1. PURPOSE OF OUR POLICY
    1. Zed Technologies Pty Ltd ACN 145 575 408, of 230 Church Street, Richmond, Victoria, Australia (Zed Technologies or we) provides an online platform which allows customers to store, retrieve and view diagnostic imagery on mobile devices and via the My Film Bag website located at www.myfilmbag.com (the Services).
    2. We have adopted this Privacy Policy to ensure that we have standards in place to protect the Personal Information (defined below), including sensitive (health) personal information, that we collect about you that is necessary and incidental to:
      1. our provision of the Services; and
      2. the normal day-to-day operations of our business.
    3. This Privacy Policy follows the standards of the Australian Privacy Principles and the New Zealand Information Privacy Principles (including any related rules under the Health Information Privacy Code 1994, where relevant) (Privacy Principles) for the handling of Personal Information under the Privacy Act 1988 (Cth) and the Privacy Act 1993 (New Zealand) (Privacy Act).
    4. By publishing this Privacy Policy we aim to make it easy for you and the public to understand what Personal Information we collect and store, why we do so, how we receive and/or obtain that information, and the rights you have with respect to your Personal Information in our possession.
  2. WHO AND WHAT THIS POLICY APPLIES TO
    1. Our Privacy Policy deals with how we handle “personal information” as it is defined in the Privacy Act (Personal Information).
    2. We collect and store Personal Information, including sensitive (health) Personal Information (being the images produced, captured or prepared by your radiology clinic (Diagnostic Imagery) (Health Information), for and on behalf of our customers.
    3. This Privacy Policy applies to all forms of information, physical and digital, whether collected or stored electronically or in hardcopy.
  3. THE INFORMATION WE COLLECT
    1. In the course of providing our Services, it is necessary for us to collect Personal Information about you, including Health Information. Without limitation, the type of information we may collect includes:
      1. Personal Details: We collect personal details such as your name, gender, date of birth and other information defined as Personal Information in the Privacy Act that allows us to identify who you are; and
      2. Health Records: We collect Diagnostic Imagery in order to provide our Services, which include the provision of an online storage facility which enables you to store, retrieve and view your Diagnostic Imagery.
    2. We may collect other Personal Information about you, which we will maintain in accordance with this Privacy Policy.
    3. We may also collect non-Personal Information about you such as information regarding your computer, network and browser. This may include your IP address. Where non-Personal Information is collected the Australian Privacy Principles do not apply.
  4. HOW INFORMATION IS COLLECTED
    1. We collect Personal Information in a number of ways including but not limited to:
      1. Health Providers. Health information is provided to us by health professionals, being radiology clinics;
      2. Accounts/Memberships. When you submit your details to open an account and/or become a member with us;
      3. Access. When you access us through the internet we may collect information using cookies (if relevant - you can adjust your browser's setting to accept or reject cookies) or analytical services; and/or
      4. Pixel Tags. Pixel tags enable us to send email messages in a format you can read and they tell us whether mail has been opened.
    2. As there are many circumstances in which we may collect information both electronically and physically, we will endeavour to ensure that you are always aware of when your Personal Information is being collected.
    3. Where we obtain Personal Information without your knowledge (such as by accidental acquisition) we will either delete/destroy the information, or inform you that we hold such information, in accordance with the Australian Privacy Principles.
  5. WHEN PERSONAL INFORMATION IS USED & DISCLOSED
    1. In general, the primary principle is that we will not use any Personal Information other than for the purpose for which it was collected and other than with your consent. The purpose of collection is determined by the circumstances in which the information was collected and/or submitted.
    2. We will retain Personal Information for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.
    3. It may be necessary for us to disclose your Personal Information to third parties in a manner compliant with the Australian Privacy Principles in the course of our business.
