Privacy policy

Background

1. Melrose Laboratories Pty Ltd (Melrose FutureLab) is committed to responsible privacy practices and to complying with the Australian Privacy Principles (APPs) contained in the Privacy Act.

2. Melrose FutureLab recognises and acknowledges that protecting the privacy of individuals' personal information is important and required under the Privacy Act.

3. This Privacy Policy sets out Melrose FutureLab's policies on the management of personal information including how Melrose FutureLab collects personal information, the purposes for which Melrose FutureLab may use and/or disclose this information, how Melrose FutureLab may use and/or disclose the information Melrose FutureLab collects, and to whom this information is disclosed. Additionally, this policy explains how individuals can request access to and correction of the information Melrose FutureLab holds about them, how individuals can file complaints with Melrose FutureLab in respect of how Melrose FutureLab handles personal information held about them, and how to make any related inquiry.

4. Melrose FutureLab reserves the right to (at its discretion) change or replace this Privacy Policy from time to time. Melrose FutureLab will post the modified, amended or new privacy policy to its website in place of the superseded policy. At any time, the latest version of our Privacy Policy is available from our website: https://www.melrosehealth.com.au.

5. Melrose FutureLab recommends that you regularly check our website to ensure that you are aware of the current version of our Privacy Policy.

Melrose FutureLab acknowledges that the Privacy Principles contained in the Privacy Act are from a strict legal position applicable within Australia. Melrose FutureLab however is committed to having this Privacy Policy operate globally, except where this policy conflicts with the requirements of the local jurisdiction (in such case, Melrose FutureLab will comply with the requirements of the local jurisdiction).

What Is Personal Information

1. In this Privacy Policy, "personal information" has the meaning set out in the Privacy Act. Essentially, personal information is information or an opinion about an individual who is reasonably identifiable.

2. For the purposes of this policy, "personal information" includes the information set out below under "What types of personal information does Melrose FutureLab collect".

What Types of Personal Information Does Melrose FutureLab Collect

1. The types of personal information Melrose FutureLab collects from you depend on the circumstances in which the information is collected.

2. Melrose FutureLab may collect contact details including your name, occupation, address, email address, phone and fax numbers and your date of birth. We may collect answers you provide to questions we ask and other information in relation to your dealings with Melrose FutureLab. If you purchase products or services from us, we may also collect certain transactional information and financial details to process the transaction.

3. If you are an Individual Contractor to Melrose FutureLab, we may also collect information relevant to your engagement with Melrose FutureLab including qualifications, resume, reference information from your nominated referees, tax file number, bank details, insurance details, feedback from supervisors and training records.

4. Melrose FutureLab may collect your personal information when you apply for a role with Melrose FutureLab. Such information may include your qualifications, resume, reference information from your nominated referees, tax file number and bank details. Where you are unsuccessful in an application for a role with Melrose FutureLab, Melrose FutureLab may request that it retains your personal information to enable Melrose FutureLab to consider you for future roles that may become available.

5. Melrose FutureLab may also collect information about you when you access Melrose FutureLab's website. When you use Melrose FutureLab's websites, we may collect website usage information such as the IP address you are using, your browser version, the website that referred you to us and the next website you go to, the pages you request while visiting our websites, the date and time of those requests and the country you are in.

6. In certain circumstances we are required to collect government identifiers such as tax file numbers, Medicare numbers, health service provider numbers, pension numbers and Veteran's Affairs numbers. Melrose FutureLab only collects, uses and discloses such information as permitted or required by law.

7. In addition to the types of personal information identified above, Melrose FutureLab may collect personal information as otherwise permitted or required by law.

Melrose Laboratories Pty Ltd does not collect, store or retain any credit card and other payment information in connection with products purchased from Melrose FutureLab via this website. All payments for products purchased from Melrose FutureLab via this website are processed through third party payment gateway providers. Melrose FutureLab uses its reasonable endeavours to ensure that all purchases made through Melrose FutureLab's website are made using secure HTTP connections.

How Does Melrose FutureLab Collect Your Personal Information

1. Melrose FutureLab only collects personal information using lawful and fair means. Melrose FutureLab will not collect personal information unless the information is reasonably necessary for one or more of Melrose FutureLab's functions or activities.

