Privacy policy

MedClock Privacy Policy

Last updated: 7/08/26

1. Introduction

This Privacy Policy explains how VEXIAN PTY LTD ("VEXIAN", "MedClock", "we", "our" or "us") collects, holds, uses, discloses and protects personal information when you use MedClock products and services.

At MedClock, protecting the privacy of our customers is extremely important. Many of our products are designed to assist older Australians, carers, families, retirement villages, home care providers, hospitals and other organisations supporting people living independently. We understand that some of the information handled by MedClock may relate to a person's health, medication routine or wellbeing, and we are committed to handling that information responsibly.

This Privacy Policy applies to our website, online store, mobile applications, connected devices, cloud services, Care Dashboard, firmware updates, customer support services and any other products or services that link to this Privacy Policy.

This Privacy Policy is intended to comply with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs).

By using our products or services, creating an account, purchasing a product or otherwise interacting with MedClock, you acknowledge that your information may be collected, used and disclosed in accordance with this Privacy Policy.

2. Who We Are

This Privacy Policy applies to products and services provided by:

VEXIAN PTY LTD
Trading as MedClock

Website:
https://medclock.com.au

Email:
info@vexian.com.au

If you have any questions about this Privacy Policy, wish to access or correct your information, request deletion of your information or make a privacy complaint, please contact us using the details above.

3. Scope of this Privacy Policy

This Privacy Policy applies to all MedClock products and services, including but not limited to:

• MedClock medication reminder devices
• MedClock V2
• MedClock Mini
• Wall MedClock
• Fridge Monitor
• Door Activity Monitor
• Future MedClock wellbeing monitoring products
• The MedClock mobile application
• The MedClock Care Dashboard
• Retirement village dashboards
• Home care organisation dashboards
• Hospital dashboards
• Cloud services
• Device setup portals
• Device firmware
• Device APIs
• Customer accounts
• Shopify online store
• Customer support
• SMS services
• Email communications
• Push notifications
• Product registrations
• Warranty services

Some third-party services used by MedClock, including Shopify, Apple, Google and payment providers, have their own privacy policies which apply to the services they provide.

4. Definitions

Throughout this Privacy Policy:

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Sensitive information includes health information as defined by Australian privacy law.

Health information may include medication names, medication schedules, reminder histories, acknowledgement records, wellbeing monitoring information and similar information relating to an individual's health or care.

User means the person using a MedClock device or wellbeing monitoring product.

App User means a family member, authorised representative, carer, healthcare worker, support worker or other person who has been granted permission to access information through the MedClock mobile application or Care Dashboard.

Care Organisation includes aged care providers, retirement villages, hospitals, disability providers, community organisations, pharmacies and similar organisations using MedClock products.

Device means any MedClock hardware product connected to our services.

Care Dashboard means any MedClock web-based dashboard used by authorised organisations or staff.

Acknowledgement means the pressing of a MedClock button or another supported acknowledgement action. An acknowledgement indicates that the reminder was acknowledged but does not guarantee that medication was taken.

5. Our Privacy Principles

We aim to collect only the information reasonably necessary to provide and improve MedClock services.

Where practical, we:

• explain why information is collected;
• give users control over their information;
• limit access to authorised people;
• protect information using appropriate security measures;
• minimise unnecessary data collection;
• retain information only for as long as reasonably required;
• comply with applicable Australian privacy laws.

We do not sell personal information to third parties.

6. Information We Collect

The information we collect depends on how you interact with MedClock.

For example, the information collected when purchasing a product from our website differs from the information collected when using the MedClock mobile application or Care Dashboard.

The categories of information we may collect include:

• Account information
• Contact information
• Sensitive health information
• Medication information
• Device information
• Reminder information
• Notification information
• Care Dashboard information
• Website information
• Purchase information
• Security information
• Support information
• Analytics information
• Information stored locally on devices

Each category is explained in more detail below.

