Privacy Policy

Auxara is committed to protecting the privacy of every individual whose personal information we handle. We build multi signal patient observation technology for healthcare, and we understand that trust in how information is handled sits at the centre of everything we do.

This Privacy Policy explains how we collect, hold, use, disclose and protect personal information in connection with the Auxara website at auxara.com (the Website) and our broader business dealings. It also explains how you can access and correct the information we hold about you and how you can raise a concern.

We handle personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the thirteen Australian Privacy Principles (APPs) contained in that Act. Although some small businesses are exempt from the Privacy Act, that exemption does not apply to us. As an organisation that holds health information, we are bound by the Privacy Act and the APPs regardless of our annual turnover, and we have chosen to apply these standards across all of our operations.

This Policy applies to personal information we collect through the Website and through our general business activities. This includes enquiries, marketing and events, recruitment, and dealings with our customers, partners, suppliers and service providers.

What this Policy does not cover. This Policy does not govern the clinical patient information processed through the Auxara platform when it is deployed within a hospital or health service environment. That information is handled under separate arrangements with the relevant health service, including data sharing agreements, clinical governance and information security controls, research ethics approvals, and the confidentiality obligations that apply to those settings. Where we act as a contracted service provider to a Queensland Health service, additional obligations may apply to us under the Information Privacy Act 2009 (Qld) and the confidentiality provisions of the Hospital and Health Boards Act 2011 (Qld), and those obligations are governed by the applicable agreement rather than by this Policy. If you are a patient and you have a question about information collected during your care, please contact the health service that is responsible for your treatment.

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether or not it is recorded in a material form.

Sensitive information is a subset of personal information that carries additional protection under the Privacy Act. It includes health information, as well as information about a person's race, ethnicity, political opinions, religious beliefs, sexual orientation, criminal record and biometric information. We only collect sensitive information where you have consented and the information is reasonably necessary for our functions, or where the collection is otherwise permitted or required by law.

The kinds of personal information we collect depend on your relationship with us. In the ordinary course of operating the Website and our business, we may collect the following.

Identity and contact details. Your name, job title, employer or organisation, email address, telephone number and postal address, for example when you complete an enquiry form or subscribe to updates.

Correspondence and enquiry content. The content of messages you send us, including any information you choose to include when you contact us, request a demonstration, or ask a question.

Commercial and professional information. Information about the organisation you represent and your dealings with us, where you are a customer, clinician, partner, investor, supplier or other business contact.

Recruitment information. If you apply for a role with us, your resume, cover letter, employment history, qualifications, references and any other information you provide or that we collect during recruitment.

Technical and usage information. Information collected automatically when you visit the Website, such as your device type, browser, operating system, IP address, the pages you view and the dates and times of your visits. Some of this information is collected through cookies and similar technologies described in section 6.

We do not collect health information or other sensitive information through the Website. If you send us sensitive information voluntarily through an enquiry, we will handle it in accordance with this Policy and the Privacy Act.

Wherever it is reasonable and practicable, we collect personal information directly from you. This happens when you complete a form on the Website, subscribe to our communications, contact us by email or telephone, apply for a role, or meet with us at an event or meeting.

We may also collect personal information from other sources where direct collection is not practicable or where you would reasonably expect it. This includes information collected automatically through the Website, information from your organisation, information from publicly available professional sources such as company websites and professional networking platforms, and information from referees and recruitment providers during a recruitment process.

If we receive personal information about you that we did not ask for and that we are not permitted to keep, we will destroy or de identify it as soon as it is lawful and reasonable to do so.

The Website uses cookies and similar technologies. A cookie is a small text file placed on your device that helps a website function and helps us understand how the Website is used.

We use strictly necessary cookies that are essential for the Website to operate, and we may use analytics and performance cookies that help us measure how visitors interact with the Website so that we can improve it. Where analytics tools are used, they may be operated by third party providers who process information on our behalf.

You can control and delete cookies through your browser settings. Blocking some cookies may affect how the Website functions. Where required, we will seek your consent before setting non essential cookies.

We collect, hold, use and disclose personal information for purposes connected with our business, including the following.

Responding to you. To answer your enquiries, provide information you request, arrange demonstrations and manage our communications with you.

Providing and improving our services. To deliver our products and services, manage our relationships with customers and partners, and understand and improve the Website and our offerings.

Marketing and events. To send you updates, newsletters and information about our work, and to organise and manage events, subject to section 8.

Recruitment. To assess and manage job applications and our recruitment processes.

