Privacy policy

1. Scope

This policy describes how Heravale handles personal information connected with this website and messages sent to the contact address published here. It should be read with our Cookie policy.

2. Information we collect

The website has no accounts, contact forms or newsletter forms. Heravale does not collect personal information that identifies you through the website itself.

The website uses privacy-friendly, cookieless analytics to understand how the site is used. This records aggregate information about visits: the page viewed, the referring website, an approximate country, and the type of device, browser and operating system. It does not place cookies, does not store an identifier on your device, and is not used to build a profile of you or to follow you across other websites. Your IP address is processed by the analytics provider to derive an approximate country and to count visits. Heravale does not receive or store your IP address through analytics.

We may also receive or hold personal information when:

• you email us directly, including your name, email address and the content of your message;
• an enquiry contains information about a product complaint, adverse event or other health matter; or
• our hosting provider records standard technical logs, such as IP address, browser type, time and pages requested, for security and reliability.

3. How we use information

We may use personal information to:

• respond to an enquiry;
• investigate and manage product quality or safety matters;
• meet legal, regulatory, record-keeping and reporting obligations; and
• protect and maintain the security and reliability of our systems.

4. Disclosure and service providers

We may disclose information where reasonably necessary to service providers supporting our email or website, professional advisers, regulators, healthcare professionals, suppliers or other parties involved in investigating a product or safety matter. We may also disclose information where required or authorised by law.

Our website hosting and the cookieless analytics described in section 2 are provided by Vercel, which processes this information on our behalf as our hosting and analytics provider.

Service providers may process information in Australia or in other countries where they operate. Where an overseas disclosure occurs, Heravale takes reasonable steps required by applicable privacy law and will update this policy if its regular disclosure practices change.

5. Storage, security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Information is retained only for as long as reasonably needed for the purpose for which it was collected and any applicable legal or regulatory requirement.

6. Cookies and browser storage

Heravale does not use advertising or tracking cookies, and the analytics described in section 2 are cookieless. The website uses essential local storage only to remember that the cookie notice has been acknowledged. See the Cookie policy for details.

7. Access and correction

You may ask for access to personal information we hold about you or request that inaccurate information be corrected. We may need to verify your identity before acting on a request. Exceptions permitted by law may apply.

8. Privacy questions and complaints

Contact us at info@heravale.com.au with a privacy question, access or correction request, or complaint. Please provide enough detail for us to understand and respond to the matter.

If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

9. Changes to this policy

We may update this policy when our information-handling practices or legal obligations change. The date above identifies the latest published revision.