7. Account Information

When you create a MedClock account, register a product or use the MedClock mobile application, we may collect information including:

• full name;
• email address;
• telephone number;
• account identifier;
• account role (such as owner, family member, authorised carer, dashboard user or administrator);
• linked devices;
• linked family members;
• linked care organisations;
• notification preferences;
• account creation date;
• account status;
• authentication information;
• encrypted passwords;
• password reset requests;
• multi-factor authentication settings (where enabled);
• login history;
• session identifiers;
• consent records; and
• other information reasonably required to operate your account.

We use this information to create your account, authenticate you, secure your account, manage permissions and provide MedClock services.

8. Sensitive Health Information

Some information processed by MedClock may constitute sensitive health information under Australian privacy law.

Depending on the products and services used, this may include:

• medication names;
• medication schedules;
• medication instructions;
• medication dosages entered by users or carers;
• one-off reminders;
• reminder notes;
• reminder acknowledgement history;
• missed medication events;
• medication adherence history;
• reminder grace periods;
• acknowledgement timestamps;
• medication schedule revisions;
• medication change history;
• care notes entered by authorised users;
• resident information entered by care organisations;
• information relating to a person's daily care routine.

Health information receives additional protection under Australian privacy legislation.

We collect and use this information only where reasonably necessary to provide MedClock services, support connected carers, operate the Care Dashboard, maintain reminder history, improve product reliability, investigate support requests or otherwise perform functions requested by the user or authorised representative.

Where you enter information relating to another person, you confirm that you have the authority or appropriate consent to do so, or another lawful basis under applicable law.

9. Device Information

To operate MedClock products safely and reliably, our devices may collect and transmit technical information relating to their operation.

Depending on the product and features enabled, this information may include:

• device identifier;
• serial number;
• MAC address;
• product type;
• firmware version;
• firmware build number;
• device configuration version;
• device display name;
• linked account information;
• linked organisation information;
• pairing status;
• pairing history;
• pairing authentication records;
• connection status;
• last online time;
• last successful synchronisation;
• last event received;
• Wi-Fi signal strength;
• network connection status;
• timezone;
• automatic update settings;
• firmware update status;
• battery level;
• charging status;
• power status;
• device health;
• diagnostic information;
• error logs;
• restart events;
• reboot history;
• security events.

We use this information to:

• keep devices operating correctly;
• synchronise reminder schedules;
• troubleshoot technical issues;
• deliver firmware updates;
• monitor device health;
• notify authorised users if a device is offline;
• improve reliability;
• investigate reported faults;
• maintain the security of our services.

Device information generally does not identify a person's medical condition by itself. However, when linked with an account or reminder schedule it may become personal information.

10. Wi-Fi Information and Local Device Storage

During setup, MedClock devices require access to a Wi-Fi network so they can communicate with our cloud services.

To enable this connection, the MedClock mobile application transfers the Wi-Fi network name (SSID) and password directly to the nearby device using Bluetooth.

Wi-Fi passwords are intended to remain stored locally on the device and are not intentionally uploaded to VEXIAN's cloud systems.

Depending on the product, information stored locally on the device may include:

• Wi-Fi credentials;
• reminder schedules;
• one-off reminders;
• device configuration;
• timezone;
• alarm settings;
• recent reminder history;
• battery information;
• firmware version;
• device identifiers;
• cached settings.

Local storage allows the device to continue operating during temporary internet outages and enables reminder schedules to continue functioning even if communication with cloud services is temporarily unavailable.

11. Bluetooth Information

Bluetooth is used primarily during the initial setup of supported MedClock devices.

During Bluetooth pairing we may process:

• Bluetooth device identifiers;
• pairing requests;
• pairing confirmations;
• pairing failures;
• pairing timestamps;
• encrypted authentication information;
• nearby Bluetooth device identifiers where required for pairing.

Bluetooth communication is used solely to establish communication with your MedClock device and complete the setup process.

12. Reminder Information

Depending on how MedClock is configured, we may collect information relating to reminders, including:

• reminder names;
• medication names;
• reminder schedules;
• reminder dates;
• reminder times;
• one-off reminders;
• reminder categories;
• reminder instructions;
• reminder configuration;
• alarm behaviour;
• reminder history;
• acknowledgement history;
• missed reminder events;
• cancelled reminders;
• reminder grace periods;
• schedule version history;
• schedule synchronisation status.

