Privacy Policy

Last updated: March 2026. SmartHeal is committed to protecting your privacy. This policy is aligned with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Office of the Australian Information Commissioner (OAIC) guidelines.

1. Our Approach to Privacy and Data Governance

We manage personal information in an open and transparent way. This policy sets out how we collect, hold, use, and disclose personal information, and how you may access or correct your information or make a complaint.

2. Kinds of Personal Information We Collect

We may collect the following categories of personal information:

• Contact and identification details: Name, email address, phone number, and professional or organisational affiliation when you register, request a demo, or get in touch with us.
• Account and access information: Login credentials (stored in hashed form), organisation or facility details, and role information where relevant to your use of our services.
• Clinical and health-related information: When you use the SmartHeal platform, we may collect wound images, measurements, wound documentation data, clinical notes, and related identifiers necessary to provide our CDSS and documentation services.
• Technical and usage information: General information about how you access our services, such as device and connection details, to support security, troubleshooting, and service improvement.
• Correspondence and feedback: Enquiries, support requests, and feedback you send to us.

3. How We Collect Personal Information

We collect personal information directly from you when you:

• Register for an account or request a demo
• Use the SmartHeal application to capture, analyse, or document wound care
• Subscribe to our newsletter or contact us
• Interact with our website (e.g., cookies, analytics)

We may also collect information from health organisations or employers where you are authorised to use SmartHeal on their behalf.

4. Purposes for Collecting, Holding, Using and Disclosing

We collect, hold, use, and disclose personal information to:

• Provide and operate the SmartHeal platform
• Process wound images and generate AI-assisted measurements and suggestions
• Maintain clinical documentation and audit trails
• Communicate with you about our services and updates
• Comply with legal and regulatory obligations
• Improve our products and services

5. Data Residency & Sovereignty

100% of SmartHeal data is hosted in AWS Sydney. All processing and storage remain within Australia, supporting Australian data sovereignty and meeting local data protection requirements.

6. Disclosure Overseas

We do not disclose personal information to overseas recipients. All data remains in Australia.

7. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes encryption, access controls, and secure hosting practices.

8. Access and Correction

You may request access to, or correction of, your personal information by contacting us. We will respond within a reasonable period and, where we refuse access or correction, we will provide reasons in writing where required by law.

9. Complaints

If you believe we have breached your privacy, you may contact us to make a complaint. We will investigate and respond within a reasonable period. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner.

10. Contact

For privacy enquiries, access requests, or complaints, please contact us.

This policy is aligned with the Australian Privacy Principles (APPs) and the OAIC guidelines. For more information, see oaic.gov.au.

Clinical Safety & Data