Privacy Policy & Health Data Protection
Last Updated: October 2026 • Compliant with Privacy Act 1988 (Cth) & Digital Health Data Standards
1. Collection of Personal & Health Information
We collect personal information necessary to deliver educational content and fulfill your orders. This includes:
- Contact Details: Full name, email address, and billing address.
- Transactional Data: Payment card tokens processed via PCI-DSS Tier 1 certified infrastructure (Stripe). We never store raw credit card numbers on our servers.
- Telemetry & Technical Data: Regional postal code or state selection (used exclusively to customize your regional pollen bloom calendar), IP address, browser type, and interaction metrics.
2. Use of Information
Your information is used solely to:
- Transmit immediate download credentials and access links for digital protocol materials.
- Deliver relevant aerobiological and seasonal pollen alerts aligned with your Australian state or climate zone.
- Provide customer care, process refunds under our 30-day guarantee, and maintain statutory financial records.
3. Data Storage & Security Safeguards
All client communications and web transmissions are protected using end-to-end 256-bit Secure Socket Layer (SSL/TLS) encryption. Data at rest is encrypted according to industry standards. Access to administrative systems is restricted through multi-factor authentication (MFA) and least-privilege role separation.
4. Disclosure to Third Parties
We disclose information strictly to certified service providers who assist our platform operations (e.g., Stripe for payment clearance, transactional email infrastructure, and Australian hosting providers). These partners are bound by strict non-disclosure obligations and Australian Privacy Principle agreements. We will never sell your information to third-party ad networks.
5. Access, Correction & Deletion Rights
Under APP 12 and 13, you have the right to request access to the personal data we hold about you, request corrections, or request complete account erasure. To exercise your privacy rights, email our Privacy Officer at privacy@hayfeversos.com. Requests will be acknowledged and processed within 14 business days.
6. Privacy Inquiries & Complaints
If you have questions regarding this Privacy Policy or believe your data has been handled inconsistently with the APPs, please contact:
Privacy Officer • Hay Fever SOS Australia
Email: privacy@hayfeversos.com
You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.