Reminder information is used to:

• display reminders on the device;
• synchronise reminders between devices;
• notify authorised users;
• support historical reminder views;
• troubleshoot issues;
• maintain device reliability.

13. Reminder Acknowledgements

When a reminder is acknowledged, MedClock may record information including:

• acknowledgement time;
• acknowledgement status;
• reminder identifier;
• device identifier;
• associated notification events;
• elapsed time before acknowledgement.

Where enabled, authorised family members, carers or care organisations may be notified that a reminder has been acknowledged or that a reminder was not acknowledged within the configured grace period.

An acknowledgement indicates that the reminder was acknowledged through the device.

An acknowledgement does not confirm that medication was actually taken.

14. Fridge Monitor, Door Activity and Wellbeing Products

Certain MedClock wellbeing products, including Fridge Monitor and Door Activity Monitor devices, collect information relating to activity rather than medication reminders.

Depending on the product, this information may include:

• door open events;
• door close events;
• activity windows;
• activity totals;
• activity targets;
• activity deadlines;
• no-activity events;
• battery status;
• charging status;
• device health;
• connection status;
• linked notification contacts.

These products are designed to provide general wellbeing information.

They do not:

• use cameras;
• use microphones;
• record conversations;
• record video;
• determine whether someone is safe;
• determine whether someone has eaten;
• determine whether someone is awake;
• determine whether someone has fallen.

Door activity should be considered one source of information only and should not be relied upon as evidence of a person's wellbeing or safety.

15. Care Dashboard Information

Where MedClock products are used by retirement villages, aged care providers, hospitals, disability providers or other organisations, authorised staff may use the MedClock Care Dashboard.

Depending on the organisation and permissions assigned, the Care Dashboard may contain:

• organisation name;
• organisation identifier;
• home name;
• room identifiers;
• resident display names;
• linked devices;
• medication schedules;
• reminder history;
• acknowledgement history;
• missed reminder events;
• wellbeing activity;
• device health;
• battery status;
• staff accounts;
• staff permissions;
• audit logs;
• support requests;
• maintenance records.

Care organisations are responsible for ensuring they have appropriate authority or another lawful basis to enter and manage information relating to residents, clients or staff.

16. Notification Information

MedClock supports several forms of notification.

Depending on your settings, we may process:

• push notification tokens;
• device platform;
• notification preferences;
• notification history;
• notification delivery status;
• delivery timestamps;
• retry attempts;
• notification identifiers;
• SMS delivery information;
• email delivery information.

Notifications may include information such as:

• reminder acknowledgements;
• missed reminders;
• one-off reminders;
• device offline alerts;
• battery alerts;
• firmware update notifications;
• wellbeing activity notifications.

Push notification content may appear on a phone's lock screen depending on the settings chosen by the App User.

Users should consider whether notification previews are appropriate for their personal circumstances.

17. Website and Online Store Information

When you visit the MedClock website or purchase products through our online store, we may collect information including:

• your name;
• email address;
• phone number;
• billing address;
• shipping address;
• order history;
• products viewed;
• products purchased;
• shopping cart activity;
• payment status;
• customer support enquiries;
• website activity;
• browser information;
• operating system;
• IP address;
• referral information;
• cookies;
• analytics information.

Payments are generally processed through Shopify or other authorised payment providers.

We do not intentionally collect or store full payment card numbers unless such storage is specifically provided through a compliant payment platform.

18. Purchase and Subscription Information

Where applicable, we may collect:

• Shopify order identifiers;
• purchase history;
• warranty information;
• subscription status;
• Premium entitlement;
• App Store purchase verification;
• Google Play purchase verification;
• purchase timestamps;
• transaction references;
• linked devices.

Payment information is primarily handled by Shopify, Apple, Google or their authorised payment providers.

We receive only the information reasonably necessary to verify purchases, fulfil orders and provide customer support.

19. Support and Feedback Information

When you contact MedClock, we may collect:

• your name;
• email address;
• phone number;
• support requests;
• customer feedback;
• device information;
• firmware version;
• photographs or screenshots you voluntarily provide;
• diagnostic information relating to reported issues;
• communication history.

