Platinum Health Supply — International Privacy Policy
This policy explains how Platinum Health Supply collects, uses, discloses and protects your personal information. Sections 1 to 11 apply to everyone. Because privacy law differs by country, your country also has its own section below, which adds or adjusts specific requirements that apply to you. If you are unsure which section applies, use the country selector on our Website, or the list below:
1. Application
1.1 This policy applies when you purchase anything ("Items") from Platinum Health Supply, including via our website (the "Website"), a telephone order, a purchase order form or an email order, and to any of your dealings with us, whether via the Website or another medium.
1.2 This policy operates alongside our General Terms and Conditions, available on our Website.
1.3 References to "us", "we" or "our" mean Platinum Closing Pty Ltd ACN 640 026 115, trading as Platinum Health Supply Group, and references to "you" mean you.
1.4 This policy does not apply to how we handle personal information about our employees.
2. The personal information we collect
2.1 We may collect the following personal information:
- your name;
- contact details, including postal and email address and telephone number;
- order and payment history relevant to your purchases from us; and
- other personal information relevant to us providing our products and services to you.
2.2 Where you provide us with information about your health or a medical condition, for example when asking us to help you choose a product, this is treated as sensitive personal information under the law of most countries we serve, and often requires your separate consent before we collect it. Your country's section below explains what applies to you.
2.3 Our outsourced service providers, including payment processors and platform providers such as Stripe, PayPal and Shopify, collect some of the above information directly, along with payment card data. We do not collect or store payment card data ourselves. Please refer to each provider's own privacy policy for how they handle this information.
3. How we use your personal information
3.1 We collect and use your personal information to:
- fulfil your order and provide customer support;
- communicate with you about your order and, where you have agreed to receive them, our products and promotions;
- process payment and prevent fraud;
- comply with our legal obligations; and
- improve our services, including through customer and market research and analytics.
3.2 We will not use your personal information for a purpose materially different from the ones set out above without your consent, unless the law of your country permits us to do so.
4. Who we share your personal information with
4.1 We may disclose your personal information to:
- outsourced service providers, including payment processors and platform providers;
- our related bodies corporate;
- our professional advisors, including legal and accounting advisors; and
- government or regulatory authorities, where required or authorised by law.
4.2 We take reasonable steps to ensure any third party we share your personal information with protects it to a standard consistent with this policy and applicable law.
5. Cross-border transfer of your personal information
5.1 We are based in Australia, and your personal information will generally be transferred to, and processed in, Australia in order for us to provide our products and services to you.
5.2 The specific safeguards, consents and mechanisms that apply to this transfer depend on the law of your country. Your country's section below sets these out.
6. Data security and retention
6.1 We take reasonable technical and organisational measures to protect the personal information we hold from unauthorised access, use, disclosure, alteration, loss or damage.
6.2 We do not retain personal information for longer than necessary for the purpose for which it was collected, unless a longer period is required by law.
7. Data breach notification
7.1 If we become aware of a data breach affecting your personal information, we will take appropriate steps to address it and, where required, notify you and the relevant regulator. The specific triggers and timeframes for notification vary by country and are set out in your country's section below.
8. Your rights
8.1 Depending on the law of your country, you may have rights to access, correct, delete or port the personal information we hold about you, and to withdraw any consent you have given us. Your country's section below sets out the specific rights that apply to you and how to exercise them.
8.2 To make a request under this section, please contact us at customercare@phsgroup.com.au.
9. Contact us
If you have any queries about this policy, or how we manage your personal information, please contact us at customercare@phsgroup.com.au.
10. Changes to this policy
We may change this policy from time to time. The current version will always be available on our Website.
11. Country-specific sections
The sections below apply in addition to sections 1 to 10, based on where you are located. Where a country-specific section conflicts with the general sections above, the country-specific section applies.
Singapore
If you are located in Singapore, we handle your personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA"), administered by the Personal Data Protection Commission ("PDPC").
We collect, use or disclose your personal data only where you have given consent, or where the PDPA permits us to do so without consent. You may withdraw consent at any time by contacting us at customercare@phsgroup.com.au, though this may affect our ability to continue providing you with products or services.
Before we transfer your personal data outside Singapore, we take reasonable steps to ensure the recipient provides a standard of protection at least comparable to the PDPA.
If we experience a data breach likely to result in significant harm to affected individuals, or affecting 500 or more individuals, we will notify the PDPC as soon as practicable, and no later than three calendar days after assessing the breach is notifiable, and will notify affected individuals where required.
You can contact our Data Protection Officer at customercare@phsgroup.com.au.