2. Melrose FutureLab collects personal information in a number of ways. The most common ways Melrose FutureLab collects your personal information are:

From publicly available sources.
From forms which you complete and submit to us, including online forms.
Through mail correspondence, emails and other electronic means.
From job applicants and staff members.
From direct contact in the course of Melrose FutureLab providing goods and/or services to you.
In the course of Melrose FutureLab conducting market research, including customer satisfaction surveys.
In the course of answering a general inquiry regarding Melrose FutureLab, the products and/or services Melrose FutureLab provides.
Directly from you when you provide it to us or our agents or contractors.
Via our website or when you deal with us online (including through our social media pages).
If you are an individual contractor to Melrose FutureLab, from your employer or recruitment agency.
From our related companies.
From credit reporting agencies.
From referees if you apply for a position as an employee or contractor with us.
From consumer feedback, which may include name, contact details, and in some cases condition and treatment information so that Melrose FutureLab can help with product advice.

3. Subject to the foregoing, to the extent reasonably practicable, Melrose FutureLab only collects personal information about an individual directly from that individual. Additionally, Melrose FutureLab will only collect personal information where Melrose FutureLab specifically requests that information, except in circumstances where personal information is volunteered to Melrose FutureLab or is otherwise supplied to or disclosed to Melrose FutureLab without Melrose FutureLab asking for such information.

Dealing With Melrose FutureLab Anonymously or Pseudonymously

In accordance with the requirements of the APPs, you have the option of not identifying yourself or of using a pseudonym when dealing with Melrose FutureLab in relation to a particular matter. However, in accordance with the APPs, the foregoing would not apply in relation to that matter if Melrose FutureLab is required or authorised by or under an Australian law, or a court or a tribunal order, to deal with individuals who have identified themselves concerning that matter. Additionally, if it is impracticable for Melrose FutureLab to deal with individuals who have not identified themselves or who have used a pseudonym on a particular matter, then Melrose FutureLab would not be required to provide you with the option to engage with Melrose FutureLab on an anonymous or pseudonymous basis concerning that matter.

For example, if you choose to interact and deal with Melrose FutureLab on an anonymous or pseudonymous basis, or if you do not provide Melrose FutureLab with personal information when requested, Melrose FutureLab may be unable to provide you with all of the products and/or services that you seek from Melrose FutureLab. Further, Melrose FutureLab reserves the right to verify your identity as part of Melrose FutureLab's response to a request to access and/or correct personal information Melrose FutureLab holds about you, or as part of Melrose FutureLab's complaints-handling process. If Melrose FutureLab is unable to verify your identity, or if you continue to engage with Melrose FutureLab on an anonymous or pseudonymous basis, then Melrose FutureLab may be unable to satisfy your request or to complete its complaints-handling process.

For What Purposes Does Melrose FutureLab Collect, Use and Disclose Your Personal Information

1. The purposes for which we use and disclose your personal information will depend on the circumstances in which we collect it. Whenever practical, Melrose FutureLab will take reasonable steps to inform you why Melrose FutureLab is collecting your personal information, how Melrose FutureLab intends to use that information and to whom Melrose FutureLab intends to disclose it at the time we collect your personal information.

2. Melrose FutureLab may use or disclose your personal information:

For the purposes for which Melrose FutureLab collected it (and certain secondary purposes where permitted by law).
For other purposes to which you have consented.
As otherwise authorised or required by law.

3. In general, Melrose FutureLab collects, uses and discloses your personal information so that we can do business together and for purposes connected with our business operations, such as providing you with information useful to your needs.