Business operations and compliance. To operate, administer and protect our business, maintain security, keep records, and meet our legal, regulatory, insurance and governance obligations.

We will only use or disclose your personal information for the purpose for which it was collected, for a directly related secondary purpose that you would reasonably expect, where you have consented, or where the use or disclosure is otherwise permitted or required by law.

We may use your personal information to send you marketing communications about Auxara where you would reasonably expect us to do so or where you have consented. Every marketing communication we send will include a simple way to opt out. You can also ask us to stop sending you marketing at any time by contacting us using the details in section 17. We will action your request promptly. We do not sell personal information, and we do not disclose personal information to third parties for their own direct marketing.

We may disclose personal information to the following recipients, always in a manner consistent with this Policy and the Privacy Act.

Service providers. Third parties who provide services to us, such as information technology, hosting, cloud infrastructure, analytics, communications, professional advisory, insurance and recruitment services. These providers are only permitted to use personal information for the purpose of providing their services to us.

Professional advisers and insurers. Our legal, financial, accounting and insurance advisers where reasonably required.

In connection with transactions. Prospective purchasers, investors or their advisers in connection with a corporate transaction, financing or due diligence, subject to appropriate confidentiality protections.

Where required or authorised by law. Courts, tribunals, regulators and government agencies where we are required or authorised to disclose information, including the Office of the Australian Information Commissioner.

We use reputable cloud and technology providers to store and process information, and we prioritise data hosting within Australia. Our primary clinical and production infrastructure is located in Australia.

Some of our service providers, or their sub processors, may store or process personal information outside Australia. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles that information consistently with the APPs, including through contractual protections. If you would like to know more about where your information may be handled, please contact us using the details in section 17.

Auxara develops artificial intelligence and automated technologies for healthcare. In connection with the Website and our general business, we do not make decisions about you that have a legal or similarly significant effect on you using solely automated means.

Any clinical decision support or automated analysis performed by the Auxara platform occurs within a hospital or health service environment, under clinical oversight, and is governed by the separate arrangements described in section 2 rather than by this Policy. Our platform is designed to support and augment clinical observation and decision making by qualified staff, not to replace clinical judgement.

We keep our practices under review so that they remain aligned with the transparency requirements for automated decision making under the Privacy Act, which take effect on 10 December 2026. If our use of automated decision making on the Website or in our general business changes in a way that engages those requirements, we will update this Policy accordingly.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification and disclosure. These steps include technical controls such as access restrictions, encryption in transit and at rest where appropriate, network and system security, and monitoring, together with organisational controls such as staff training, confidentiality obligations, and policies governing how information is handled.

No method of transmission over the internet and no method of electronic storage is completely secure. While we work hard to protect your personal information, we cannot guarantee absolute security, and any transmission of information to us is at your own risk.

We maintain a data breach response plan. Where we experience an eligible data breach that is likely to result in serious harm to affected individuals, we will notify those individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.

We keep personal information only for as long as it is needed for the purposes described in this Policy, or for as long as we are required to keep it under law. When personal information is no longer needed and we are not required to retain it, we take reasonable steps to destroy it or de identify it.

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, please contact us using the details in section 17. We will respond within a reasonable period. We may need to verify your identity before we act on your request. Access is usually provided free of charge, although in some cases a reasonable cost may apply. If we decline a request for access or correction, we will tell you why in writing and explain how you can complain.

Where it is lawful and practicable, you have the option of dealing with us anonymously or by using a pseudonym. In many cases, however, we will not be able to respond to an enquiry or provide a service if we do not have enough information to identify you or to assist you.

If you have a question about this Policy, a request to access or correct your information, or a concern about how we have handled your personal information, please contact us.

If you make a complaint, we will acknowledge it, investigate it and respond to you within a reasonable period. If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC).

You may also have a right to seek remedies through other avenues, including under the statutory tort for serious invasions of privacy.

The Website may contain links to third party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any website you visit through a link on the Website.

The Website is intended for a professional and business audience and is not directed at children. We do not knowingly collect personal information from children through the Website. If you believe we have collected information from a child, please contact us so that we can address it.

We may update this Policy from time to time to reflect changes in our practices, our services or the law. The current version will always be available on the Website, and the effective date at the top of this Policy shows when it was last updated. We encourage you to review this Policy periodically. Significant changes will be notified through the Website or by other appropriate means.

This Policy is governed by the laws of the State of Queensland and the Commonwealth of Australia. Any dispute arising in connection with this Policy is subject to the non exclusive jurisdiction of the courts of Queensland and the courts competent to hear appeals from them.