1. Data Controller
The data controller responsible for your personal data is:
- Business Name: Regenvita
- Address: 5 Koala Pl, One Mile NSW 2316, Australia
- Phone: +61 2 4982 2801
- Email: mailuse@regenvita.world
- Website: https://regenvita.world
2. Data We Collect
We collect personal data only where necessary to provide our services or to comply with legal obligations. The categories of data we may collect include:
2.1 Data You Provide Directly
- Contact form submissions: Full name, email address, and the content of your message.
- Consultation requests: Dietary preferences, eating pattern information, and any other information you voluntarily provide.
- Privacy consent records: A record of your consent to data processing when submitting our contact form.
2.2 Data Collected Automatically
- Technical data: IP address, browser type and version, device type, operating system, and referring URL.
- Usage data: Pages visited, time spent on pages, and navigation patterns — collected only where you have consented to analytics cookies.
- Cookie data: Cookie preference records stored in your browser's localStorage. See our Cookie Policy for full details.
3. Purposes and Legal Bases for Processing
We collect and use personal information only where we have a lawful basis. Under the Australian Privacy Act 1988 (Australian Privacy Principles, or APPs), we rely on:
- Primary purpose (APP 6): To respond to your enquiry and provide educational information you request through our contact form.
- Consent (APP 3 & APP 6): For optional analytics and marketing cookies, and for direct marketing where you have opted in. You may withdraw consent at any time.
- Legitimate functions (APP 6): To maintain website security, prevent fraud, and improve platform usability using aggregated or de-identified data.
- Legal obligation: To comply with tax, record-keeping, and other requirements under Australian law.
For visitors in the European Economic Area or United Kingdom, we also process data under GDPR Article 6: contractual necessity (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), consent (Art. 6(1)(a)), and legal obligation (Art. 6(1)(c)), as applicable.
4. Sensitive and Health-Related Information
If you voluntarily provide dietary preferences, eating patterns, allergies, or other health-related details in a consultation enquiry, we treat this information with heightened care. Under the Privacy Act, health information is generally sensitive information and we collect it only with your explicit consent or where otherwise permitted by law.
We use such information solely to tailor educational advisory responses. We do not use it for medical diagnosis, insurance underwriting, or sale to third parties. You may choose not to provide sensitive information; however, this may limit our ability to personalise guidance.
5. Data Retention
We retain personal data only for as long as necessary for the stated purpose or as required by law:
- Contact form data: Retained for a maximum of 24 months from the date of submission, unless an ongoing advisory relationship requires a longer retention period.
- Consultation records: Retained for up to 36 months to enable follow-up advisory support.
- Technical and analytics data: Retained for up to 14 months in anonymised or aggregated form.
- Cookie consent records: Stored in your browser's localStorage and retained until you clear your browser data or withdraw consent.
Upon expiry of the applicable retention period, data is securely deleted or anonymised.
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We may share data with carefully selected third-party processors where necessary to operate our platform:
- Hosting providers: Server infrastructure to host and deliver our website securely.
- Email delivery services: To deliver responses to your enquiries.
- Analytics platforms: To collect anonymised usage statistics, subject to your cookie consent preferences.
All third-party processors are bound by data processing agreements that require them to process your data only according to our instructions and in compliance with applicable privacy law.
Where personal information is disclosed to overseas recipients (APP 8), we take reasonable steps to ensure those recipients handle your information in accordance with the APPs, or we obtain your consent to the disclosure. For transfers from the EEA or UK, we use appropriate safeguards such as Standard Contractual Clauses where required.
7. Direct Marketing and the Spam Act 2003
We will not send you commercial electronic messages (email or SMS marketing) unless you have given express consent or an exception under the Spam Act 2003 (Cth) applies. Every marketing message includes a functional unsubscribe facility and identifies Regenvita as the sender.
You may opt out of marketing at any time by using the unsubscribe link in our emails or by contacting us using the details in Section 1. We will honour opt-out requests within five business days.
8. Your Rights
8.1 Rights under the Australian Privacy Act
If you are in Australia, you have rights under the APPs, including to:
- Access (APP 12): Request access to the personal information we hold about you.
- Correction (APP 13): Request correction of inaccurate, out-of-date, incomplete, or misleading information.
- Anonymity (APP 2): Interact with us anonymously or using a pseudonym where practicable, though we may need your identity to respond to specific enquiries.
- Complaint: Lodge a complaint with us; if unresolved, with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
We will acknowledge privacy requests within 30 days and respond as soon as practicable, and in any event within a reasonable period required by law.
8.2 Rights under GDPR (EU/UK visitors)
Where GDPR applies, you may also have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with your local supervisory authority.
To exercise any rights, contact us using the details in Section 1.
9. Data Security and Notifiable Data Breaches
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers.
- Access controls limiting data access to authorised personnel only.
- Regular security assessments of our infrastructure and processes.
- Staff training on data protection obligations and secure data handling.
Under the Notifiable Data Breaches (NDB) scheme, if we experience an eligible data breach that is likely to result in serious harm, we will notify affected individuals and the OAIC as soon as practicable. Where GDPR applies, we will also notify relevant supervisory authorities within 72 hours where required.
10. Children's Privacy
Our platform is intended for users aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or other factors. The "Last Updated" date at the top of this document will be revised accordingly. We encourage you to review this policy periodically. Continued use of our platform following any update constitutes acceptance of the revised policy.
12. Contact Us and Privacy Complaints
If you have a privacy concern or complaint, please contact us first. We will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, Australian residents may contact the OAIC (see Section 8.1).
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Post: 5 Koala Pl, One Mile NSW 2316, Australia
- Phone: +61 2 4982 2801
- Email: mailuse@regenvita.world