Privacy Policy
We value our website users' privacy and aim to provide an open and transparent privacy policy.
This Privacy Policy applies to CardiAction, owned by 3P Healthcare
Pty Ltd (ABN 41 619 022 141).
We respect your privacy and are committed to complying with
Australian privacy laws, the General Data Protection Regulation
(GDPR) (where applicable), and other relevant laws.
By using our Website, you acknowledge and agree to the terms outlined
in this Privacy Policy.
If you are located in the EU or EEA, we process your personal data
based on one of the following legal bases under Article 6 of the GDPR:
Consent: When you explicitly consent to providing data (e.g.,
opting in for updates).Contractual Necessity: When processing is necessary for
providing our services.Legitimate Interests: When processing is required for business
operations, provided it does not override your rights.Legal Obligation: When we must process data for legal
compliance.
If you are an EU/EEA user, you have the following rights under GDPR:
Right to Access – Request a copy of your personal data.
Contractual Necessity: When processing is necessary for
providing our services.Right to Rectification – Correct inaccurate or incomplete data.
Right to Erasure (“Right to Be Forgotten”) – Request deletion
of your data.Right to Restriction of Processing – Restrict how we process
your data.Right to Object – Object to processing based on legitimate
interests.Right to Withdraw Consent – Withdraw consent at any time
(without affecting prior processing).Right to Lodge a Complaint – File a complaint with a data
protection authority in your country
To exercise these rights, please contact email
As CardiAction is based in Australia, your personal data may be stored
or processed outside the EU/EEA. If we transfer your data
internationally, we implement appropriate safeguards such as:
Standard Contractual Clauses (SCCs) approved by the
European Commission.Data processing agreements (DPAs) with third-party service
providers.
We retain personal data only as long as necessary for the purposes
outlined in this Privacy Policy or as required by law.
If a data breach occurs that may affect personal data of EU/EEA users,
we will notify the relevant Data Protection Authority (DPA) and
affected individuals within 72 hours, as required under GDPR.
We use cookies and analytics tools to improve user experience. Under
GDPR, users from the EU/EEA must provide explicit consent
before cookies are stored on their device. You can manage cookie
settings through our settings.
For GDPR-related inquiries or to exercise your data protection rights,
please contact:
Data Protection Officer (DPO): Privacy Officer
Email: privacy@cardiaction.com
This Privacy Policy was last updated on Feb. 14, 2025.