4. Some of the specific purposes for which Melrose FutureLab collects, uses and discloses personal information are:

To respond to you if you have requested information (including via our websites or via an email or other correspondence you send to us).
To provide goods or services to you or to receive goods or services from you.
To process transactions and to administer customer accounts.
To administer and manage services, including charging, billing and collecting debts.
To enable you to participate in any research, marketing, competitions or similar programs that Melrose FutureLab conducts from time to time.
To improve products and services and keep you up to date on such improvements.
To understand Melrose FutureLab's customers better and help improve Melrose FutureLab's products and services.
To allow performance reporting and benchmarking of our business, if applicable.
To contact you (directly or through Melrose FutureLab's service providers) to obtain your feedback, to find out your level of satisfaction with our products and services and for other market research activities.
To verify your identity.
To enable and manage all Melrose FutureLab's contracts, including supplier, contractor or consultant relationships.
To address any issues or complaints that we or you have regarding our relationship.
To directly market Melrose FutureLab's products and services to current and prospective customers (including through direct mail and email), provided that such recipients have not opted out of receiving such communications from Melrose FutureLab.
To contact you regarding the above, including via electronic messaging such as SMS and email, by mail, by phone, by fax or in any other lawful manner.

5. Melrose FutureLab may also use and/or disclose personal information it collects about an individual for one or more of the following purposes:

Assessing an opportunity to provide Melrose FutureLab's products and services to a current or prospective customer.
To comply with Melrose FutureLab's obligations under any law or statute that binds Melrose FutureLab.
To comply with Melrose FutureLab's obligations under a contract into which Melrose FutureLab has entered.
To assess the suitability of an individual applying for a job with Melrose FutureLab.
To assess and manage the supply of goods and/or services to Melrose FutureLab by a contractor or service provider.

What Happens If You Don't Provide Personal Information

1. Generally, you have no obligation to provide any personal information requested by us. However, if you choose to withhold requested personal information, we may not be able to provide you with products and services that depend on the collection of that information.

2. Individuals seeking employment with Melrose FutureLab who fail to provide any lawfully requested personal information may experience delays in the consideration of their application for employment, or it may result in their application for employment being unsuccessful.

To Whom Does Melrose FutureLab Disclose Personal Information

1. Generally, Melrose FutureLab will use its reasonable endeavours to disclose de-identified information to third parties. However, Melrose FutureLab may disclose personal information it collects to third parties but only on an as-needs basis and in order to facilitate the fulfilment of one or more purposes for which the information was collected, or any secondary purpose related to the primary purpose for which Melrose FutureLab may be permitted to disclose such information by law.

2. This may include disclosing your personal information to the following types of third parties.

3. We may disclose your personal information to third parties in connection with the purposes described in section 5:

Melrose FutureLab's related companies, such as Orchard Pty Ltd.
Melrose FutureLab's agents, suppliers, contractors and other third parties that provide goods and services to Melrose FutureLab (including suppliers, marketing agencies, data analysis specialists, data processing organisations, billing and debt recovery providers, website and data hosting providers and other IT suppliers) in order to enable them to provide products and/or services to Melrose FutureLab which may directly or indirectly benefit the individual from whom Melrose FutureLab collected the information.
Melrose FutureLab's customers, where Melrose FutureLab is required to disclose personal information under contracts entered into with any of Melrose FutureLab's customers.
Melrose FutureLab's accountants, insurers, lawyers, auditors and other professional advisers.
Government and regulatory authorities, courts, tribunals and other bodies as required or authorised by law.
Any third parties to whom you have directed or permitted us to disclose your personal information (e.g. referees).
In the event that Melrose FutureLab or its business and assets may be acquired or considered for acquisition by a third party, that third party and its advisors.
Carefully selected third parties with whom Melrose FutureLab has data sharing arrangements.
Third parties that require the information for law enforcement or to prevent a serious threat to public safety.
Otherwise as permitted or required by law.

4. Where we disclose your personal information to third parties we will take reasonable steps to ensure that such third parties only use your personal information as reasonably required for the purpose we disclosed it to them and in a manner consistent with the APPs.

5. If you post information to public parts of Melrose FutureLab's websites or to its social media pages, you acknowledge that such information (including if it includes your personal information) may be available to be viewed by the public. You should use discretion in deciding what information you upload to such sites.

6. Without limiting the foregoing, Melrose FutureLab may disclose personal information about an individual when required by law or court order, or other governmental order or process to disclose, where Melrose FutureLab believes in good faith that the law compels Melrose FutureLab to disclose the information.