We use this information to investigate issues, improve our products and provide customer support.

20. How We Collect Information

We collect personal information in a variety of ways depending on how you interact with MedClock.

Information may be collected when you:

• purchase a MedClock product;
• create an account;
• register a device;
• install or use the MedClock mobile application;
• configure a MedClock device;
• pair a device using Bluetooth;
• connect a device to Wi-Fi;
• add medication reminders;
• create one-off reminders;
• invite a family member or carer;
• link a device to another account;
• use the Care Dashboard;
• acknowledge reminders;
• receive notifications;
• contact customer support;
• submit feedback;
• complete surveys;
• request warranty support;
• subscribe to marketing communications;
• visit our website; or
• otherwise communicate with us.

We may also receive information from third parties where necessary to provide our services, including payment providers, app stores, notification providers and organisations authorised by you.

We aim to collect only the information reasonably necessary to operate MedClock and provide the services you request.

21. Why We Collect and Use Information

We use personal information to provide safe, reliable and effective MedClock services.

Depending on how you use MedClock, we may use your information to:

Provide MedClock Services

This includes:

• creating accounts;
• connecting devices;
• displaying reminder schedules;
• synchronising reminders;
• storing reminder settings;
• managing connected users;
• supporting wellbeing monitoring products;
• maintaining device health information.

Operate Connected Devices

We use device information to:

• connect devices to cloud services;
• maintain accurate time and reminder schedules;
• identify devices;
• monitor connectivity;
• monitor firmware versions;
• support troubleshooting;
• maintain reliability.

Deliver Notifications

We use notification information to:

• notify family members when reminders are acknowledged;
• notify authorised users of missed reminders;
• send battery alerts;
• send offline alerts;
• send wellbeing notifications;
• send service notifications;
• deliver push notifications;
• deliver SMS notifications;
• deliver email notifications.

Provide Customer Support

We may use information to:

• answer questions;
• investigate reported issues;
• diagnose technical faults;
• assist with setup;
• replace faulty products;
• manage warranties;
• provide ongoing support.

Improve MedClock

We continually improve our products and services.

Information may be used to:

• improve reliability;
• identify software defects;
• improve firmware;
• improve the mobile application;
• improve dashboards;
• improve website usability;
• improve customer support;
• develop new features.

Where practical, we may use de-identified or aggregated information for product improvement.

Maintain Security

We use information to:

• detect suspicious activity;
• prevent fraud;
• prevent unauthorised access;
• secure accounts;
• investigate abuse;
• protect connected devices;
• monitor service health;
• maintain audit records.

Meet Legal Obligations

We may use personal information where required to:

• comply with Australian law;
• respond to lawful requests;
• resolve disputes;
• enforce our Terms of Service;
• protect the rights, safety and property of VEXIAN, our customers or others.

22. Health Information

Some information processed by MedClock may be health information or sensitive information under Australian privacy law.

Examples include:

• medication names;
• medication schedules;
• medication reminder history;
• acknowledgement history;
• missed reminder history;
• reminder notes;
• care information entered by authorised users;
• wellbeing information generated through MedClock products.

We understand that health information requires additional protection.

Accordingly, we seek to:

• collect only the information reasonably necessary;
• limit access to authorised users;
• protect health information using appropriate security measures;
• disclose health information only where authorised or otherwise permitted by law.

23. Consent

By using MedClock products or services, you acknowledge that information may be collected, used and disclosed as described in this Privacy Policy.

Where you provide information relating to another person, such as:

• a parent;
• grandparent;
• spouse;
• resident;
• client;
• patient;
• care recipient;

you represent that you have appropriate authority, consent or another lawful basis for providing that information.

Care organisations are responsible for ensuring they have lawful authority to enter and manage information relating to residents, clients and staff.

24. Family Members, Carers and Authorised Users

One of MedClock's primary functions is enabling authorised people to support another person's medication routine.

