Welcome to Phytoca!
We value your privacy and we work hard to protect the information you provide to us.
Phytoca Pty Ltd (ABN 90 623 470 119) (Phytoca) is an online health platform that facilitates the provision of medicinal cannabis goods and services. Phytoca is bound by the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) (Privacy Act).
This Privacy Policy explains how we manage your personal information (which includes your health information), including our obligations and your rights in respect of our dealings with your personal information.
Please take a moment to read our Privacy Policy as it describes what happens to your personal information that is collected via our website at https://phytoca.com.au (the Website) or as a result of you using our services.
1 CONSENT TO COLLECT AND USE YOUR PERSONAL INFORMATION
By engaging with Phytoca and providing us with your personal information, you provide consent to Phytoca for accessing and using your personal information for the purposes disclosed in this Privacy Policy. You also provide consent for Phytoca to disclose your personal information in accordance with this Privacy Policy.
If we need to use your information for anything else, we will seek additional consent from you to do this.
2 HOW WE COLLECT YOUR PERSONAL INFORMATION
We will collect and hold your personal information in a fair and lawful manner, and not in an intrusive way. Where it is reasonably practical to do so, we will collect your personal information directly from you.
We may collect the personal information you directly give us through some of the following means:
- when you register as a healthcare provider through the Website;
- in administering and performing any contracts with service providers;
- if you contact us via telephone;
- from correspondence (whether in writing or electronically), including when you complete our online form or contact us through our Website;
- through any mobile applications provided by Phytoca;
- when administering any of our services; and
- through any other means as otherwise required to manage our business.
We may also collect personal information from publicly available sources and third parties, such as suppliers, contractors, our clients and business partners. If we collect personal information about you from a third party we will, where appropriate, request that the third party inform you that we are holding such information, how we will use and disclose it, and that you may contact us to gain access to and correct and update the information.
3 TYPES OF PERSONAL INFORMATION WE COLLECT
The type of personal information we may collect could include (but is not limited to): your name, postal address, email address, phone numbers, date of birth, shipping information, healthcare provider registration details, your device ID, IP address, statistics on page views, traffic, standard web log-in information, and details of the services you make enquiries about.
We may also collect and hold sensitive health information about you, such as your medical history, medications, allergies, adverse events, immunisations, or any other information provided by you to a healthcare provider.
Where you do not wish to provide us with your personal information, we may not be able to provide you with requested goods or services.
4 OUR PURPOSES FOR HANDLING YOUR PERSONAL INFORMATION
We collect, hold, use and disclose personal information to:
- offer and provide you with our goods and services including healthcare and educational services;
- manage and administer goods and services, including account keeping procedures;
- provide information to healthcare providers affiliated with Phytoca so that they can arrange consultations with you;
- communicate with you about, including (but not limited to), the services you have sought, email you tax invoices, dispatch and track information, returns and exchange authorisations;
- send you marketing or promotional information in relation to Phytoca or any of Phytoca’s business partners that might be of interest to you (including via SMS, email and personalised website experiences);
- improve Phytoca’s products and services, including research and development;
- comply with our legal and regulatory obligations;
- consider your application for employment (if applicable); and
- otherwise to manage our business.
5 DISCLOSURE OF PERSONAL INFORMATION
We may disclose personal information between our group companies or to third parties such as our suppliers, organisations that provide us with technical and support services, or our professional advisors, where permitted by the Privacy Act. If we disclose information to a third party, we generally require that the third party protect your information to the same extent that we do. Specifically, we may disclose personal information for the purposes outlined in this Privacy Policy to:
- healthcare providers;
- cloud service providers; and
- payment system operators.
Phytoca and/or external parties may also require access to, and disclosure of, your personal information in the following circumstances:
- Where it is necessary to provide healthcare;
- Where it is necessary to facilitate the running of the business; or
- Where we are legally obligated to do so in order to co-operate with a law enforcement authority or court order.
By requesting goods and services from Phytoca, or by simply providing personal information to Phytoca, you unconditionally consent to all means of disclosure outlined in this Privacy Policy.
6 PROTECTION OF PERSONAL INFORMATION
We will hold personal information as either secure physical records, electronically on our intranet system, in cloud storage, and in some cases, records on third party servers, which may be located overseas.
We maintain appropriate physical, procedural and technical security for our offices and information storage facilities so as to prevent any loss, misuse, unauthorised access, disclosure, or modification of personal information. This also applies to disposal of personal information.
We further protect personal information by restricting access to personal information to only those who need access to the personal information do their job. Physical, electronic and managerial procedures have been employed to safeguard the security and integrity of your personal information.
We will destroy or de-identify personal information once it is no longer needed for a valid purpose or required to be kept by law.
7 DIRECT MARKETING
Like most businesses, marketing is important to our continued success. We believe we have a unique range of products and services that we provide to customers at a high standard. We therefore like to stay in touch with customers and let them know about new opportunities. We may provide you with information about new products, services and promotions either from us, or from third parties which may be of interest to you.
We will not disclose your personal information to third parties for marketing purposes without your consent.
You may opt out at any time if you no longer wish to receive commercial messages from us. You can make this request by unsubscribing from all future marketing messages by following unsubscribe links included in each marketing email or by contacting our Privacy Officer.
8 COOKIES
A cookie is a small text file stored in your computer’s memory or on your hard disk for a pre-defined period of time. We use cookies to identify specific machines in order to collect aggregate information on how visitors are experiencing the Website. This information will help to better adapt the Website to suit personal requirements. While cookies allow a computer to be identified, they do not permit any reference to a specific individual. For information on cookie settings of your internet browser, please refer to your browser’s manual or visit “Stay smart online – all about cookies and your privacy”.
9 ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION
You have the right to request access to, and correction of, your personal information.
Phytoca will take reasonable steps to correct your personal information where the information is not accurate or up to date. From time to time, we may ask you to verify that your personal information held by Phytoca is correct and current. You may also request that we correct or update your information, and you should make such requests in writing to info@phytoca.com.au
We will respond to all requests for access to or correction of personal information within a reasonable time.
10 OVERSEAS TRANSFERS OF PERSONAL INFORMATION
We will not share your personal information with anyone outside of Australia (unless under exceptional circumstances that are permitted by law) without your consent. We do not currently transfer information overseas directly, but we may engage with cloud service providers who store information overseas.
11 RESOLVING PERSONAL INFORMATION CONCERNS
If you have any questions, concerns or complaints about this Privacy Policy, or how we handle your personal information, please contact us in writing at:
ATT: Privacy Officer
Phytoca Pty Ltd
5/2 Jackson Street
Toorak VIC 3142
Email: info@phytoca.com.au
We take all complaints seriously, and will respond to your complaint within a reasonable period.
If you are dissatisfied with the handling of your complaint, you may contact the Office of the Australian Information Commissioner:
Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
Telephone: 0491 205 199
Email: enquiries@oaic.gov.au
11 CHANGES
We reserve the right to change the terms of this Privacy Policy from time to time, without notice to you. An up-to-date copy of our Privacy Policy is available on our Website and we encourage you to check our website periodically to make sure you are aware of our current Privacy Policy.