Privacy Collection Statement

The terms 'we,' 'us,' or 'our' as used in this consent refer to DR LILY VU PTY LTD (ABN 76 674 940 740) trading as EUCA MD.

Introduction

This document sets out how EUCA MD (we/us) manages your personal information.

Compliance

We comply with the Privacy Act 1988 (Cth) and the Health Records and Information Privacy Act 2002 (NSW).

Personal Information Collection

When you become a patient of EUCA MD, we collect personal information such as your contact details and health information. This information may be collected directly from you or from others involved in your care, including health care practitioners, private health insurers, relatives, next-of-kin, or carers. We may also collect information from operators of third-party mobile applications when you expressly provide consent.

Use of Personal Information

We collect and use personal information to provide health care services. Your information may be shared with:

• Other health care practitioners and service providers
• Insurers and Medicare
• Staff undergoing training
• Any person or entity required by law

We may also provide general information about your condition to your family and carers, unless you request otherwise. We use your information for the administration and operation of EUCA MD, and to contact you for feedback.

EUCA Women Platform

EUCA Women is an online health dashboard operated by EUCA MD. If you create or use an EUCA Women account, we collect and use information needed to provide the platform, keep your account secure, support your care, and operate EUCA MD services.

Information We Collect In EUCA Women

The information we may collect and store includes:

• Account details such as your name, email address, date of birth, gender, country, account status, and account timestamps.
• Technical and security information such as IP address, approximate country, browser or device information, login timestamps, remember-device settings, and audit records.
• Dashboard information you enter or save, including life stage, reminders, cycle information, symptoms, sleep, mood, skin and hair entries, pain logs, pregnancy or postpartum tracking information, preferences, notes, and similar health dashboard state.
• Health reports and files you upload, including blood test uploads, pathology or imaging files, photos, file names, report dates, collection dates, lab names, patient details detected in a report, and preview links generated for your account.
• Information extracted from uploaded reports, including marker names, values, units, reference ranges, status labels, notes, extracted source text snippets, OCR status, extraction method, and extraction confidence.
• Support, account administration, deletion, restoration, and safety audit records.

Consent For Health Information

Health information is sensitive information. By creating an EUCA Women account, entering health information, saving dashboard state, or uploading a health report, you consent to EUCA MD collecting, storing, using, and disclosing that information as described in this Privacy Collection Statement and as reasonably necessary to provide and operate EUCA Women and EUCA MD services.

Uploads, OCR And AI-Assisted Extraction

Uploaded reports may be processed with OCR and AI-assisted tools to extract values for your review. Extracted values may be incomplete or incorrect. Original reports remain the source of truth. EUCA Women does not replace review by a doctor or other qualified health professional.

How EUCA Women Uses Information

We use EUCA Women information to create and secure your account, keep you signed in, display your dashboard, save your reminders and health state, process uploads, show extracted values, support account and clinical operations, investigate errors or misuse, maintain audit logs, improve safety and reliability, and communicate with you about your account or EUCA MD services.

Disclosure And Service Providers

We may disclose or process information with service providers that help operate EUCA MD and EUCA Women, including cloud hosting, storage, database, email delivery, security verification, IP geolocation, OCR, AI-assisted extraction, logging, monitoring, support, and analytics services. Some providers or their infrastructure may be located outside Australia. Where we use service providers, we take reasonable steps to require appropriate confidentiality, security, and privacy protections.

Staff And Admin Access

EUCA MD staff or authorised administrators may access account, dashboard, upload, extracted-result, audit, and support information where needed for account administration, technical support, safety, clinical operations, legal obligations, security, deletion or restoration requests, or service operation. Admin actions may be logged.

Cookies And Browser Storage

EUCA Women uses essential cookies and browser storage to keep you signed in, remember your email or preferences, route you back to the dashboard, and sync dashboard state. You should sign out and avoid using “keep me signed in” on shared devices.

Security, Retention And Deletion

We use administrative, technical, and organisational safeguards to protect personal and health information. No online service can guarantee absolute security. We retain information for as long as needed for EUCA MD services, account operation, legal and professional obligations, audit, security, backup, and dispute resolution. Account deletion may first disable access while retained records, uploads, logs, backups, or audit records are handled according to legal, operational, and clinical requirements. You may request access, correction, deletion, or further information using the contact details below.

Access, Correction And Complaints

You may contact EUCA MD to request access to, or correction of, personal or health information we hold about you, or to make a privacy complaint. We will respond in accordance with applicable privacy and health-records laws.