Depending on the permissions granted and the products being used, authorised family members, carers or staff may be able to access information including:

• user display names;
• device names;
• reminder schedules;
• reminder names;
• acknowledgement history;
• missed reminder events;
• notification history;
• one-off reminders;
• battery status;
• online or offline status;
• firmware status;
• wellbeing activity information.

Different users may have different permissions.

Not every authorised user will necessarily see all available information.

Permissions depend on:

• product type;
• app settings;
• dashboard settings;
• organisation settings;
• future software updates.

25. When We Share Information

We do not sell personal information.

We share information only where reasonably necessary to:

• provide MedClock services;
• connect authorised users;
• operate our products;
• process purchases;
• deliver notifications;
• provide customer support;
• comply with legal obligations;
• protect our services.

26. Sharing with Family Members and Carers

Where a user links another person to their MedClock account, we may share relevant information with those authorised users.

This may include:

• reminder names;
• reminder schedules;
• reminder acknowledgements;
• missed reminder alerts;
• device health;
• battery status;
• wellbeing activity;
• one-off reminders;
• notification history.

It is the responsibility of the person linking another user to ensure they have appropriate authority to do so.

27. Sharing with Care Organisations

Where MedClock products are used within retirement villages, hospitals, aged care providers, disability organisations or similar organisations, authorised staff may access information reasonably necessary to perform their role.

Depending on permissions, this may include:

• resident display names;
• room identifiers;
• medication reminders;
• reminder history;
• acknowledgement history;
• wellbeing activity;
• device health;
• audit history;
• support information.

Care organisations remain responsible for complying with their own privacy obligations in relation to information they enter into MedClock systems.

28. Cloud Infrastructure

MedClock uses cloud infrastructure to operate connected services.

This may include services provided by Cloudflare and other reputable infrastructure providers.

These services may process information necessary to:

• operate APIs;
• store application data;
• deliver firmware updates;
• maintain databases;
• route internet traffic;
• improve security;
• monitor system health;
• prevent abuse;
• improve reliability.

Cloud infrastructure providers process information on our behalf in accordance with applicable agreements and security requirements.

29. Shopify and Commerce Providers

Our online store operates using Shopify.

Shopify and associated providers may process information including:

• customer information;
• order information;
• payment status;
• shipping information;
• fraud prevention information;
• website activity;
• checkout information.

Shopify's handling of personal information is also governed by Shopify's own privacy documentation.

30. Apple and Google

If you use a MedClock mobile application, Apple and Google may process information relating to:

• application downloads;
• software updates;
• purchase verification;
• push notification delivery;
• app store services;
• operating system services.

Apple and Google each maintain their own privacy policies governing the information they process.

31. Push Notification Services

To deliver notifications to authorised App Users, MedClock may use third-party push notification services, including:

• Apple Push Notification service (APNs);
• Firebase Cloud Messaging (FCM);
• Expo Push Services (where applicable); or
• similar notification providers.

These providers may process information necessary to deliver notifications, including:

• push notification tokens;
• device platform (Android or iOS);
• device identifiers used for notification delivery;
• notification routing information;
• notification delivery status;
• message identifiers;
• timestamps.

Push notification providers do not determine who receives notifications. Notification recipients are determined by the permissions and settings configured by authorised App Users.

Because notifications may appear on a phone's lock screen, App Users should consider whether notification previews are appropriate for their circumstances. Notification previews can usually be managed through the operating system settings of the phone.

32. SMS Providers

Where SMS notifications are enabled, MedClock may use third-party SMS providers to deliver text messages.

Depending on the notification being sent, these providers may process:

• recipient phone numbers;
• SMS message content;
• message identifiers;
• delivery status;
• timestamps;
• provider reference numbers;
• delivery failures.

SMS messages may contain reminder information, missed reminder alerts or other service-related information depending on the notification settings chosen by authorised users.

SMS delivery depends on the availability and operation of mobile telecommunications networks and third-party providers. We cannot guarantee delivery times or successful delivery of every SMS.

33. Email Providers

We may use third-party email providers, including Resend or similar services, to send:

• account verification emails;
• password reset emails;
• pairing emails;
• support communications;
• purchase confirmations;
• firmware notifications;
• service announcements;
• warranty information;
• important account notices.

