1. Summary of key points

This Privacy Policy applies to The Oasis Adelaide (ABN: 25 183 761 883) We believe in being transparent about how we handle your Personal Information, so have summarised the key features of our Privacy Policy in this section. Our full policy is set out in detail below. Consent and opting-out When you provide us with and consent to our use of your Personal Information (for example, by agreeing to our terms and conditions), you consent to our collection and use of your Personal Information (which is information about you which identifies you, or which can be used to reasonably identify you) in accordance with this Privacy Policy. You can withdraw your consent at any time by contacting us.

If you do not provide your consent, or if you withdraw your consent to our use of your Personal Information, it may mean we are unable to provide you with the same services, offers that we would otherwise be able to provide. What Personal Information we collect The Personal Information we collect about you may include your name, contact details, medical information and billing information. How we collect your Personal Information We collect Personal Information about you directly from you or by your use of our websites or mobile applications. How we use your Personal Information Our policy is to use your Personal Information to deliver our services to you and to improve our services to you. How and where we store your Personal Information We take commercially reasonable steps to secure your Personal Information from unauthorised access. Accessing, correcting, or deleting your Personal Information You can request access to, correction, or deletion of your Personal Information or withdraw your consent to our use of your Personal Information by contacting us a admin@the-oasis.com.au.

2. This Privacy Policy and your consent

This Privacy Policy explains how we collect and handle your Personal Information in Australia and New Zealand. Personal Information is information about you which identifies you or which can be used to reasonably identify you. When you consent to us using your Personal Information, you agree that we may use your Personal Information in accordance with this policy. You can withdraw your consent at any time by contacting us.

If you do not provide consent, or if you withdraw your consent to our use of your Personal Information, it may mean we are unable to provide you with the same services or the same level of service that we would otherwise be able to provide.

3. Personal Information we collect

The types of Personal Information we collect depend on what services you use and products you acquire. It may include:

• Identifying information, such as your name, gender and date of birth

• Medical information such as Medicare and private health information

• Contact information, such as your postal address, email address and telephone numbers

• Social media handles and other social media profile information that you make available to us or to the public

• Billing and financial information, such as credit card, bank account or other payment details

• Details of any products or services that you purchase from us or that we provide to you; Records of our communications with you, including any messages or enquiries you send us (either through the website or through other means)

• Information about how you access and use our websites or mobile applications, such as your IP address and internet service provider, the web page you visit us from, web browser, navigation patterns on our websites, device identity and location, operating system, or device configuration

• Additional information, including your image, collected via Closed Circuit Television (CCTV) systems used at venues we operate.

4. How Personal Information is collected and held

4.1 Personal Information We collect Personal Information about you:

• when we receive referrals from general practitioners

• when you fill in forms on our website or at one our venue

• by tracking your use of our websites or mobile applications through our CCTV

4.2 CCTV You may be recorded on CCTV cameras as part of your sleep study. This is to comply with the Australasian Sleep Association accreditation guidelines to fully assess all parasomnias and sleep disorders. Video is recorded only during the sleep study itself and will be deleted after your sleep study has been reported by your admitting sleep physician (unless they specifically request for it to be retained for diagnostic purposes).

5. Purposes for which we use or disclose Personal Information

We use Personal Information that you provide to us:

• to help us provide you with expert medical care

• to help you access the services or acquire the goods The Oasis Adelaide provides

• to improve our service

• comply with legal or regulatory obligations applicable to the payment processing services they provide, including applicable anti-money laundering and identity verification obligations, or to assist law enforcement agencies by responding to requests for information

• analyse, develop and improve products and services

• perform data analysis; and

• de-identify and aggregate data for the purpose of statistical analysis for clinical research

• to answer your feedback, queries and request

• to comply with our legal and regulatory obligations in respect of your Personal Information (including your sensitive information) under any law, regulation or Federal or State government order or direction including in respect of a pandemic, epidemic (including COVID-19) or a state of emergency

• to develop and improve our existing products and services and create new products and services

• to monitor use of our products and services (including our websites)

• to improve customer service and our customer relationships

• to assess, maintain, upgrade and improve our products and services

• to carry out education and training programs for our staff

• to manage and resolve any legal or commercial complaints or issues

• to carry out planning and forecasting activities and other internal business processes

6. People to whom we disclose Personal Information

We will only disclose your Personal Information to third parties in compliance with this Privacy Policy. We may share Personal Information about you with: Medical and allied health practitioners authorized by you to manage your health and wellbeing

• your representatives, advisers and others you have authorised to interact with us on your behalf

• our staff who need the information to discharge their duties

• our business partners, agents and service providers (including information technology service providers, data hosting and processing companies,, fraud detection, prevention and security service providers)

• government and law enforcement bodies and authorities who ask us to disclose that information, or to other people as required to comply with our legal and regulatory obligations in respect of your Personal Information (including your sensitive information) under any law, regulation or Federal or State government order or direction including in respect of a pandemic, epidemic (including COVID-19) or a state of emergency.

7. Storage and security of your Personal Information

We generally store the Personal Information that we collect in electronic databases, some of which may be held on our behalf by third party data storage providers. We may also, at times, keep hard copy records of Personal Information in physical storage facilities. We use a range of physical and technical security processes and procedures to protect the confidentiality and security of the Personal Information that we hold, and we update these from time to time to address new and emerging security threats.

8. Access to and correction of Personal Information

You have a right to access and correct most of the Personal Information we hold about you. If you wish to access or correct your Personal Information, please contact us via the details provided in the “contact us” section below. To protect the integrity and security of the Personal Information we hold, we may ask that you follow a defined access procedure, which may include steps to verify your identity. In certain cases we may charge you an administration fee for providing you with access to the information you have asked for, but we will inform you of this before proceeding. There may be cases where we are unable to provide the information you request, such as where it would interfere with the privacy of others or result in a breach of confidentiality. In these cases we will let you know why we cannot comply with your request.

9. Changes to this policy

We may make changes to this policy from time to time, to take into account changes to our standard practices and procedures or where necessary to comply with new laws and regulations. The latest version of this policy will always be available on our website.

10. Complaints

We try to meet the highest standards in order to protect your privacy. However, if you are concerned about the way in which we are managing your Personal Information and think we may have breached the Australian Privacy Principles or any other relevant obligation, please contact us using the contact details set out below. Complaints must be lodged in writing. We will deal with the matter within a reasonable time, and will keep you informed of the progress of our investigation. If we have not responded to you within a reasonable time or if you feel that your complaint has not been resolved satisfactorily, you can contact us to discuss your concerns. In respect of Personal Information we collect in Australia, you are also entitled to make a complaint to the Office of the Australian Information Commissioner (OAIC). Contact details can be found at the OAIC website: www.oaic.gov.au.

11. Contact us

We take the privacy of your Personal Information seriously. If you have any questions, comments, or complaints in relation to this Privacy Policy or our handling of your Personal Information, or if you wish to access or correct your Personal Information, please contact us: By email: admin@the-oasis.com.au