Welcome to Vitr Pathways. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

1. Important Information and Who We Are

Purpose of This Privacy Policy

This privacy policy aims to give you information on how Vitr (and its subsidiaries) collects and processes your personal data through your use of this website, including any data you may provide through this website when you sign up for a service, purchase a product, or subscribe to our newsletter.

Controller

Vitr is the controller and responsible for your personal data (collectively referred to as “Vitr Tech”, “Vitr”, “Vitr Pathways”, “we”, “us”, or “our” in this privacy policy).

Contact Details

Our full details are: Vitr Pathways Pty Ltd
Email Address: admin@vitr.tech
Physical Location: Brisbane, Australia

You have the right to make a complaint at any time to the national supervisory authority for data protection issues. However, we would appreciate the chance to deal with your concerns before you approach the authority, so please contact us in the first instance.

2. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data includes [first name, last name, username or similar identifier].
  • Contact Data includes [billing address, delivery address, email address, and telephone numbers].
  • Financial Data includes [bank account and payment card details].
  • Transaction Data includes [details about payments to and from you and other details of products and services you have purchased from us].
  • Technical Data includes [internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website].
  • Profile Data includes [your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses].
  • Usage Data includes [information about how you use our website, products, and services].
  • Marketing and Communications Data includes [your preferences in receiving marketing from us and our third parties and your communication preferences].

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal obligation.

Under GDPR, we primarily rely on the following legal bases for processing your data:

  • Consent
  • Contractual necessity
  • Compliance with legal obligations
  • Legitimate interests

Under Australian privacy laws, we ensure that:

  • We collect personal information by lawful and fair means
  • We have a clear purpose for collecting personal information
  • We use or disclose personal information only for the purpose it was collected, unless the individual consents to other uses
  •  

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

5. Data Retention

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, request correction, object to processing, request deletion, request restriction of processing, request data portability, and withdraw consent.

7. Glossary

**

LAWFUL BASIS**

  • Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
  • Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
  • Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.