Privacy Policy
Privacy Policy
My Endo Physio Pty Ltd (ACN 701 316 225) Effective: 11 September 2026
1. About this policy
My Endo Physio provides endometriosis, pelvic-health and movement education through myendophysio.com, our storefront and communications. We are based in NSW, Australia, and are responsible for how we use your information (the “controller” where that term applies).
This policy covers our website, products, email and social-media interactions. For privacy questions, contact [email protected].
2. Information we collect
We collect information you provide, records generated when you use our services, and information from our service providers:
| Information | Why we use it |
|---|---|
| Name, email, country and confirmation you are 18 or over | Resources, accounts, access and communications |
| Order, billing and subscription records | Payments, receipts, renewals, cancellations, refunds and legal records |
| Enquiries, feedback and social-media interactions | Support, complaints and responding to comments |
| Consent and unsubscribe records | Respecting your choices |
| IP address, device/browser details and access/security logs | Running and protecting our services |
| Online identifiers, permitted page activity, referral and campaign details, with consent | Website analytics and advertising measurement |
| Email opens and link clicks linked to your subscriber record, with separate consent | Measuring and improving emails |
Stripe collects full card details directly. We receive transaction and limited payment-method details, not full card numbers or security codes.
You may enquire anonymously where practicable. Without information needed for a purchase or legal requirement, we may be unable to provide the requested service.
3. Health information
We do not ask for medical histories or symptom details, or infer a diagnosis from your interest in our content. Please avoid sending health details in enquiries or public comments.
Purchases and interactions may still reveal sensitive health information. We handle this only for lawful purposes and obtain specific consent where required. If you send health information we do not need and cannot lawfully keep, we delete or de-identify it where lawful and reasonable. Necessary records may be retained for your enquiry, a complaint or legal obligations.
We do not use health information for advertising or AI training. Further details appear in the Consumer Health Data Privacy Notice below.
4. Who receives information
Our authorised team, contractors and advisers receive information as needed. We may also disclose it as legally permitted or required, including during a business transfer subject to privacy protections.
| Provider | Purpose |
|---|---|
| Cloudflare | Website hosting, delivery and security |
| Stan Store | Checkout, orders and product access |
| Stripe | Payments, fraud prevention and refunds |
| Google Workspace | Business email and correspondence |
| MailerLite | Email delivery, subscriptions and optional engagement tracking |
| Google Analytics | Optional website analytics |
| Meta | Social-media interactions and optional Instagram advertising measurement through Meta Pixel |
Providers may also use information for their own payment, security or platform responsibilities, as explained in their privacy notices.
Overseas processing: Providers may process information outside Australia, including in the United States, India, Germany and the Netherlands.
We take reasonable steps to protect information sent overseas and use legally required transfer safeguards. Contact [email protected] for details or copies.
5. Marketing and tracking choices
Emails: Marketing requires opt-in and each email includes an unsubscribe link. We process opt-outs promptly within applicable deadlines. Necessary purchase, subscription and safety messages may continue. Unsubscribing does not cancel membership.
Essential technologies: We use technologies needed for security, checkout and requested access, including operational logs.
Optional website tracking: With your prior consent, Google Analytics measures website use and Meta Pixel measures and optimises Instagram advertising. These tools receive the permitted device, identifier and activity data described above. Meta may link it to your Meta account and use it under its own privacy terms.
Use “Privacy settings” on our website to accept, reject or change analytics and advertising choices separately. Optional tracking stays blocked until consent. The settings list the technologies, purposes, providers and durations. Refusing or withdrawing consent does not remove purchased access.
Optional email tracking: With separate consent, MailerLite uses pixels and tracked links to record opens and clicks against your subscriber record. You can receive marketing without this tracking. Withdraw tracking consent at [email protected]; unsubscribing also stops future marketing tracking.
Health-data limits: We exclude health information from Meta Pixel and Google Analytics, including revealing purchase details, URLs and events. We do not use these tools where prohibited information cannot be excluded. We do not upload customer lists to advertising platforms or create health-based advertising audiences.
US advertising rights: We do not exchange information for money, but advertising disclosures to Meta may qualify as “sale”, “sharing” or targeted advertising under applicable US laws. Exercise applicable opt-out rights through “Privacy settings” or our privacy email. We honour recognised signals such as Global Privacy Control where required.
6. Security and retention
We take reasonable steps to protect information and address suspected breaches, including notifications required by law.
We keep information while needed to provide services, resolve enquiries, respect consent and opt-outs, or meet legal requirements. We then delete or de-identify it. Accounting or applicable health-record obligations may require some records to be kept longer.
7. Adults and public content
Our products and email list are for adults aged 18 or over. If we identify an underage user, we restrict access and assess deletion or necessary retention.
Public comments can be seen or copied by others. Social platforms have their own privacy practices. We seek separate permission before using your feedback promotionally.
8. Rights and complaints
Contact [email protected] to request access, correction, deletion, withdrawal of consent or to complain. Depending on applicable law, you may also request portability or restriction, object to processing or exercise rights concerning significant automated decisions.
Right to object: Where applicable, you can object to processing based on legitimate interests. You can object to direct marketing at any time. Contact our privacy email or use the unsubscribe link for marketing emails.
We verify identity as needed, investigate complaints and respond within applicable legal deadlines. We explain any refusal, extension or appeal route. Any permitted access fee is explained in advance; corrections are free. Legal retention requirements may limit deletion. Withdrawing consent does not affect earlier lawful processing, and we explain any impact on services.
We do not make automated diagnoses or personal treatment/exercise decisions. Payment and access administration may be automated; Stripe conducts its own fraud checks.
Where an appeal is available, email our privacy contact identifying the decision. We respond within the legal deadline and explain further complaint options. We do not unlawfully discriminate for exercising privacy rights.
You may complain to the relevant regulator, including the OAIC, NSW IPC, NZ Privacy Commissioner, UK ICO, your EEA data-protection authority or applicable US regulator.
9. Updates
We update this policy as practices change and give material-change notices or obtain new consent where required.
Contact: My Endo Physio Pty Ltd · [email protected]
Consumer Health Data Privacy Notice
My Endo Physio Pty Ltd · Effective: 11th September 2026
This supplements our Privacy Policy where consumer-health-data laws apply, including Washington’s My Health My Data Act.
Information and sources: We may handle identifiers linked to pelvic-health/endometriosis purchases, subscriptions, access records, consented email engagement and unsolicited health correspondence. These come from you, your use of our services and our checkout, delivery and email providers. We do not request medical histories or infer diagnoses.
Purposes and recipients: We use necessary records to fulfil purchases and communications, manage payments/access, handle enquiries and meet legal obligations. With separate consent, we measure email engagement. Hosting, checkout, payment and communications providers listed above receive what they need for these purposes. We do not disclose consumer health data to affiliated companies of My Endo Physio, sell it, disclose it for advertising or use health-related geofencing. Additional handling requires notice and consent where required; this notice is not consent.
Your rights: Email [email protected] for applicable access, recipient-information, deletion or consent-withdrawal requests, or to appeal a refusal. We verify requests, meet legal deadlines and pass required deletion requests to recipients. We explain applicable exceptions and further complaint routes, including the Washington Attorney General. We do not unlawfully discriminate for exercising these rights.
Contact: My Endo Physio Pty Ltd · [email protected]