1. Who handles your information
HIS FORM PTY LTD operates FORM Australia and is responsible for the personal information described in this policy. We aim to handle information consistently with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and applicable health-records laws.
2. What we collect
We may collect identity and contact details, order and payment records, date of birth, sex, address, test selections, pathology results, information you provide about your health, communications, device information, referral source, and site activity.
3. Why we collect it
We collect information to process orders, arrange an Australian doctor's pathology request, coordinate collection, receive and present results, provide support, meet legal and safety obligations, prevent fraud, and improve the service. We collect health information with your consent or where otherwise permitted by law.
4. Consent and choices
Where we ask you to submit health information, you may choose not to consent, but we may then be unable to provide the requested testing service. You can withdraw consent for future handling by contacting us, subject to information we must retain or use by law.
On Australian pages, optional Google, Google Ads, Meta and PostHog tracking does not load unless you allow it. Declining does not prevent ordering. Clearing site storage may reset your choice.
5. Who receives information
We disclose only what is reasonably needed to service providers involved in your order. These may include the Australian-registered requesting doctor, Laverty Pathology/Healius, Shopify and payment providers, hosting and communications providers, and—only with optional tracking consent—Google, Meta and PostHog.
6. Overseas processing
Some service providers may process or support information outside Australia, depending on their infrastructure and support locations. We do not claim that every item of information is stored only in Sydney. We take reasonable steps to use providers and controls appropriate to the sensitivity of the information.
7. Security and retention
We use access controls, encrypted connections, restricted links, and operational safeguards designed to protect information. No system is risk-free. We retain information only as long as reasonably required for service, legal, tax, pathology, dispute, and security purposes, then delete or de-identify it where practicable.
8. Access, correction and complaints
You may request access to or correction of personal information, ask a privacy question, withdraw an optional consent, or complain about our handling of information by emailing hello@hisform.com.au. We may need to verify your identity. If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner.
9. Website links and updates
External services have their own privacy practices. We may update this policy as the service or law changes; the current version and date will appear here.
Questions about these terms can be sent to hello@hisform.com.au.