Email providers may process:

• email addresses;
• sender information;
• email subject lines;
• email content;
• delivery information;
• delivery failures;
• timestamps.

34. Website Analytics and Cookies

Our website uses cookies and similar technologies to improve functionality and understand how visitors use our website.

Cookies are small text files placed on your device when you visit a website.

Depending on the services enabled, cookies may be used to:

• keep you logged in;
• remember preferences;
• maintain shopping cart information;
• measure website performance;
• understand which pages are most useful;
• improve navigation;
• improve customer experience;
• detect fraudulent activity.

35. Analytics

We may use analytics services to understand how visitors interact with our website and products.

Analytics information may include:

• pages visited;
• time spent on pages;
• referring websites;
• browser type;
• operating system;
• approximate location;
• device type;
• website interactions;
• conversion information.

Where practical, we configure analytics services to minimise unnecessary collection of personal information.

Analytics information helps us improve:

• website performance;
• customer experience;
• product information;
• support resources;
• advertising effectiveness.

36. Advertising and Marketing

We may use advertising and marketing platforms to understand the effectiveness of our advertising campaigns.

These services may include platforms such as:

• Google Ads;
• Meta (Facebook and Instagram);
• Shopify marketing services; and
• similar advertising providers.

Information may be used to:

• measure advertising performance;
• understand which campaigns lead to purchases;
• improve future advertising;
• prevent advertising fraud;
• limit repeated advertisements.

Where required by law, we will obtain consent before using certain advertising technologies.

You may also be able to control personalised advertising through your browser, operating system or advertising platform settings.

37. International Data Processing

Some third-party service providers used by MedClock operate internationally.

As a result, personal information may be processed or stored in countries outside Australia.

Depending on the providers used, this may include countries such as:

• the United States;
• Singapore;
• members of the European Union;
• and other jurisdictions where those providers operate infrastructure.

Examples of providers that may process information internationally include:

• Cloudflare;
• Shopify;
• Google;
• Apple;
• Firebase;
• email providers;
• SMS providers;
• analytics providers.

Where reasonably practical, we select reputable providers that maintain appropriate security and privacy standards.

38. Security

Protecting customer information is extremely important to us.

We take reasonable technical, organisational and administrative measures designed to protect personal information against:

• unauthorised access;
• unauthorised disclosure;
• misuse;
• interference;
• modification;
• accidental loss;
• destruction.

Depending on the service, these measures may include:

• encrypted communications;
• HTTPS and TLS encryption;
• password hashing;
• authentication controls;
• role-based access controls;
• audit logging;
• secure cloud infrastructure;
• API authentication;
• device authentication;
• network monitoring;
• rate limiting;
• security monitoring;
• software updates;
• firmware updates;
• restricted administrative access.

Despite these safeguards, no internet-connected service, mobile application, cloud platform, email system, SMS service or electronic storage system can be guaranteed to be completely secure.

Users should also help protect their information by:

• choosing strong passwords;
• enabling additional security features where available;
• keeping account credentials confidential;
• securing their mobile devices;
• securing home Wi-Fi networks;
• installing software updates promptly.

39. Data Retention

We retain personal information only for as long as reasonably necessary to:

• provide MedClock services;
• maintain connected devices;
• support customer accounts;
• provide warranty services;
• maintain security;
• investigate incidents;
• comply with legal obligations;
• satisfy taxation and accounting requirements;
• resolve disputes;
• enforce our legal rights.

Retention periods vary depending on the type of information involved.

When personal information is no longer reasonably required, we may:

• securely delete it;
• de-identify it;
• archive it where legally required.

Backup copies may continue to exist for a limited period before being securely overwritten as part of normal backup management processes.

40. Your Privacy Rights

Subject to applicable law, you may have rights to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of information;
• request restriction of certain processing activities;
• withdraw consent where applicable;
• object to certain processing activities;
• request a copy of information held about you;
• make a privacy complaint.

These rights may not apply in every circumstance.

For example, we may be unable to delete information where retention is required by law or where deletion would adversely affect another person's privacy or the operation of a care organisation.

