Privacy Policy

Applies to: GetTested-operated websites and domains, including gettested.au, and related services such as our account area/portal (the “Portal”).

This Privacy Policy explains how we collect, use, disclose, and protect personal information-including health-related information-when you access or use our websites, the Portal, and when you purchase Products (including rapid tests and collection materials) or Laboratory Services (as defined in our Terms & Conditions).

Important: Independent laboratories and clinicians may have their own privacy practices and notices that apply to their services and records. Where applicable, you may receive or be directed to those notices.

1. Key Concepts and Our Roles

1.1 Our Services and ecosystem

As described in our Terms & Conditions, GetTested provides an online ordering, logistics, and results-delivery platform and may display information relating to your orders and, where applicable, your test-related information in the Portal. We do not provide medical diagnosis or treatment. Independent NATA ISO 15189 (each, a “Laboratory”) perform laboratory testing, and independent licensed clinicians or clinician groups (each, a “Clinician/Provider”) may authorize orders, review results, and/or provide consultation where applicable.

1.2 Our Role and Responsibilities

Depending on the context and data flow, GetTested may act as the business responsible for operating the Site and Portal and processing website, ecommerce, account, customer support, and order-related information. Where applicable, GetTested may also process information in order to help facilitate Laboratory Services, including kit registration, logistics, communication, and results access through the Portal.

Laboratories are responsible for their own laboratory services, testing processes, records, and privacy practices in accordance with applicable laws and accreditation requirements.

2. What We Collect

We collect information from (A) you, (B) your devices and browser, and (C) our service providers and partners (including Laboratories involved in your requested services). We collect the categories below.

2.1 Identifiers and contact information

Name, email, phone number, shipping/billing address, date of birth (where needed for identification purposes), account credentials, and unique kit/test identifiers.

2.2 Commercial and transaction information

Order details (Products/Laboratory Services purchased), purchase history, shipping status, refunds/returns, customer support communications, and service-related messages.

2.3 Health-related information

Information you provide in connection with Laboratory Services (e.g., intake details where applicable), specimen/kit registration data, and test results/reports displayed in the Portal.

2.4 Internet, device, and usage information

IP address, device identifiers, browser type, operating system, log data, pages viewed, and interactions with our Site/Portal.

2.5 Cookies and similar technologies

Cookies, local storage, pixels/tags (as configured), and similar tools used for functionality, analytics, fraud prevention, and security.

2.6 Payment information

Payments are processed by third-party payment processors. We receive limited payment-related information (e.g., authorization result, transaction IDs, and last 4 digits). We do not store full payment card numbers.

2.7 Identity verification, fraud prevention, and eligibility information

Where permitted by law and as described in our Terms, we and our service providers may collect information used to verify identity and reduce fraud (e.g., device risk signals, consistency checks, and limited identity verification outputs).

3. Sources of Information

We collect information from:

• You, including when you create an account, place an order, register a kit, complete intake (if applicable), contact support, or use the Portal.

• Your devices and browser, including via cookies and server logs.

• Laboratories involved in your services, including delivery of results/reports to be displayed in the Portal.

• Service providers, including payment processors, shipping carriers, customer support platforms, fraud/security vendors, identity verification providers, hosting providers, and communications providers (email/SMS).

• Affiliates and corporate entities (if applicable) for internal administration, security, and corporate governance.

• Public or third-party sources (limited), where permitted by law, primarily for fraud prevention and compliance.

4. Purposes

We use information for the following purposes:

4.1 Provide and operate the Site and Portal

Account creation, login, security, kit registration, user preferences, and Portal functionality.

4.2 Fulfill orders, ship Products, and provide customer support

Order processing, fulfillment, shipping, returns/refunds, replacements, and customer support operations.

4.3 Facilitate Laboratory Services and results access

Coordinate logistics, enable specimen registration, facilitate testing and reporting, and display results/reports in the Portal consistent with the service you request.

4.4 Communications

Send service-related updates (order confirmations, shipping, results availability, security notices) via email/SMS if you provide those details or enroll. Marketing messages only where permitted and/or you opt in (see Section 13).

4.5 Quality, safety, auditing, and improvement

Quality assurance, internal auditing, troubleshooting, performance analytics, and service improvement.

4.6 Security, fraud prevention, and compliance

Protect our customers, Site, and Portal; detect and prevent fraud and misuse; comply with legal obligations; enforce our Terms & Conditions; and protect rights and safety.

4.7 De-identified and aggregated information

Where permitted by law, we may create de-identified or aggregated information and use it for analytics, service improvement, and business operations. We do not attempt to re-identify de-identified information except as permitted by law.

