1. Information we collect
Depending on how you interact with Longevico, we may collect contact, appointment, billing, referral and funding details; communications; health, injury, medication and lifestyle information; assessment and exercise data; clinical notes and reports; and images or movement recordings needed for care. Health information is collected only where reasonably necessary and with consent or another lawful basis.
2. How information is collected
Information is usually collected directly from you through enquiries, intake and consent forms, appointments, email, phone or approved health tools. Relevant information may also come from treating practitioners, testing providers, funders, carers or authorised representatives where expected, consented, required or otherwise permitted.
3. Website data, cookies and analytics
The website and its providers may collect technical information such as device and browser details, pages visited, referring sources, approximate location and cookies. This supports website operation, security and measurement. Optional analytics are enabled only after consent, and you can change your choice using Cookie settings in the footer. Public enquiry content, contact details and health information must not be sent to analytics as conversion data.
4. Why information is used
Information may be used to respond to enquiries, assess suitability, arrange and provide Exercise Physiology services, prepare programs and reports, manage funding and accounts, communicate about care, meet legal and professional obligations, improve services and send resources or updates where permitted. Longevico does not sell personal information or use health information for unrelated marketing without consent.
5. Disclosure to third parties
Information may be disclosed where reasonably necessary to treating practitioners, approved testing or technology providers, funders, professional advisers, regulators or another party you authorise. External providers are independent and Longevico takes reasonable steps to limit disclosure to the agreed purpose.
6. Workplace and organisational programs
Where a service is arranged through an employer or organisation, individual health records and clinical results are not shared with that organisation without consent or another lawful basis. De-identified or aggregated reporting may be provided where it does not reasonably identify an individual.
7. Overseas processing
Some technology, cloud or support providers may store or process information outside Australia. Where personal information is disclosed overseas, Longevico takes reasonable steps to assess the provider and protect the information consistently with applicable Australian privacy requirements, subject to legal exceptions.
8. Security
Longevico uses reasonable safeguards such as access controls, secure systems, confidentiality obligations, provider review and secure disposal. No online transmission or storage method is completely secure, so detailed medical records should not be sent through public website forms or ordinary messages unless a secure method has been arranged.
9. Data breaches
A suspected or confirmed breach is contained, assessed and responded to. Affected people and the Office of the Australian Information Commissioner are notified where the Notifiable Data Breaches scheme requires it.
10. Access and correction
You may request access to personal or health information Longevico holds about you, or ask for inaccurate, out-of-date, incomplete, irrelevant or misleading information to be corrected. Identity may need to be verified and lawful exceptions can apply.
11. Retention
Information is retained for as long as reasonably necessary for care, business, insurance, professional and legal obligations. When it is no longer required, reasonable steps are taken to destroy or de-identify it unless retention remains permitted or required.
12. Marketing communications
Longevico may send resources, updates, invitations or service information where permitted. You can unsubscribe at any time. Administrative, appointment, account, clinical or legally required messages may still be sent when necessary.
13. Photos, video and testimonials
Photos, video or movement recordings may be collected when relevant to assessment, programming, review or education. Identifiable images, testimonials, case studies or personal stories are not used publicly for marketing without consent.
14. Anonymity and pseudonyms
You may make a general enquiry anonymously or under a pseudonym where practical. Identity may be required to provide health services, keep accurate records, process payments, meet legal obligations or communicate safely with other providers.
15. Children and young people
Consent, access, communication and disclosure are handled according to the young person’s age, maturity, circumstances and applicable requirements, including involvement of a parent, guardian or authorised representative where appropriate.
16. Third-party links
The website may link to independent websites or platforms. Longevico is not responsible for their privacy, security or content; review their privacy information before providing personal information.
17. Complaints
Contact the Longevico Privacy Officer first so the concern can be investigated and answered. If you remain dissatisfied, you may be able to contact the Office of the Australian Information Commissioner.
18. Policy changes
This policy may be updated when services, legal obligations, technology providers or privacy practices change. The current version and updated date will be published on the website.