40A. Your Choices

We believe you should have meaningful control over your personal information. Depending on the MedClock products and services you use, you may be able to:

• update your account information;
• change your password;
• change your notification preferences;
• choose which notifications you receive;
• add or remove authorised family members or carers;
• link or unlink MedClock devices from your account;
• update medication reminders and schedules (where supported);
• remove one-off reminders;
• disconnect devices from cloud services;
• opt out of marketing communications;
• request access to your personal information;
• request correction of inaccurate information;
• request deletion of your account or personal information, where appropriate.

Some information may continue to be retained where required by law, for security purposes, to resolve disputes, to comply with legal obligations or to maintain the integrity of our systems.

If your MedClock device or account is managed by a care organisation, retirement village, hospital, disability provider or another organisation, some changes may need to be requested through that organisation rather than directly through MedClock.

If you need assistance managing your account, devices or privacy settings, please contact us using the details provided in the Contact Us section of this Privacy Policy.

 

41. Access Requests

You may request access to personal information we hold about you.

Before providing access, we may request sufficient information to verify your identity.

In limited circumstances permitted by law, we may refuse access, including where providing access would:

• unreasonably affect another person's privacy;
• compromise security;
• prejudice legal proceedings;
• reveal commercially sensitive information;
• otherwise be restricted by law.

42. Correction Requests

If you believe information we hold about you is inaccurate, incomplete or out of date, you may request that it be corrected.

Where appropriate, we will update our records within a reasonable period.

Where information has been entered by a care organisation, we may direct you to that organisation to request the correction.

43. Deletion Requests

You may request deletion of your personal information where appropriate.

Deletion requests will be considered in accordance with applicable law and our legal obligations.

Some information may need to be retained for:

• warranty purposes;
• fraud prevention;
• audit records;
• dispute resolution;
• legal compliance;
• backup systems for a limited period.

Where complete deletion is not possible, we may instead restrict access or de-identify information where appropriate.

44. Marketing Communications

Where permitted by law, we may send you information about:

• new MedClock products;
• software updates;
• firmware updates;
• product improvements;
• educational content;
• promotions;
• special offers;
• surveys;
• events;
• newsletters.

You may unsubscribe from marketing communications at any time by:

• using the unsubscribe link included in our emails;
• adjusting your communication preferences where available; or
• contacting us directly.

Even if you opt out of marketing communications, we may still send important service-related communications, including:

• order confirmations;
• warranty information;
• security notices;
• account verification;
• password reset emails;
• firmware notifications;
• service interruptions;
• important product safety information;
• changes to our legal terms or Privacy Policy.

45. Third-Party Websites

Our website, mobile applications or communications may contain links to third-party websites or services.

These websites operate independently from MedClock and have their own privacy policies.

We are not responsible for:

• the privacy practices of third-party websites;
• information collected by third parties after you leave MedClock services;
• the content or security of external websites.

We encourage you to review the privacy policies of any third-party websites you visit.

46. Children's Privacy

MedClock products are designed primarily for adults, carers, families, healthcare providers and organisations supporting older Australians.

Our services are not intended to be used directly by children without the involvement of a parent, guardian or authorised organisation.

We do not knowingly collect personal information directly from children where we are required to obtain parental or guardian consent.

Where information about a child is entered into MedClock by an authorised parent, guardian or organisation, that person is responsible for ensuring they have the necessary authority to provide the information.

If you believe a child has provided personal information to us without appropriate authority, please contact us so we can investigate and, where appropriate, remove that information.

47. Notifiable Data Breaches

VEXIAN takes data security seriously and has procedures designed to identify, investigate and respond to suspected security incidents.

If we become aware of a data breach involving personal information, we will assess the incident in accordance with the Privacy Act 1988 (Cth) and the Notifiable Data Breaches (NDB) Scheme.

Where required by law, we will notify:

• affected individuals; and
• the Office of the Australian Information Commissioner (OAIC).

Notifications will generally describe:

• the nature of the breach;
• the types of information involved;
• recommended steps individuals can take to reduce potential harm;
• actions taken by VEXIAN in response.

Not every security incident is an eligible data breach requiring notification. Each incident is assessed individually in accordance with applicable legislation.