Targeted advertising limitation: We do not use test results/reports for targeted advertising, and we do not disclose test results/reports to advertising platforms for cross-context behavioral advertising.

5. How We Disclose Information

We disclose information as follows:

5.1 Laboratories (for Laboratory Services)

We disclose information as needed to provide the services you request, including order processing, specimen processing, testing, reporting, and related customer support and compliance.

5.2 Service providers (processors)

We use vendors to help us operate our business and provide services (e.g., hosting, customer support tools, communications providers, shipping carriers, payment processors, fraud/security vendors, identity verification providers). These providers are contractually restricted to processing information to provide services for us.

5.3 Legal, compliance, and safety

We may disclose information to comply with law, respond to lawful requests, protect rights/safety, prevent fraud, and enforce agreements.

5.4 Corporate transactions

We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate protections.

5.5 At your direction

We may disclose information when you request or authorize it (for example, when you ask us to share information with a third party).

6. Cookies, Analytics, and Tracking Controls

6.1 Essential cookies

We use essential cookies for login, security, and core Site/Portal functionality.

6.2 Analytics and performance

We use analytics to understand Site performance and improve services. Where required by law, we provide choices/consent for non-essential cookies.

6.3 Restrictions on advertising pixels and health-content tracking

We do not permit advertising pixels or trackers designed for targeted advertising on pages where you view test results/reports in the Portal. We also take steps to reduce collection of health-related content on sensitive flows (such as results access and certain kit registration/intake workflows).

6.4 Your choices

You may manage cookie preferences through your browser/device settings. Some features may not work without certain cookies.

7. Health Information and Laboratory Records

Certain Laboratories may maintain laboratory records and personal information in accordance with their own legal, regulatory, and accreditation requirements. In connection with certain Laboratory Services, you may receive or be directed to information regarding a Laboratory's privacy practices and handling of personal information. GetTested does not control the content of any third-party privacy notices and is not responsible for the privacy practices of independent Laboratories.

Where GetTested processes health-related information in connection with Laboratory Services, we apply safeguards appropriate to the sensitivity of that information. Requests relating to laboratory records, test results, or information maintained directly by a Laboratory may need to be directed to the relevant Laboratory that maintains the applicable records.

8. Data Retention

We retain information as long as reasonably necessary to:

• provide services and maintain your account,

• comply with legal, tax, regulatory, and contractual requirements,

• maintain security, prevent fraud, and resolve disputes.

• Laboratories may retain records under their own legal, regulatory, accreditation, and professional obligations. Deletion requests may be limited where retention is required by law or necessary for security/fraud prevention, dispute resolution, or compliance.

9. Your Privacy Rights

Subject to applicable law, you may have the right to:

• access personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request deletion of personal information where appropriate; and
• withdraw consent where processing is based on your consent.

To exercise any of these rights, please contact us as described in Section 19 (Contact Us).

9.1 Verification

To protect your information, we may take reasonable steps to verify your identity before fulfilling a request. Verification may require you to log in to your account or provide additional information. If we cannot verify your identity, we may be unable to fulfil your request.

9.2 Limitations

Your rights are subject to certain exceptions. For example, we may retain or use information where required or permitted by law, including for security, fraud prevention, compliance, dispute resolution, and the fulfilment of legal or regulatory obligations.

10. Data Security and Security Incidents

10.1 Data security safeguards

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information. These measures may include, for example, access controls, authentication, encryption in transit where appropriate, logging and monitoring, and security training and policies. No system is perfectly secure.

10.2 Vendor and supply-chain security

We require service providers that process information on our behalf to maintain appropriate safeguards and to process information only as permitted under our agreements.

10.3 Security incidents and breach notifications

We maintain a security incident response process. If we become aware of a security incident involving personal information, we will evaluate notification obligations under applicable laws and contractual requirements. Depending on applicable law, a reportable incident may include unauthorized access to, acquisition of, or disclosure of certain information.

11. Marketing Choices

You can opt out of marketing emails via the unsubscribe link or by contacting us. Service and security messages may still be sent.

12. International Transfers

Your information may be processed in Australia and other countries where we, our Laboratories, or our service providers operate. We use contractual, organizational, and technical measures designed to protect personal information during processing and transfer.

13. Third-Party Links

We are not responsible for the privacy practices of third-party sites linked from our Site.

14. Children’s Privacy

The Site and services are not intended for individuals under 18. We do not knowingly collect personal information from children under 13.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last Updated” date. Material changes may be communicated via the Site/Portal or email.

26. Contact Us

Email: hello@gettested.au

Company: Get Tested International AB.