7. Melrose FutureLab may disclose personal information of an individual where Melrose FutureLab considers (in good faith) that it is reasonably necessary to do so in order to identify, contact or bring legal action against an individual whom Melrose FutureLab suspects or knows is causing harm to Melrose FutureLab, its business or operations.

Disclosure of Information Outside the State/Territory/Nation of Collection

1. Some recipients of information Melrose FutureLab discloses from time to time may be located outside Australia. The countries in which such third parties are located will depend on the circumstances. For example, we may disclose personal information to our related companies overseas and to our overseas service providers.

2. In the ordinary course of business we may transfer to, or store personal information at, overseas parties (for example, offshore data centres located in the US and Asia). All transfer of information is encrypted, and Melrose FutureLab takes reasonable commercial technical measures to ensure data security using contemporary storage and cryptographic techniques. Melrose FutureLab ensures processes are in place to ensure information is only shared with parties with a legitimate requirement to carry out services outlined in this policy.

3. Except in some cases where we may rely on an exception under the Privacy Act or other law, we will take reasonable steps to ensure that such overseas recipients do not breach the APPs in relation to such information.

Use or Disclosure of Personal Information for the Purpose of Direct Marketing

Melrose FutureLab reserves the right to use and disclose your personal information for the purpose of direct marketing to you where:

You have consented to us doing so.
Where Melrose FutureLab collected your personal information directly from you, in circumstances where you would reasonably expect us to use and/or disclose your personal information for the purpose of direct marketing.
It is otherwise permitted by law.

Direct marketing involves communicating directly with you for the purpose of promoting goods or services to you and to provide you with special offers. Direct marketing can be delivered by a range of methods including mail, fax, telephone, email or SMS. You can unsubscribe from our direct marketing, or change your contact preferences, by exercising the opt-out mechanism included with each direct marketing communication or by contacting us (see section 15).

In directly marketing Melrose FutureLab's products and services to you, Melrose FutureLab will comply with other laws relevant to marketing, including the Spam Act 2003 (Cth), the Do Not Call Register Act 2006 (Cth) and the Competition and Consumer Act 2010 (Cth) (including the Australian Consumer Law). All direct marketing communications which Melrose FutureLab may send will include an easy opt-out mechanism if at any time you wish to stop receiving direct marketing communications from Melrose FutureLab.

Security of Personal Information

1. Melrose FutureLab will take reasonable steps to keep any personal information we hold about you secure from misuse, interference and loss, and from unauthorised access, modification and disclosure. Please notify us immediately if you become aware of any breach of security.

2. Melrose FutureLab regularly reviews and updates its physical and data security measures in light of current technologies and threats. Unfortunately, no data transmission over the Internet or over mobile data and communications services can be guaranteed to be totally secure.

3. In addition, Melrose FutureLab's employees and contractors who provide services to Melrose FutureLab or who have access to personal information Melrose FutureLab collects and holds are obliged to respect the privacy of any personal information Melrose FutureLab holds.

4. Melrose FutureLab does everything reasonably within its power and control to prevent unauthorised use or disclosure of personal information Melrose FutureLab collects and holds.

5. However, to the maximum extent permitted by law, Melrose FutureLab is not responsible for events arising from unauthorised use of or access to personal information except to the extent that such unauthorised use or access is as a result of Melrose FutureLab's failure to comply with its legal obligations concerning the steps taken to secure the personal information Melrose FutureLab collects and holds.

6. Additionally, in accordance with Melrose FutureLab's statutory obligations, it will take reasonable steps to destroy or to de-identify personal information when the information is no longer required for the purpose(s) for which the information was collected.

7. Where Melrose FutureLab destroys or de-identifies personal information, Melrose FutureLab will endeavour to do so via a secure means.

Accuracy of the Personal Information We Hold

1. Melrose FutureLab will take reasonable steps to maintain your personal information as accurately as reasonably possible. However, Melrose FutureLab relies on the accuracy of personal information as provided to us both directly (from you) and indirectly.

2. You may contact us if the personal information we hold about you is incorrect or to notify us of a change in your personal information. Our contact details are set out below.

3. Corrections will be made to any incorrect information or, in the event of a correction being refused, a reason will be provided.

4. Where information about an individual is corrected, and the information has previously been disclosed to third parties, Melrose FutureLab will take reasonable steps to notify those third parties of the correction.

