Consent Statement

CardiAction ProScreen Screening Providers ("Screening Provider"), Platform Provider: CardiAction Pty Ltd (ACN 619 022 141) ("CardiAction").

1. Introduction

This screening is delivered to you by the Screening Provider using the CardiAction ProScreen platform. ProScreen uses the Uscom BP+ device (TGA ARTG ID 227735, FDA 510(k) K121266) to measure heart and artery health, including central blood pressure and arterial stiffness.

This is a screening service. It is not a medical consultation, diagnosis, or treatment. If you have concerns about your health, please consult your GP or another health professional.

2. The Information We Collect

To deliver your screening, we collect:

• Your contact details and basic demographic information
• The biometric and lifestyle information you provide before screening
• The measurements taken from the BP+ device during your screening
• Notes from the screener and any clinical reviewer

This information is health information and is treated with the higher protections that apply to it.

3. How Your Information Is Used and Shared

The Screening Provider is responsible for your personal and health information. CardiAction operates the ProScreen platform on the Screening Provider's behalf and stores your information in secure systems with access controls aligned to HIPAA-equivalent standards.

By proceeding, I confirm that I consent to:

• The Screening Provider collecting, storing, and using my information to deliver and follow up on this screening
• CardiAction processing and storing my information as the platform provider, on the Screening Provider's instructions
• The Screening Provider sharing my screening results with me, and with my nominated GP or health professional if I request it
• The use of my de-identified data (information that cannot reasonably identify me) by the Screening Provider and CardiAction for service quality improvement, health trend analysis, and research conducted in line with relevant ethical guidelines such as the NHMRC National Statement on Ethical Conduct in Human Research

4. AI-Assisted Content

Parts of the ProScreen platform use artificial intelligence to help generate explanations and clinical summaries. Only de-identified information is ever sent to AI systems. Your name, contact details, and any other identifying information are never sent to AI models. AI-generated content does not replace the judgement of a qualified health professional.

5. Data Location and Cross-Border Transfer

ProScreen data is stored on secure cloud infrastructure that may be located in Australia or other jurisdictions with equivalent privacy protections. If you are screened in New Zealand, your information may be transferred to and stored in Australia. Both countries have substantially similar privacy frameworks (the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020, with the Health Information Privacy Code 2020 in NZ).

6. Withdrawal of Consent

I understand I can withdraw my consent at any time by contacting the Screening Provider. From the time my consent is withdrawn:

• No further personal or identifiable data will be collected or used by the Screening Provider or CardiAction
• Existing de-identified data may continue to be used for research, service evaluation, and quality improvement purposes consistent with relevant ethical and legal standards
• This de-identified data cannot be linked back to me, and it will not be possible to identify me from its use

7. Access, Correction, and Complaints

You have the right to access and correct the personal information we hold about you. To do so, or to make a complaint about how your information has been handled, please contact the Screening Provider in the first instance. If you are not satisfied with the response:

• In Australia, you may contact the Office of the Australian Information Commissioner (oaic.gov.au)
• In New Zealand, you may contact the Office of the Privacy Commissioner (privacy.org.nz)

8. Medical Ethics and Participant Wellbeing

This screening service operates in alignment with Australian and New Zealand ethical guidelines for non-diagnostic wellness and health screening services. Where the screening identifies elevated heart and artery health indicators, you will be encouraged to seek further advice from a health professional. All staff are trained to ensure respect, dignity, and confidentiality.

This screening may be delivered at pharmacy, clinic, or corporate partner host locations. Personal and health information is managed by the Screening Provider through the ProScreen platform. Host locations do not access or manage your information.

9. Confirmation

I confirm that I have read and understood the above and freely consent to participate in this heart and artery health screening service, delivered by the Screening Provider using the CardiAction ProScreen platform.