Hong Kong
If you are located in Hong Kong, we handle your personal data in accordance with Hong Kong's Personal Data (Privacy) Ordinance, Cap. 486 ("PDPO"), administered by the Privacy Commissioner for Personal Data ("PCPD").
If we wish to use your personal data for direct marketing, we will first inform you of the data to be used, the products or services to be marketed, and your right to opt out, and we will only proceed with your consent. You may opt out at any time, free of charge, by contacting us at customercare@phsgroup.com.au or using the unsubscribe option in any marketing communication. We will not provide your personal data to another party for that party's own direct marketing without your express consent.
Hong Kong law does not currently impose statutory restrictions on transferring personal data outside Hong Kong, but we take reasonable precautions to ensure your personal data receives comparable protection when transferred to Australia.
If we become aware of a data breach likely to result in a real risk of harm to affected individuals, we will notify the PCPD and affected individuals as soon as practicable, in line with the PCPD's published guidance.
Japan
If you are located in Japan, we handle your personal information in accordance with Japan's Act on the Protection of Personal Information ("APPI"), administered by the Personal Information Protection Commission ("PPC").
Where you provide us with information about your health or medical condition, this is "special care-required personal information" under the APPI, and we will only collect it with your prior, opt-in consent, except where the APPI permits collection without consent.
Before we transfer your personal information outside Japan, we will either obtain your prior, opt-in consent, after informing you of the data protection system of the destination country and our security measures, or put in place a contract requiring the recipient to handle your information to a standard equivalent to the APPI.
If we become aware of a leakage, loss or damage of personal information that must be reported under the APPI, including where it involves special care-required personal information, is likely to cause property damage, results from a suspected cyberattack, or affects more than 1,000 individuals, we will report it to the PPC and notify affected individuals without undue delay.
South Korea
If you are located in South Korea, we handle your personal information in accordance with South Korea's Personal Information Protection Act ("PIPA"), administered by the Personal Information Protection Commission ("PIPC"). Our services are not directed at, and we do not knowingly collect personal information from, individuals under the age of 14 without the consent of a parent or legal guardian.
Where you provide us with sensitive information, including information about your health, we collect this only with your separate, explicit consent, distinct from your general consent to this policy.
Before we transfer your personal information outside Korea, we will obtain your separate consent, after informing you of the specific information to be transferred, the destination country, the recipient's identity and contact details, and the purpose and retention period of the transfer.
If a breach occurs affecting your personal information, we will notify you within 72 hours of becoming aware of it, and will report the breach to the PIPC or the Korea Internet & Security Agency within 72 hours where it involves 1,000 or more individuals, sensitive information, or unauthorised external access.
You can contact our Chief Privacy Officer at customercare@phsgroup.com.au.
Taiwan
If you are located in Taiwan, we handle your personal data in accordance with Taiwan's Personal Data Protection Act ("PDPA"), administered by Taiwan's Personal Data Protection Commission ("PDPC").
Personal data relating to your health or medical treatment is a special category of personal data under Article 6 of the PDPA, and we will only collect, process or use it with your separate, explicit written consent, or where a specific exception applies.
Cross-border transfer of your personal data is generally permitted, unless Taiwan's competent authority has imposed a restriction, including where the destination country lacks adequate protection.
Taiwan's PDPA was amended in late 2025 to introduce mandatory data breach notification. At the time of this policy, the PDPC has not yet finalised the specific thresholds and timeline for notification. In the event of a breach, we will notify you and take appropriate steps consistent with the PDPA, and will update this section once the PDPC's implementing regulations are finalised.
China
If you are located in mainland China, we handle your personal information in accordance with China's Personal Information Protection Law ("PIPL").
Where you provide us with sensitive personal information, including information about your health, we collect and use this only with your separate, explicit consent, and will inform you of the necessity of processing it and its impact on your rights before collection.
Before transferring your personal information outside mainland China, we obtain your separate, explicit consent to the transfer, after informing you of the identity and contact details of the overseas recipient, the purpose and method of processing, the categories of information involved, and how you may exercise your rights with the overseas recipient. We also put in place the transfer mechanism required under the PIPL for our volume and category of data, being a filed standard contract, security assessment approval, or personal information protection certification, as applicable.
As an overseas personal information handler within the scope of the PIPL, we have designated a representative or entity within China responsible for matters related to our processing of your personal information.
If a data breach occurs, or is likely to occur, that may harm your rights and interests, we will take immediate remedial action and notify affected individuals and the relevant Chinese regulatory authority in accordance with the PIPL.