Links, Cookies and Use of Melrose FutureLab Websites and Applications

1. Melrose FutureLab websites may contain links to other sites. This Privacy Policy applies to our websites and not any linked sites which are not operated or controlled by Melrose FutureLab. We encourage you to read the privacy policy of each website that collects your personal information.

2. Melrose FutureLab uses "cookies" and similar technology on its websites and in other technology applications. The use of such technologies is an industry standard, and helps us monitor the effectiveness of our advertising and how visitors use our websites and applications. We use such technologies to generate statistics, measure your activity, improve the usefulness of our websites and applications and to enhance the customer experience.

3. If you prefer not to receive cookies you can adjust your Internet browser to refuse cookies or to warn you when cookies are being used. However, our websites may not function properly or optimally if cookies have been turned off.

How Can You Access and Correct Personal Information Melrose FutureLab Holds About You

1. You may seek access to personal information which Melrose FutureLab holds about you by contacting us as described below.

2. Melrose FutureLab will provide access to that information in accordance with the APPs, subject to certain exemptions which may apply. Melrose FutureLab reserves the right to require that the person requesting access provide suitable identification and where permitted by law Melrose FutureLab may charge a reasonable fee to cover costs incurred in providing access to your personal information.

3. Further, Melrose FutureLab reserves the right to redact information it makes available in response to an access request, to protect the privacy of other individuals.

4. From time to time, Melrose FutureLab may refuse to provide access to the information held about an individual, in accordance with the APPs. Where Melrose FutureLab refuses access, Melrose FutureLab will explain the reasons for refusal in writing and provide details in relation to the relevant complaint process.

5. Melrose FutureLab takes reasonable steps to ensure that the information Melrose FutureLab collects, holds, uses and discloses about an individual is complete, up-to-date and accurate. However, if at any time you believe or become aware that any personal information we hold about you is incorrect, or if you wish to update your information, you have the right to request that Melrose FutureLab amends or updates such information. If Melrose FutureLab refuses the correction request, Melrose FutureLab will provide written reasons and information about the complaints process.

Queries, Comments and Complaints About Our Handling of Personal Information

1. If you have any questions, comments or complaints about our collection, use or disclosure of personal information, or if you believe that we have not complied with this Privacy Policy or the Privacy Act, please contact Melrose FutureLab using the details below.

2. When contacting Melrose FutureLab please provide as much detail as possible in relation to your question, comment or complaint.

3. Melrose FutureLab will promptly acknowledge receipt of your complaint and will endeavour to deal with your complaint and to provide you with a response within a reasonable time period following Melrose FutureLab's receipt of your complaint (generally within 30 days of receipt).

4. Where the complaint requires a more detailed investigation, it may take longer to resolve. If this is the case, Melrose FutureLab will endeavour to provide you with progress reports.

5. Melrose FutureLab will take any privacy complaint seriously and any complaint will be assessed by an appropriate person with the aim of resolving any issue in a timely and efficient manner. We request that you co-operate with Melrose FutureLab during this process and provide us with any relevant information that Melrose FutureLab may need.

6. Melrose FutureLab reserves the right to verify your identity and to seek (where appropriate) further information from you in connection with your complaint.

7. Where required by law, Melrose FutureLab will provide its determination on your complaint to you in writing.

8. Please note that, in accordance with the APPs, Melrose FutureLab reserves the right to refuse to investigate or to otherwise deal with a complaint if Melrose FutureLab considers your complaint to be vexatious or frivolous, or as otherwise permitted by law.

9. If you are not satisfied with the outcome of our assessment of your complaint, you may wish to contact the Office of the Australian Information Commissioner or other relevant regulators at http://www.oaic.gov.au/.

How Can You Contact Melrose FutureLab?

1. Please address all privacy complaints and requests to update or access information to: Melrose Laboratories Pty Ltd, Customer Service, 37 Enterprise Drive, Rowville, VIC 3178, Australia or by email: info@melrosehealth.com.au. Any requests to access, update or correct your health information should be made in writing.

2. To unsubscribe from our direct marketing, you can also contact us at marketing@melrosehealth.com.au and set out the contact details that you no longer want used for direct marketing.

