Access, correct, export or delete your information.
This page describes the intended request process. Identity verification, response periods and legal exceptions must be finalised before launch.
Available requests
- Access personal and health information held about you.
- Correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.
- Receive a user-readable export of assessment and tracker records when the export feature is available.
- Withdraw optional sharing permissions and revoke partner connections through the portal.
- Request deletion of the account and information that is not required to be retained.
- Ask questions or make a privacy complaint.
How to submit a request
Send the request from the account email address to [PRIVACY EMAIL]. Include the type of request and enough detail to locate the relevant information. Do not email detailed health records or identity documents unless specifically requested through a secure method.
Identity verification
We may ask the requester to sign in again, confirm control of the registered email address or complete another proportionate identity check. Verification information will be limited to what is reasonably necessary.
Timing and outcome
We will acknowledge requests and respond within the period required by applicable law. The operational target and escalation process are [RESPONSE PERIOD AND ESCALATION PROCESS]. If a request is refused or limited, we will explain the reason and available complaint options where required.
Deletion limits
Deletion may not immediately remove information from encrypted backups, security logs or records that must be retained by law. Limited audit records may be retained to show that a permission, invitation or security action occurred, but should contain no more personal information than necessary.