Privacy Policy

Operated by Onus Pty Ltd

Effective date: 19 February 2026

1. Who we are

This Privacy Policy describes how Onus Pty Ltd (we, us, our) collects, uses, stores, and shares your personal information when you use the Beyond Diagnosis platform and podcast. We aim to explain our practices in clear, straightforward language so you know how your information is handled.

Website: beyonddiagnosis.app

Contact: rita@beyonddiagnosis.app

Location: Sydney, NSW, Australia

We take your privacy seriously. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you are located in the European Union or the United Kingdom, we also comply with the EU General Data Protection Regulation (GDPR) and UK GDPR.

2. Principles of data processing

We collect and process personal information only where there is a lawful basis, including where:

You have provided consent

processing is necessary to perform a contract or take steps at your request before entering a contract

processing is required to comply with a legal obligation

processing is necessary for our legitimate interests, and those interests are not overridden by your rights

We only keep your personal information for as long as we need it to provide our services to you or as required by law. Once we no longer need it, we take steps to delete or de-identify it.

3. What personal information do we collect

3.1 Information you provide

name and email address

account login details

communications with us

Practitioner profile information, including biography, credentials, modalities, areas of support, availability, links, and profile images

practitioner subscription and billing metadata

3.2 Booking-related information

When booking requests or scheduling features are enabled, we may collect booking metadata, such as the selected practitioner and booking status. Practitioner–client communications and services occur outside the platform.

3.3 Technical and usage information

We may collect IP address, browser type, device information, pages visited, time and date of access, referrer URL, and usage behaviour for security, performance, and analytics purposes.

4. Sensitive information

We do not collect sensitive health information, and we encourage you not to share it on our platform. If you choose to provide sensitive information, we will treat it carefully in accordance with this Privacy Policy and the law.

5. How we use personal information

We use personal information to:

Provide and operate the platform

create and manage user and practitioner accounts

facilitate directory listings and booking administration

process practitioner subscriptions and manage billing

provide support and respond to enquiries

send service related communications

improve, monitor, and secure the platform

comply with legal and regulatory obligations

enforce our Terms of Use and Practitioner Agreement

6. Cookies and tracking

We use cookies and similar technologies to provide essential website functionality, security, analytics, and marketing, where enabled and consented. A cookie consent tool may be used to manage preferences. You can control cookies via browser settings, noting that disabling essential cookies may affect site functionality.

7. Third-party services

Wix (hosting, CMS, internal email)

We use Wix.com Ltd to host and operate beyonddiagnosis.app, manage content, and send operational emails. Wix processes personal information to provide these services.

Stripe (payments)

Practitioner subscription payments are processed by Stripe. We receive payment confirmations and subscription metadata, but do not store full payment card details.

YouTube and podcast platforms

Our site may link to or embed content from third-party platforms such as YouTube and podcast providers. These platforms collect data in accordance with their own privacy policies.

Analytics and communications tools

We may use analytics and email tools to operate and improve the platform. These providers process data in accordance with contractual confidentiality and security obligations.

8. Overseas disclosures and cross-border transfers

Personal information may be stored or processed outside Australia, including in the United States, the United Kingdom, or the European Union. We take reasonable steps to ensure that overseas recipients handle personal information in accordance with the Australian Privacy Principles and applicable data protection laws.

9. Security

We do our best to keep your personal information safe by using technical and organisational safeguards. However, no online system is completely secure. Please help us keep your account safe by protecting your login details.

10. Data breach notification

If there’s ever a data breach that could seriously affect you, we’ll comply with the law by notifying you and informing the relevant authorities as required.

11. Your rights

Under Australian law, you may request access to and correction of your personal information.

Where applicable under GDPR and UK GDPR, you may also have rights to deletion, restriction, objection, portability, and withdrawal of consent.

Requests can be made to rita@beyonddiagnosis.app. We will respond within a reasonable period.

12. Complaints

If you have concerns about how we handle personal information, please contact us first. You may also complain to the Office of the Australian Information Commissioner.

13. Changes to this policy

We may occasionally update this Privacy Policy. If we make changes, they’ll take effect once we post the new version on our website.