Privacy Policy

1. Who we are

Hemexa Pty Ltd (“Hemexa”, “we”, “our”, “us”) operates the Hemexa health intelligence platform at hemexa.health and app.hemexa.health. We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

We collect the following types of information:

• Account information: name, email address, date of birth, biological sex, and contact details.
• Health information: blood test results, lifestyle data (exercise, diet, sleep, alcohol), body metrics (height, weight, waist circumference), supplement intake, and any historical results you upload.
• Usage data: how you interact with the platform, device information, and access logs.
• Payment information: processed securely by our payment provider. We do not store card details.

3. How we use your information

We use your information to:

• Deliver your membership, including coordinating lab tests with Laverty Pathology.
• Generate your health intelligence dashboard, health plan, and supplement insights.
• Communicate with you about your membership, results, and service updates.
• Improve the platform and develop new features (using aggregated, de-identified data).
• Meet our legal obligations, including responding to critical result escalation requirements.

4. Sharing your information

We do not sell your personal or health information. We share it only where necessary:

• Laverty Pathology: to coordinate and process your blood panel.
• GP reviewers: registered Australian GPs who review your test requests and results.
• Technology providers: cloud infrastructure and software vendors who process data on our behalf under strict confidentiality agreements.
• Legal requirements: if required by law or to protect safety.

5. Data security

Your data is encrypted in transit (TLS) and at rest. Lab results are verified with tamper-evident hashing. We implement access controls, audit logging, and regular security reviews.

6. Data retention

We retain your health data for the duration of your membership and for a period afterward as required by applicable law. You may request deletion of your account and data at any time by contacting us.

7. Your rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Make a complaint if you believe we have breached the APPs.

To exercise these rights, contact us at hello@hemexa.health.

8. Cookies

We use essential cookies to operate the platform and analytics cookies to understand usage. You can disable non-essential cookies in your browser settings.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email or in-app notice.

10. Contact

Privacy inquiries: hello@hemexa.health