Supplement in Relation to the General Data Protection Regulation

Last updated: July 2018

This supplement is intended to add to the privacy policy of Melrose Laboratories Pty Ltd (Melrose FutureLab). It sets out how Melrose FutureLab complies with the General Data Protection Regulation ("GDPR") with respect to the processing of personal data collected from residents of the European Union. It is not intended to replace Melrose FutureLab's privacy policy that applies to the collection, use and disclosure of personal information from individuals located in Australia.

This supplement applies whenever you visit this website, including any mobile website (together, the "Website"), from a location within the European Union, or when a resident of the EU provides personal data to Melrose FutureLab.

Data Controller

For the purposes of the GDPR, Melrose FutureLab confirms that the data controller of this Website is Melrose Laboratories Pty Ltd, a company registered under the laws of Australia, whose registered office is located at 37 Enterprise Drive, Rowville, VIC 3178, Australia.

What Personal Data Does Melrose FutureLab Collect About You and From Whom?

When you access, subscribe or sign up to use the Website, Melrose FutureLab may collect a variety of personal data about you. The types of information Melrose FutureLab collects from individuals (including EU residents) are set out in Melrose FutureLab's privacy policy.

Use of Your Personal Data

Where the GDPR applies to the personal data Melrose FutureLab collects, Melrose FutureLab uses and processes personal data according to the requirements and restrictions of the GDPR. In particular, Melrose FutureLab will only use and/or disclose your personal data if Melrose FutureLab has a permitted lawful basis on which to do so.

Generally, Melrose FutureLab collects your personal data because it is necessary for:

Performing Melrose FutureLab's contract for the provision of products and/or services to you.
The pursuit of Melrose FutureLab's legitimate interests (as detailed further below).
Complying with Melrose FutureLab's legal obligations.

Melrose FutureLab may also rely on your consent to use your personal data, including for marketing purposes. You may withdraw your consent to these activities at any time. If you withdraw your consent, unless another lawful basis applies, Melrose FutureLab will cease to process the affected data. Please note that withdrawal of consent may result in Melrose FutureLab being unable to provide you with certain features of the Website and/or the products that you have ordered and paid for through the Website.

Melrose FutureLab may use your personal data for Melrose FutureLab's legitimate interests, including:

For promoting, marketing and advertising Melrose FutureLab's products and services.
For statistical and demographic analysis, in order to understand the behaviour, activities, preferences and needs of Melrose FutureLab's customers.
For improving the Website, to improve existing products and services and to develop new products and services.
To protect Melrose FutureLab's brand, reputation and goodwill in the marketplace, by taking appropriate legal action against third parties who have infringed Melrose FutureLab's rights or otherwise are in breach of their legal obligations owed to Melrose FutureLab.
To effectively and efficiently handle and resolve any legal claims or regulatory enforcement proceedings taken against Melrose FutureLab.
To generally operate the Website and for internal business operations.
To monitor and to record telephone calls for training purposes.

Additionally, Melrose FutureLab may also use your personal data for complying with its legal obligations and to enforce its legal rights (including in relation to an actual or suspected breach of the Website's Terms of Use).

Marketing Communications

Where you have consented to receive marketing communications directly from Melrose FutureLab, you agree that Melrose FutureLab may use your information to contact you by your selected method of communication regarding new products, competitions, events, items or related activities which Melrose FutureLab anticipates you may find useful, together with communications regarding similar products and services offered by Melrose FutureLab. Melrose FutureLab does not sell, trade or rent your personal data to other companies or partners. You may revoke your consent at any time by exercising the "unsubscribe" option in any marketing communications you receive.

To Whom Melrose FutureLab Discloses Your Personal Data

Generally, Melrose FutureLab will use its reasonable endeavours to disclose de-identified information to third parties. However, Melrose FutureLab may disclose personal data it collects to third parties on an as-needs basis and only in order to facilitate the fulfilment of one or more of the reasons for which your personal data is being processed. Subject to the foregoing, Melrose FutureLab may disclose your personal information to the categories of recipients outlined in Melrose FutureLab's privacy policy.

