Privacy Policy

Last updated: 22 October 2026

1. Who we are and what this policy covers

This policy is issued by PathLab Assist Technologies Pty Ltd (ABN 44 692 745 654), trading as PathLab Assist Health (“we”, “us”, “our”). We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy covers personal information collected through this website, pathlabassist.com. This website does not collect health information.

It does not cover information handled in the PathLab Assist platform or in the nadi app. In the platform, we handle patient information on behalf of the laboratory that uses it. A privacy policy for the platform and for nadi is being prepared and will be linked here once published. Until then, nadi shows a collection notice wherever it asks for your information, and you can ask us about either through our contact form.

2. Personal information we collect

Enquiry form. When you submit a discovery-call or waitlist enquiry we collect your name, work email address, organisation name, role, the number of collection centres in your network, and any description you choose to give of your operational challenges.

Correspondence. If you contact us, we keep a record of that correspondence.

Technical data. Our hosting infrastructure keeps standard server logs (such as IP address, browser type and pages requested) for security and operational purposes.

Analytics. We use PostHog, a product analytics service, to understand how visitors use this website: pages viewed, interactions with page elements, approximate location derived from IP address, and device and browser information. Analytics identifiers are pseudonymous; we do not use the enquiry form’s contents (your name, email or organisation) in analytics, and we do not use advertising cookies or sell analytics data. You can browse this website without identifying yourself; personal information is only collected if you choose to submit the enquiry form or contact us.

3. Why we collect it

We collect, hold and use personal information to:

4. How we hold and secure it

Enquiry submissions are transmitted over an encrypted connection (HTTPS) and stored in Google Workspace services under access controls limited to the company’s founders. We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. We are subject to the Notifiable Data Breaches scheme under the Privacy Act.

5. Overseas disclosure

Because enquiry submissions are stored in Google Workspace, that information may be transferred to and stored on Google infrastructure located outside Australia, including in the United States. Website analytics data described in section 2 is processed by PostHog, Inc. on infrastructure located in the United States. By using this website or submitting the enquiry form you consent to these transfers for the purposes described in this policy (APP 8, cross-border disclosure).

Separately, the PathLab Assist platform’s databases and file storage are hosted in Australia (AWS Sydney region, ap-southeast-2). Some platform and nadi processing uses service providers outside Australia, including AI reading of referral images (United States) and nadi sign-in and address search (Google). The platform and nadi privacy policy will list each provider and country.

6. Disclosure to third parties

We do not sell, rent, or trade personal information. We disclose it only to the service providers described above for the purposes described in this policy, or where required or authorised by law.

7. Direct marketing

We will only send you marketing communications where you have consented (for example, by ticking the consent box on the enquiry form). Every such email includes an unsubscribe mechanism, and you may opt out at any time by using it or by contacting us.

8. Access and correction

You may request access to, or correction of, the personal information we hold about you at any time via our contact form. We will respond within 30 days. There is no charge for making a request.

9. Complaints

If you believe we have breached the Australian Privacy Principles, please lodge a complaint via our contact form describing the issue. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

10. Retention

We keep enquiry information for as long as it remains relevant to our launch and pilot conversations, after which it is deleted. You may ask us to delete your information earlier at any time via the contact form, and we will do so unless we are required by law to retain it.

11. Changes to this policy

We may update this policy from time to time. The current version, with its last-updated date, will always be published on this page.

12. Contact

Privacy enquiries and requests should be made via our contact form. A dedicated privacy contact email address will be published on this page at platform launch.