Last updated [CONFIRM date] · Applies to medibandplus.com and the MedibandPlus service.
We take particular care with the health information you store with us. This policy explains what we collect, why, who can see it, and the choices you control. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.
The MedibandPlus service is operated by Randall Communications Pty Ltd (ACN 109 872 362) as trustee for the Randall Family Trust, trading as MedibandPlus (“we”, “us”). We are an Australian-based provider of an online emergency medical profile that works alongside Mediband physical IDs.
2. What we collect
We collect only what we need to provide the service:
Account details — name, email, password, and contact details.
Membership & billing — your plan, membership number, and payment records. Card details are entered directly with our payment processor (see section 5) and are not stored on our servers.
Medical profile information you choose to add — such as conditions, allergies, medications, blood type, emergency contacts and care notes. Providing this is optional, but it is the core of the service.
Usage data — basic technical information (e.g. device, browser, pages viewed) collected through cookies and analytics.
3. How we use it
To create and run your account and emergency profile.
To display the information you have chosen to share when your membership number is looked up by a responder.
To process payments and manage your subscription, including renewals and reminders.
To provide support and respond to your enquiries.
To send service messages and, where you have opted in, occasional updates. You can opt out of marketing at any time.
4. Your medical profile & emergency access
Your profile is private by default. For each section you control whether it is Public (visible to anyone who looks up your membership number, so a first responder can act in an emergency) or Private (visible only to you). You can change these settings at any time from your account.
Because the purpose of the service is emergency access, any information you mark Public can be viewed by anyone who enters your membership number — no login is required. Only mark information Public if you are comfortable with that.
5. Who we share it with
We do not sell your personal information. We share it only with service providers who help us run MedibandPlus, under contract and only as needed:
Payments — Stripe processes card payments and manages subscription billing. Stripe handles your card data directly under its own privacy terms.
Email — Klaviyo [CONFIRM — current email service provider] sends service and (where opted in) marketing emails.
Hosting & infrastructure — [CONFIRM hosting provider] hosts the service on Australian-based infrastructure.
Analytics — Google Analytics helps us understand site usage. [CONFIRM any ad/conversion tracking actually in use — the legacy page listed Facebook, Google Ads and LinkedIn; only list what is genuinely active.]
Some providers may process data overseas; where they do, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.
6. Cookies & analytics
We use essential cookies to run the site and analytics cookies to improve it. You can control cookies through your browser settings. [CONFIRM cookie/consent banner approach.]
7. Your rights & choices
Access & correction — view and update your details and medical profile any time from your account, or ask us.
Visibility — set each section of your profile to Public or Private.
Marketing — opt out of marketing emails via the unsubscribe link or by contacting us.
Deletion — ask us to close your account and delete your information, subject to records we must keep by law.
Complaints — contact us first; you may also contact the Office of the Australian Information Commissioner (oaic.gov.au).
8. Security & retention
We use encryption in transit and reasonable technical and organisational measures to protect your information. No system is completely secure, so we also rely on the visibility choices you make. We keep your information for as long as your account is active and as required afterwards by law [CONFIRM retention periods].
9. Contact us
Questions or requests about your privacy? Email [email protected] or write to PO Box 741, Cremorne Junction NSW 2090, Australia. We may update this policy from time to time; we’ll post the current version here with its date.
