Cypress Medical

Last updated: 17 January 2026

Cypress Medical Pty Ltd (ABN: 81 685 594 325) operates this website and any associated online services (together, the Website).

Cypress Medical is committed to protecting your privacy and handling personal information in a transparent and responsible way.

This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, it also addresses obligations under the EU General Data Protection Regulation (GDPR).

You may contact us at privacy@cypressmedical.com.au to discuss matters covered by this Privacy Policy.

Personal information

In this Privacy Policy, personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Collection of personal information

You may browse parts of the Website without providing personal information.

We may collect personal information when you:

• place an order or create an account,
• submit an enquiry or contact form,
• subscribe to updates or communications,
• interact with us via email, phone, or social media,
• use features of the Website that require authentication.

The types of personal information we may collect include:

• name,
• email address,
• phone number,
• delivery and billing address,
• account credentials,
• order and transaction details,
• communications with us.

We collect personal information only where reasonably necessary for our business operations.

If you provide personal information about another person, you confirm that you are authorised to do so.

Use of personal information

We use personal information to:

• process and fulfil orders,
• provide customer support,
• manage accounts and payments,
• communicate about orders, updates, or service issues,
• improve our Website and services,
• comply with legal and regulatory obligations.

We do not use personal information for purposes unrelated to the reason it was collected without consent or legal authority.

Disclosure of personal information

We may disclose personal information to:

• logistics, fulfilment, and drop-ship suppliers,
• payment processors and IT service providers,
• analytics and website service providers,
• professional advisers where required,
• regulators or authorities where required by law.

We take reasonable steps to ensure third parties handle personal information in accordance with applicable privacy laws.

Some service providers may be located outside Australia. Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place.

Security of personal information

We take reasonable technical and organisational measures to protect personal information from misuse, loss, unauthorised access, modification, or disclosure.

No method of transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

If we become aware of a data breach that is likely to result in serious harm, we will comply with applicable notification requirements.

Cookies and website analytics

Our Website uses cookies and similar technologies to:

• enable core functionality,
• analyse website usage and performance,
• improve user experience.

Cookies may be set by us or by third-party service providers.

You can manage or disable cookies through your browser settings. Disabling cookies may affect website functionality.

Details about specific tools and cookies may be provided through our cookie consent banner or updated from time to time.

Analytics and third-party tools

We may use analytics services to understand how users interact with the Website. These services collect information in aggregated or de-identified form and do not identify individual users directly.

Data collected may be processed outside Australia. Where applicable, safeguards are applied to protect personal information.

Marketing communications

We may send you service-related communications or, where permitted, marketing communications.

You may opt out of marketing communications at any time using the unsubscribe mechanism or by contacting us.

Access and correction

You may request access to, or correction of, personal information we hold about you by contacting us.

We may need to verify your identity before responding.

GDPR rights (where applicable)

If you are located in the European Union, you may have additional rights including:

• access to your personal data,
• correction or erasure,
• restriction or objection to processing,
• data portability.

Requests can be made using the contact details below.

Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Children’s privacy

The Website is not directed to children under 13 years of age. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be published on this Website.

Continued use of the Website indicates acceptance of the updated policy.

Contact us

If you have questions or concerns about this Privacy Policy or how we handle personal information, please contact us at privacy@cypressmedical.com.au