4.1 The primary principle is that we will not use the Personal Information that Users provide us with for purposes other than those for which it was collected, unless we have the relevant User’s permission. The purpose of collection is determined by the circumstances in which the Personal Information was collected and/or submitted.
4.2 We will retain Users’ Personal Information for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.
4.3 Users’ Personal Information is used to enable us to operate our business. This may include:
(a) the provision of goods and services between us and Users;
(b) verifying a User’s identity;
(c) communicating with Users about:
i their relationship with us;
ii our goods and services;
iii marketing and promotions; and
iv competitions, surveys and questionnaires;
(d) investigating any complaints about or made by Users, or if we have reason to suspect that a User is in breach of any of our terms and conditions or that a User is otherwise engaged in any unlawful activity; and/or
(e) as required or permitted by any law (including the Privacy Act).
4.4 It is necessary, and by using the Services, Users consent, for us to disclose their Personal Information to third parties in a manner compliant with the National Privacy Principles in the course of our business, which includes:
(a) disclosure of Personal Information to other Users;
(b) disclosure of the health information provided by a User to other Users who possess the appropriate permissions; and
(c) investigations into User conduct insofar as it relates to the relationship we have with a User, or a possible contravention of any relevant laws or regulations.
4.5 There are some circumstances in which we must disclose Users’ Personal Information that Users should be aware of:
(a) as part of a sale (or proposed sale) of all or part of our business;
(b) where we reasonably believe that Users may be engaged in fraudulent, deceptive or unlawful activity that a governmental authority should be made aware of; and
(c) as required or permitted by any law (including the Privacy Act).
4.6 We will not sell the Personal Information of Users to unrelated third parties under any circumstances.