48. Privacy Complaints

If you believe that we have breached your privacy or mishandled your personal information, we encourage you to contact us first so we have the opportunity to investigate and resolve your concerns.

When making a privacy complaint, please provide enough information for us to understand:

• your identity;
• the product or service involved;
• the nature of your concern;
• any relevant dates or supporting information.

We aim to acknowledge privacy complaints promptly and investigate them within a reasonable period.

Where additional information is required, we may contact you before completing our investigation.

49. Office of the Australian Information Commissioner

If you are not satisfied with our response to your privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC).

The OAIC is Australia's independent regulator responsible for privacy and information handling under the Privacy Act.

Further information about privacy rights and complaints is available from:

Office of the Australian Information Commissioner

Website:
https://www.oaic.gov.au

The OAIC may request that you first attempt to resolve your complaint directly with us before commencing a formal investigation.

50. Changes to this Privacy Policy

Technology, legislation and MedClock services continue to evolve.

We may update this Privacy Policy from time to time to reflect:

• new products;
• new services;
• new software features;
• firmware updates;
• changes to Australian law;
• changes to our business operations;
• changes to third-party service providers;
• improvements to our privacy practices.

The latest version of this Privacy Policy will always be published on our website.

The "Last Updated" date at the beginning of this document indicates when the current version became effective.

Where changes are significant, we may also notify users through:

• the MedClock mobile application;
• email;
• our website; or
• other appropriate communication channels.

Your continued use of MedClock products and services after an updated Privacy Policy becomes effective indicates your acceptance of the revised policy, unless applicable law requires additional consent.

51. Contact Us

If you have questions about this Privacy Policy or wish to:

• access your personal information;
• correct inaccurate information;
• request deletion of your information;
• withdraw consent where applicable;
• make a privacy complaint; or
• ask a question about how MedClock handles personal information,

please contact us using the details below.

VEXIAN PTY LTD
Trading as MedClock

Website:
https://medclock.com.au

Email:
support@medclock.com.au

Mailing Address:
[Insert your business postal address]

We aim to respond to privacy enquiries within a reasonable period and may request additional information to verify your identity before processing certain requests.

52. Plain English Summary

We know that privacy policies can be long and difficult to read, so here is a simple summary of how MedClock handles your information.

MedClock collects information needed to operate connected medication reminder devices, wellbeing monitoring products, the MedClock mobile application, the Care Dashboard and related services.

Depending on the products you use, this may include your account details, reminder schedules, device information, notification preferences and, where applicable, medication information.

Medication information may be sensitive health information under Australian privacy law, and we take additional care when handling it.

We use your information to:

• operate MedClock devices;
• synchronise reminder schedules;
• deliver notifications;
• support family members and carers;
• provide customer support;
• improve reliability;
• maintain security;
• comply with legal obligations.

We do not sell your personal information.

We share information only where reasonably necessary to operate MedClock or where required or permitted by law.

Depending on your permissions, authorised family members, carers or care organisations may be able to view information such as reminder schedules, acknowledgement history, device status or wellbeing activity.

Your Wi-Fi password is intended to remain stored locally on your MedClock device and is not intentionally uploaded to VEXIAN's cloud systems.

MedClock uses reputable service providers to help operate our services, including cloud infrastructure, notification services, payment providers and website platforms.

Although we take reasonable steps to protect your information, no internet-connected service can guarantee absolute security.

If you have questions about your privacy or would like to exercise your privacy rights, please contact us using the details provided in this Privacy Policy.

53. Important Disclaimer

MedClock is a reminder, communication and wellbeing support platform.

Unless expressly stated otherwise, MedClock products:

• are not emergency response systems;
• are not medical devices unless specifically approved as such;
• do not provide medical advice;
• do not replace healthcare professionals;
• do not guarantee medication compliance;
• do not detect every emergency situation;
• do not guarantee that notifications will always be delivered.

Users, carers and care organisations remain responsible for ensuring medications are taken correctly and for obtaining appropriate medical advice whenever required.

© VEXIAN PTY LTD. All rights reserved.