You agree that if Melrose Laboratories Pty Ltd transfers ownership or management of the Website or of Melrose FutureLab's business and/or assets to a third party, Melrose FutureLab may also transfer your personal data or other personal data you provided to Melrose FutureLab as part of those assets. This includes, but is not limited to, all sensitive personal data and any other information about you.

How Long Does Melrose FutureLab Keep Personal Data?

Melrose FutureLab keeps your personal data for as long as it is reasonably necessary to meet the relevant purposes for which Melrose FutureLab collected your personal data, including for the purpose of satisfying any legal, accounting or reporting requirements.

To determine the appropriate length of time for holding your personal data, Melrose FutureLab takes into account the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use and/or disclosure of your personal data, the purpose(s) for which Melrose FutureLab processes your personal data and whether Melrose FutureLab can achieve those purposes through other means, together with legal requirements imposed on Melrose FutureLab.

As a general rule, Melrose FutureLab retains personal data relating to products purchased from the Website for up to seven years following the transaction.

Is Personal Data Transferred Outside the European Union?

As Melrose Laboratories Pty Ltd is located in Australia, all personal data collected from you will be collected and held in Australia. Melrose FutureLab has implemented appropriate safeguards in connection with the protection of personal data transferred from the European Union into Australia. Melrose FutureLab will use its best endeavours to ensure that any third party recipient located outside the European Union will take steps to safeguard the personal data transferred or disclosed by Melrose FutureLab to the recipient. Further cross-border transfer or disclosure of your personal data will only occur as envisaged in Melrose FutureLab's general privacy policy.

Security of Personal Data

In accordance with Melrose FutureLab's Terms of Use for the Website, you acknowledge and agree that:

To the maximum extent permitted by law, Melrose FutureLab makes no representation or warranty, nor gives any guarantee to you that your access to the Website and/or to the content accessible on the Website will be secure, uninterrupted or error free.
Data transmission over the internet cannot be completely guaranteed to be secure and, to the maximum extent permitted by law, Melrose FutureLab cannot give an absolute assurance or guarantee that the information you provide to Melrose FutureLab will be secure at all times.

Melrose FutureLab takes reasonable steps to protect the personal data Melrose FutureLab holds from misuse and loss, and from unauthorised access, modification or disclosure. To prevent unauthorised access, to maintain accuracy, and to ensure proper use of personal information, Melrose FutureLab has deployed physical, electronic and managerial processes to safeguard and to secure the personal data collected.

Use of Cookies and Links to Third Party Websites

Please refer to Melrose FutureLab's privacy policy with respect to Melrose FutureLab's use of cookies and in relation to links from the Website to websites operated by third parties.

Your Rights in Respect of Your Personal Data

Under certain circumstances, you have rights under the GDPR and the Privacy Act 1988 (Cth) in relation to the personal data that Melrose FutureLab holds about you. You can request to:

Access information held about you, subject to Melrose FutureLab verifying your identity and subject to Melrose FutureLab's right to charge you a reasonable administrative fee to cover costs incurred in relation to any repetitive, manifestly unfounded or excessive requests for access.
Rectify any incorrect or incomplete data that Melrose FutureLab holds about you, subject to Melrose FutureLab verifying your identity.
Delete, restrict or remove personal data Melrose FutureLab holds about you, subject to the relevant provisions in the GDPR.
Transfer any personal data that Melrose FutureLab holds about you to another party, subject to the relevant provisions in the GDPR.
Object to any further processing of your personal data, subject to the relevant provisions in the GDPR.

All such requests should be directed to: Melrose Laboratories Pty Ltd, Customer Service, 37 Enterprise Drive, Rowville, VIC 3178, Australia or by email: info@melrosehealth.com.au.

Please note that in respect of all these rights, Melrose FutureLab reserves the right to refuse your request based on the exemptions set out in the GDPR.

Updates to This Supplement

Melrose FutureLab may from time to time change or replace this supplement and Melrose FutureLab will post the modified, amended or new supplement to the Website in place of the superseded supplement. Melrose FutureLab recommends that you regularly check the Website to ensure that you are aware of the current version of Melrose FutureLab's privacy policy and this supplement.