Legal

Privacy Policy

Effective 9 July 2026

This policy explains how we handle your personal information under the Privacy Act and the Australian Privacy Principles. Read it with our Terms of Service, Refund Policy and Cancellation Policy.

01Introduction

Upwell Health Collective Pty Ltd (ABN 27 614 582 991), trading as Upwell.Digital (“we”, “us”, “our”), respects your privacy. This policy explains how we collect, use, disclose and protect your personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

It applies to this website and to our dealings with you.

02What we collect

We may collect:

  • Contact and business details — your name, email, phone, clinic or business name, and role;
  • Enquiry information — what you tell us in forms, the “Start Here” quiz, calls and emails;
  • Payment information — billing details and payment records (card payments are processed by Stripe — see below);
  • Client project information — if we build for you, the files you upload, the messages you send us, and your project and payment status in your client portal; and
  • Usage information — which pages of this site are visited, collected through our own privacy-friendly analytics (see below).

We don’t seek sensitive information (such as health information) about you through this website. Please don’t send it to us unless we ask.

03How we collect it

We collect information directly from you when you contact us, complete a form or the quiz, book a call, buy a service, or use your client portal — and automatically through our own analytics when you browse the site. Where practical, you can deal with us anonymously or using a pseudonym, though we may not be able to provide some services without your details.

04Why we use it

We use personal information to:

  • respond to enquiries and provide quotes;
  • deliver, manage and support our services;
  • process payments and issue invoices;
  • improve our website and services; and
  • send you updates or marketing where you’ve agreed, or where the law allows — you can opt out at any time.

05Payments

Card payments are processed by Stripe. We don’t collect or store your full card number. Stripe handles your card data under its own privacy policy and security standards. We receive limited information such as a payment reference and the outcome of the payment.

06Analytics, cookies and browser storage

We use our own first-party analytics to count page visits and see which pages are useful. It records the page viewed and, on your first page only, the site that referred you. It does not use advertising or cross-site tracking cookies, and we don’t share it with ad networks.

The site uses your browser’s local storage for convenience — for example, to keep your place in the “Start Here” quiz if you refresh the page. Third parties we rely on (such as Stripe at checkout) may set their own cookies under their own policies.

07Who we share it with

We don’t sell your personal information. We share it only as needed with:

  • service providers who help us operate — for example payment processing (Stripe), email delivery, hosting, analytics, and AI tools used to run our services;
  • professional advisers, where reasonably required; and
  • others where you’ve consented, or where we’re required or permitted by law.

08Overseas disclosure

Some of our service providers store or process data outside Australia (for example, in the United States or the European Union). Where we disclose information overseas, we take reasonable steps to ensure it’s handled consistently with the Australian Privacy Principles.

09Marketing and your choices

If we send you marketing, you can opt out at any time using the unsubscribe link or by emailing us. We comply with the Spam Act 2003 (Cth).

10How we protect it

We take reasonable steps to protect personal information from misuse, loss and unauthorised access — including access controls, encryption in transit, and trusted providers such as Stripe for payments. No system is perfectly secure, but we work to keep your information safe and to respond promptly to any incident.

11How long we keep it

We keep personal information only as long as we need it for the purposes above or to meet our legal and tax obligations, after which we securely delete or de-identify it.

12Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it’s wrong. Email hello@upwell.website and we’ll respond within a reasonable time. There’s normally no charge to make a request.

13Our clients’ customer and patient data

When we build or maintain a website for a business client, that client is responsible for the personal information of their own customers or patients. Where we handle any such information as part of our services, we do so on the client’s behalf and on their instructions, and the client remains responsible for its own privacy obligations.

14Complaints

If you think we’ve mishandled your personal information, contact us at hello@upwell.website and we’ll investigate and respond. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

15Changes to this policy

We may update this policy from time to time. The current version is always the one published here, with its effective date shown above.

16Contact us

Upwell Health Collective Pty Ltd (ABN 27 614 582 991), trading as Upwell.Digital. For any privacy question or request, email hello@upwell.website.