented or where you would reasonably expect it (see clause 4).
• To respond to enquiries, quotation requests and support requests.
• To maintain security, detect and prevent fraud, and enforce our Terms.
• To improve the Platform, our product range and our service, using aggregated or de-identified data wherever possible.
• To meet our legal, tax, accounting and regulatory obligations, including record-keeping for therapeutic goods and medical devices.

We will not use your personal information for an unrelated purpose unless you would reasonably expect it, you consent, or the law permits or requires it.

4. Marketing and Your Choices

1. We send transactional messages about your account and orders as part of providing the service. These are not marketing and cannot be opted out of while your account is active.
2. We send marketing emails only where you have opted in or where you are an existing customer and would reasonably expect them.
3. Every marketing email contains an unsubscribe link. You can also change your preferences in your account or email us at [PRIVACY EMAIL]. We will action an opt-out promptly.
4. Push notifications, where enabled, can be turned off in your device settings.

5. Who We Disclose It To

We disclose personal information only as needed for the purposes above, to:

• Suppliers - where a product on your order is supplied or fulfilled by a third-party supplier, we share the details needed to pick, pack and dispatch it, including the delivery name, address, contact number and the items ordered. Suppliers are not permitted to use your details for their own marketing.
• Couriers and logistics providers - recipient name, delivery address, contact number and consignment details.
• Payment providers - the information required to process and verify a payment or refund.
• Service providers - hosting, email delivery, SMS and push-notification providers, and IT support, under confidentiality obligations and only to the extent needed to perform their service.
• Professional advisers - accountants, auditors, insurers and lawyers.
• Regulators and authorities - where required or authorised by law, including for product recall, adverse-event reporting or therapeutic goods compliance.
• A purchaser - if we sell or restructure our business, subject to the purchaser agreeing to handle the information consistently with this Policy.

We do not sell your personal information.

6. Cookies and Tracking

We use a small number of cookies that are necessary for the Platform to work:

• Authentication cookie - keeps you signed in.
• Guest cart cookie (tempId) - an encrypted identifier that lets a shopping cart persist for up to 30 days before you sign in. It contains no personal details and is not readable by scripts.
• Currency preference (selected_currency_id) - remembers the currency you selected.
• Session cookie - remembers your product filters so pages behave correctly on refresh.
• Antiforgery cookie - protects forms against cross-site request forgery.

You can block or delete cookies in your browser settings, but signing in and the shopping cart will not work correctly without the cookies listed above.

[If you add analytics, advertising or live-chat tools, list them here, describe what they collect, say whether data leaves Australia, and link to their privacy policies and opt-out mechanisms.]

7. Security

1. Traffic between your browser and the Platform is encrypted in transit. Passwords are stored hashed, never in plain text, and the guest cart identifier is encrypted.
2. We do not store full payment card numbers. Card details are handled by our payment provider.
3. Access to customer data in our admin systems is restricted by role-based permissions, so staff and suppliers can only see what their role requires. Suppliers can see only their own orders and products.
4. Despite these measures, no method of transmission or storage is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

8. How Long We Keep It

1. We keep personal information only as long as needed for the purposes in clause 3 or as required by law.
2. Order, invoice and tax records are generally retained for [NUMBER] years to meet accounting, taxation and therapeutic-goods record-keeping obligations, even after an account is closed.
3. One-time passcodes are short-lived and expire automatically.
4. Abandoned cart data, wishlists and product-view history are retained for up to [NUMBER] months.
5. Where information is no longer needed and we are not required to keep it, we delete it or de-identify it.

9. Overseas Disclosure

Some of our service providers - including [hosting, email delivery, payment processing and notification providers] - may store or process personal information outside Australia, in [COUNTRIES]. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs.

10. Accessing and Correcting Your Information

1. You can view and update most of your details - name, contact details, addresses and preferences - by signing in to your account.
2. You may request access to the personal information we hold about you, or ask us to correct it, by emailing [PRIVACY EMAIL]. We will respond within [NUMBER] days.
3. We may need to verify your identity before acting on a request. If we refuse access or correction, we will tell you why in writing and how to complain.
4. No fee applies to making a request. We may charge a reasonable fee for the cost of providing access to a large volume of information, and will tell you before proceeding.

11. Deleting Your Account

You can ask us to close your account and delete your personal information by emailing [PRIVACY EMAIL]. We will delete or de-identify what we can, but we may need to retain certain records - in particular order, invoice and regulatory records - for the periods described in clause 8. We will tell you what we have retained and why.

12. Anonymity

You can browse the Platform and add items to a cart without creating an account. An account and delivery details are required to place an order, and professional verification is required for restricted Products.

13. Children

The Platform is not intended for anyone under 18 and we do not knowingly collect personal information from children. If you believe we have, contact us at [PRIVACY EMAIL] and we will delete it.

14. Complaints

If you believe we have mishandled your personal information or breached the APPs, contact our Privacy Officer at [PRIVACY EMAIL] with the details. We will acknowledge your complaint within [NUMBER] business days and aim to resolve it within [NUMBER] days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: www.oaic.gov.au, phone 1300 363 992.

15. Changes to This Policy

We may update this Policy from time to time. The current version is always published on this page with a revised "Last updated" date. Where a change is significant, we will take reasonable steps to notify you.

16. Contact Us

• Privacy Officer, [LEGAL COMPANY NAME] trading as Aussiemed
• ABN: [ABN]
• Address: [REGISTERED ADDRESS]
• Email: [PRIVACY EMAIL]
• Phone: [PHONE]