    4. We will not disclose or sell your Personal Information to unrelated third parties under any circumstances.
    5. Information is used to enable us to operate our business, especially as it relates to you. This may include:
      1. The provision of goods and services between you and us;
      2. Verifying your identity;
      3. Communicating with you about:
        1. Your relationship with us;
        2. Our goods and services;
        3. Our own marketing and promotions to you;
      4. Investigating any complaints about or made by you, or if we have reason to suspect that you are in breach of any of our terms and conditions or that you are or have been otherwise engaged in any unlawful activity; and/or
      5. As required or permitted by any law (including the Privacy Act).
  6. THE SAFETY & SECURITY OF PERSONAL INFORMATION
    1. We may appoint a Privacy Officer to oversee the management of this Privacy Policy and compliance with the Australian Privacy Principles and the Privacy Act. This officer may have other duties within our business and also be assisted by internal and external professionals and advisors.
    2. We will take all reasonable precautions to protect your Personal Information from unauthorised access. This includes appropriately securing our physical facilities and electronic networks.
    3. The security of online transactions and the security of communications sent by electronic means or by post cannot be guaranteed. If you provide information to us via the internet or by post you do so at your own risk. We cannot accept responsibility for misuse or loss of, or unauthorised access to, Personal Information where the security of information is not within our control.
    4. We are not responsible for the privacy or security practices of any third party (including third parties that we are permitted to disclose your Personal Information to in accordance with this policy or any applicable laws). The collection and use of your information by such third parties may be subject to separate privacy and security policies.
    5. If you suspect any misuse or loss of, or unauthorised access to, your Personal Information, you should let us know immediately.
    6. We are not liable for any loss, damage or claim arising out of another person's use of the Personal Information where we were authorised to provide that person with the Personal Information.
    7. We may use external service providers to assist us to provide the Services, including without limitation data and cloud storage service providers, and including external service providers located outside New Zealand and/or Australia. This may mean that your Personal Information is held and processed outside New Zealand and/or Australia.
  7. HOW TO ACCESS AND/OR UPDATE INFORMATION
    1. Subject to the Privacy Principles, you have the right to request from us access to the Personal Information that we have about you, and we have an obligation to confirm a decision to provide that information (and any conditions for providing the information, for example, any related charges) or give you justified reasons for any refusal to provide you with such information within 20 days of receiving your request. We may require you to provide evidence of your identity before providing you with any Personal Information.
    2. You have a right to request correction of readily retrievable Personal Information. If you cannot update your own information, we will correct any errors in the Personal Information we hold about you within 7 days of receiving notice from you about those errors.
    3. It is your responsibility to provide us with accurate Personal Information. We cannot be liable for any information that is provided to us that is incorrect.
    4. We may charge you a reasonable fee for our costs incurred in meeting any of your requests to disclose the Personal Information we hold about you.
  8. COMPLAINTS AND DISPUTES
    1. If you have a complaint about our handling of their Personal Information, you should address your complaint in writing to the details below.
    2. If we have a dispute regarding your Personal Information, we both must first attempt to resolve the issue directly between us.
    3. If we become aware of any unauthorised access to your Personal Information we will inform you at the earliest practical opportunity once we have established what was accessed and how it was accessed.
  9. ACCURACY OF PERSONAL INFORMATION THAT WE HOLD
    1. We take reasonable steps to make sure that the Personal Information that we collect is accurate, up to date and complete. Please contact us if you believe that the Personal Information that we hold about you is inaccurate, incomplete or out of date, and we will take reasonable steps to correct the information.
  10. CONTACTING INDIVIDUALS
    1. From time to time, we may send you important notices, such as changes to our terms, conditions and policies. Because this information is important to your interaction with us, you may not opt out of receiving these communications whenever you are using our services.
  11. CONTACTING US
    1. All correspondence with regards to privacy should be addressed to:

      The Privacy Officer
      Zed Technologies
      privacy@zedtechnologies.com.au

      You may contact the Privacy Officer by email in the first instance.
  12. ADDITIONS TO THIS POLICY
    1. If we decide to change this Privacy Policy, we will post the changes on our webpage at www.myfilmbag.com. Please refer back to this Privacy Policy to review any amendments.
    2. We may do things in addition to what is stated in this Privacy Policy to comply with the Privacy Principles.