Cryosite privacy policy

Cryosite Ltd and Cryosite Distribution Pty Ltd (together “Cryosite”) are committed to protecting the privacy of your personal information generally, and your health information in particular.

This Privacy Policy explains how Cryosite manages the personal information that we collect, use and disclose and how to contact us if you have any further queries about our management of your personal information. This Privacy Policy does not cover personal information collected or held by Cryosite about its employees.

Background

Since 21 December 2001, Cryosite has been required by the Privacy Act 1988 (Cth) (the “Privacy Act”) to comply with ten National Privacy Principles ("NPPs") in accordance with the provisions of the Privacy Act.

The NPPs regulate the manner in which personal information is handled throughout its life cycle, from collection to use and disclosure, storage, accessibility and disposal.

Personal information is information or an opinion, in any form and whether true or not, about an individual whose identity is apparent or can reasonably be ascertained from the information or opinion.

Special provisions apply to the collection of personal information which is sensitive information. This includes health information (which is itself defined in the Privacy Act) and information about a persons' race, ethnic origin, political opinions, membership of political, professional or trade associations, religious or philosophical beliefs, sexual preferences and criminal history.

Collection of personal information by Cryosite

To the extent required by the Privacy Act:

• Cryosite will not collect personal information about you unless that information is necessary for one or more of our functions or activities;

• Cryosite will collect personal information only by lawful and fair means and not in an unreasonably intrusive manner;

• Cryosite will not collect sensitive information (such as health information) about you without your consent, unless that collection is otherwise permitted by the Privacy Act;

• When Cryosite collects personal information directly from you, we will take reasonable steps at or before the time of collection to ensure that you are aware of certain key matters, such as the purposes for which we are collecting the information, the organisations (or types of organisations) to which we would normally disclose information of that kind, the fact that you are able to access the information and how to contact us (for example, where personal information is collected on a form, we will generally include a written privacy statement on the form which sets out these details), and,

• Cryosite will collect your personal information directly from you where it is reasonable and practicable to do so. Where Cryosite collects information about you from a third party, we will still take reasonable steps to ensure that you are made aware of the details set out above.

Use and disclosure of personal information by Cryosite

If Cryosite uses or discloses your personal information for a purpose (the “secondary purpose”) other the main reason for which it was originally collected (the “primary purpose”), to the extent required by the Privacy Act, we will ensure that:

• the secondary purpose is related to the primary purpose of collection (and directly related in the case of sensitive information, such as health information), and you would reasonably expect that Cryosite would use or disclose your personal information in that way;

• you have consented to the use or disclosure of your personal information for the secondary purpose;

• the use or disclosure is required or authorised by or under law; or

• the use or disclosure is otherwise permitted by the Privacy Act (for example, as a necessary part of an investigation of suspected unlawful activity).

We may also disclose your personal information in the case of a sale of the Cryosite business (in whole or part), to the purchaser (as an asset of the business).

Data quality and security

To the extent required by the Privacy Act, Cryosite will take reasonable steps to:

• make sure that the personal information that we collect, use and disclose is accurate, complete and up to date;

• protect the personal information that we hold from misuse and loss and from unauthorised access, modification or disclosure;

• destroy or permanently de-identify personal information that is no longer needed for any purpose that is permitted by the Privacy Act, and,

• You can help Cryosite to keep the personal information that we hold accurate, complete and up to date, by letting us know about any changes to your personal information, such as your name and address.

Anonymity

Cryosite will provide individuals with the option of not identifying themselves when entering transactions when it is lawful and practicable to do so. However, in many cases Cryosite will not be able to provide this option, as we must collect identifying information to provide services such as cord blood storage.

Use of Commonwealth government identifiers

Cryosite will not use Commonwealth government identifiers (“Identifiers”) (such as Medicare numbers) as its own identifier of individuals. We will only use or disclose Identifiers in the circumstances permitted by the Privacy Act.

Transfer of personal information overseas

If Cryosite transfers your personal information outside Australia, we will comply with requirements of the Privacy Act that relate to transborder data flows.

Access and correction of your personal information

Please contact Cryosite if you would like to access or correct the personal information that we hold about you. Cryosite will generally provide you with access to your personal information if practicable (although a fee may be imposed), and will take reasonable steps to amend any personal information that is incorrect. In some circumstances though, Cryosite may not permit access to your personal information, or may refuse to correct your personal information, in which case we will provide you with reasons for this decision.

Access and correction of your personal information

Please contact us if you would like to access or correct the personal information that we hold about you. Cryosite will generally provide you with access to your personal information if practicable (although a fee may be imposed), and will take reasonable steps to amend any personal information that is incorrect. In some circumstances though, Cryosite may not permit access to your personal information, or may refuse to correct your personal information, in which case we will provide you with reasons for this decision.

Complaints

Please contact the Cryosite Privacy Manager using the above details if you have any concerns or complaints about the manner in which your personal information has been collected or handled by Cryosite.

Further information

Please contact us if you have any queries about the personal information that Cryosite holds about you or the way we handle that personal information. Our contact details for privacy queries are set out below.

Cryosite Privacy Manager

13a Ferndell Street
South Granville NSW 2142
Telephone: +612 88652000
Facsimile: +612 88652092
Email:

Further information about the NPPs and the application of the Privacy Act to the private sector generally can be found at the website of the Office of the Federal Privacy Commissioner, at www.privacy.gov.au.

Changes to this Privacy Policy

Cryosite may change this Privacy Policy from time to time. Any changes will be published on our website, at www.cryosite.com.au. You may also obtain a copy of the latest Privacy Policy by contacting us using the details set out above.