Privacy Policy

Health Hertz is an Australian business that sells frequency therapy devices and a digital guide via the website healthhertz.com. References to "we", "us", or "our" in this policy refer to Health Hertz and its operator.

We are committed to handling your personal information responsibly and in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Although our current annual turnover is below the AUD $3 million threshold that triggers mandatory Privacy Act compliance, we voluntarily adopt these standards as a matter of good practice and customer trust.

We collect personal information that is reasonably necessary to process your orders, deliver products, provide customer support, and improve our website.

We use your personal information only for the purposes for which it was collected:

• Order fulfilment: Processing payments, arranging dispatch, providing tracking numbers, and handling returns or warranty claims.
• Customer communications: Sending order confirmations, shipping updates, and responding to enquiries. We do not send unsolicited marketing emails.
• Logistics coordination: Sharing your name, address, and phone number with our fulfilment partner and logistics carrier to arrange international delivery (see Section 5).
• Legal and regulatory compliance: Maintaining transaction records as required by Australian tax law (GST records, ABN obligations).
• Website improvement: Analysing aggregated, anonymised traffic data via Google Analytics to understand visitor behaviour and improve our content.

We will not use your personal information for any purpose that is incompatible with the reason it was collected, unless we have your consent or are required to do so by law.

Our website uses cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

Most web browsers allow you to control cookies through your browser settings. Disabling cookies may affect the functionality of our checkout process.

We only share your personal information with third parties where necessary to fulfil your order or comply with legal obligations. We do not sell, rent, or trade your personal information.

As an Australian business with suppliers and service providers overseas, your personal information may be transferred to and processed in countries outside Australia, including China (fulfilment and logistics), the United States (Stripe, PayPal, Google), and potentially other countries depending on your delivery destination.

These countries may not have privacy laws equivalent to Australia's Privacy Act 1988. By placing an order with us, you consent to this transfer. We take reasonable steps to ensure that overseas recipients handle your information in a manner consistent with the Australian Privacy Principles.

Under APP 8.1, before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the APPs in relation to that information.

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:

• Order records: Retained for a minimum of 7 years to comply with Australian taxation law (ATO record-keeping requirements for GST and income tax).
• Customer communications: Retained for up to 3 years after the last interaction, or as required to resolve any disputes.
• Analytics data: Google Analytics data is retained for 14 months (GA4 default) before automatic deletion.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it securely.

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• HTTPS encryption for all website traffic
• Payment processing handled entirely by PCI-DSS compliant providers (Stripe, PayPal) — we never handle raw card data
• Access to order data restricted to authorised personnel only
• Regular review of third-party service providers' security practices

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

You have the right to:

• Access the personal information we hold about you, subject to certain exceptions under the Privacy Act.
• Correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Request deletion of your personal information, subject to our legal obligations to retain certain records.
• Complain about how we have handled your personal information.

To exercise any of these rights, please contact us using the details in Section 11. We will respond to access and correction requests within 30 days.

If you believe we have breached your privacy rights, please contact us first (see Section 11) so we can attempt to resolve your concern. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• GPO Box 5218, Sydney NSW 2001

For any privacy enquiries, access requests, or complaints, please contact us via our contact form or email us at [email protected].

We will endeavour to respond to all privacy enquiries within 5 business days.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.