Privacy Policy

Just Ask Camilla Pty Ltd, ABN 59 701 582 783, Sydney, Australia, trading as Camilla, handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and health information under the Health Records and Information Privacy Act 2002 (NSW). Health information is sensitive information and we treat it accordingly.

What we collect

  • Contact and account details: your name, email address, suburb, phone number if you give it, and your membership and payment history.
  • Health questionnaire responses: age, sex, relevant history, medicines, lifestyle information and the reason you are testing.
  • Pathology results: the marker values returned by the laboratory, the practitioner review notes, and your Wellness Score derived from those values.
  • Technical information: basic website analytics and security logs, such as device and browser type.

Why we collect it

To arrange your blood collection, have your sample tested, have your results reviewed by a registered practitioner, present your results and general wellness guidance in the app, manage your membership and payments, answer your enquiries, meet our legal and record-keeping obligations, and improve the service. We only send you marketing emails if you have opted in, and every marketing email includes an unsubscribe link.

Who we share it with

  • The NATA-accredited Australian pathology laboratory and the partner collection centre that collects and tests your sample.
  • The AHPRA-registered practitioners who review your results and flag anything needing attention.
  • Our payment processor, Stripe, which handles your card details directly. We never store your full card number.
  • Service providers who host our website, database and email, under contracts that require them to protect your information.
  • Anyone else where you consent, or where the law requires or permits disclosure.

We do not sell your personal or health information, and we do not share it with advertisers or insurers.

Storage and security

Your personal and health information is stored in encrypted databases hosted in Australia. Access is restricted to the small number of staff and practitioners who need it, protected by individual accounts and access logging. Data is encrypted in transit and at rest. If a limited technical service provider needs to process data outside Australia, we require contractual protections at least equivalent to the Australian Privacy Principles, and we will tell you where that applies to your results.

How long we keep it

We keep health information for at least 7 years from your last test, in line with Australian health records requirements, and longer if the law requires. Contact and billing records are kept for 7 years for tax and audit purposes. Waitlist details are kept until you ask us to remove them or you tell us you are no longer interested. When information is no longer needed and we are not required to keep it, we securely delete or de-identify it.

Access and correction

You can ask for a copy of the personal and health information we hold about you, and ask us to correct anything inaccurate or out of date. Email max@justaskcamilla.com and we will respond within 30 days. We may need to verify your identity first. There is no fee for a routine request. If we refuse access, we will explain why in writing and how you can complain.

Complaints

If you think we have mishandled your information, email max@justaskcamilla.com with the details and we will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992, or, for NSW health information, the NSW Information and Privacy Commission at ipc.nsw.gov.au.

Contact us

Privacy enquiries: max@justaskcamilla.com, Just Ask Camilla Pty Ltd, Sydney NSW, Australia.