Privacy Policy

Effective date: 3 September 2026

1. About this policy

Fit Test Australia Pty Ltd (ABN 70 658 559 721) (“Fit Test Australia”, “FTA”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you:

• visit www.fta.net.au or use our online services;

• contact or communicate with us;

• book or receive our testing, training or consultancy services;

• purchase products from us;

• attend one of our clinics or a mobile workplace appointment; or

• otherwise interact with Fit Test Australia.

We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and any applicable state or territory health-records legislation.

2. The personal information we collect

The information we collect depends on how you interact with us and may include:

• your name, date of birth, contact details, address and preferred pronouns;

• identification, employer, occupation, workplace or educational institution details;

• appointment, booking, attendance and payment information;

• details supplied by an employer, university, placement provider or another person arranging services on your behalf;

• health and sensitive information relevant to the services we provide;

• information about your respiratory health, hearing, lung function, medical history, symptoms or workplace exposure, where relevant;

• facial measurements, respirator requirements, mask type, model and size;

• respirator fit-test measurements, results, pass or fail status, certificates and reports;

• audiometry, spirometry and hearing-protection fit-test information and results;

• records of training, consultations and communications with us;

• information contained in enquiries, feedback, complaints or job applications;

• transaction, delivery and order information relating to products purchased from us;

• website usage information, such as your IP address, browser, device type, referring page, pages viewed and cookie or analytics data; and

• any other information you choose to provide.

Payment information may be processed by our payment-service providers. We generally do not retain complete payment-card details.

3. How we collect information

We may collect personal information:

• directly from you through our website, booking forms, consent forms, questionnaires, telephone calls, emails, appointments and in-person testing;

• from an employer, university, placement provider, contractor or organisation arranging or paying for your service;

• from a parent, guardian, authorised representative or healthcare professional;

• from our booking, payment, ecommerce, website, communications and records-management providers;

• automatically when you use our website, through cookies and similar technologies; and

• from publicly available sources where lawful and appropriate.

Where someone books a service for you, we may ask that person to confirm that they are authorised to provide your information. We may also obtain information directly from you before performing a test.

You may contact us anonymously or using a pseudonym when making a general enquiry. However, we normally need accurate identifying information to provide testing, issue reports or certificates, process purchases and meet workplace, professional or legal requirements.

4. Health and sensitive information

Health information is sensitive information under Australian privacy law. We collect health information only where it is reasonably necessary for our services and with your consent, or where collection is otherwise permitted or required by law.

Depending on the service, we may need to collect health information to:

• determine whether a test can safely and appropriately proceed;

• conduct respirator fit testing, audiometry, spirometry or hearing-protection fit testing;

• interpret, record and explain test results;

• recommend appropriate respiratory or hearing protection;

• issue reports, records, cards or certificates; and

• meet applicable workplace health and safety, professional or record-keeping obligations.

If required information is not provided, we may be unable to safely perform a test, provide a reliable result or issue the relevant report or certificate.

Our website and general information are not a substitute for individual medical advice. Where appropriate, we may recommend that you consult a suitably qualified healthcare professional.

5. Why we collect, use and disclose information

We may collect, hold, use and disclose personal information to:

• provide, administer and improve our services;

• manage bookings, cancellations and appointment reminders;

• verify identity and determine service suitability;

• perform testing and prepare results, reports, certificates and fit-test cards;

• communicate results and provide follow-up information;

• communicate with an employer, university or other organisation where you have authorised this or where it is otherwise lawful;

• provide quotes, respond to enquiries and manage customer relationships;

• process payments, orders, refunds and product deliveries;

• provide training, technical support and workplace services;

• maintain clinical, testing, business and compliance records;

• operate, secure, analyse and improve our website;

• prevent fraud, misuse and security incidents;

• manage complaints, disputes and legal claims;

• comply with laws, court orders and regulatory or professional requirements; and

• conduct marketing where you have consented or where otherwise permitted by law.

We will not use health information for direct marketing unless you have specifically consented. You may withdraw marketing consent at any time by using the unsubscribe option in a message or contacting us.

6. Employers, universities and group bookings

Services are sometimes arranged or paid for by an employer, university, placement provider or another organisation.

Before disclosing identifiable test results, reports or certificates to that organisation, we will obtain your consent or otherwise ensure that the disclosure is authorised or required by law. Depending on the arrangement and your consent, the information disclosed may include:

• your attendance;

• the date and type of test;

• the respirator make, model and size tested;

• your pass or fail status;

• your certificate, report or recommended retesting date; and

• other information necessary for workplace safety or placement compliance.

Where practicable, reports provided for administrative purposes will be limited to the information reasonably required. More detailed health information will not ordinarily be provided to an employer or other organisation without appropriate consent or legal authority.

7. When we disclose information

We may disclose personal information to:

• our employees, contractors and authorised testing personnel;

• organisations arranging or paying for a service, subject to your consent or other lawful authority;

• healthcare professionals where requested, authorised or reasonably necessary;

• website-hosting, booking, ecommerce, payment, communications, cloud-storage, IT-support, analytics and records-management providers;

• delivery companies and product suppliers where necessary to fulfil an order;

• professional advisers, insurers, auditors and accreditation bodies;

• government agencies, regulators, courts and law-enforcement bodies where required or authorised by law; and

• another party involved in a proposed or completed sale, transfer or restructuring of our business, subject to appropriate confidentiality and privacy protections.

We may also disclose information where reasonably necessary to prevent or lessen a serious threat to life, health or safety, or in another circumstance permitted by law.

We do not sell personal or health information.

8. Overseas disclosures

Some of our technology and service providers may store, process or access personal information outside Australia. This may include providers or support personnel located in countries such as the United States and other countries in which our service providers operate.

The countries involved may change when providers alter their infrastructure or subcontractors. Where required, we take reasonable steps to ensure overseas recipients handle personal information consistently with Australian privacy requirements.

By using our website or services, you acknowledge that overseas data processing may occur as described in this policy.

9. Website cookies and analytics

Our website may use cookies, pixels and similar technologies to:

• operate website features and remember preferences;

• maintain website security;

• understand how visitors use the website;

• measure marketing performance; and

• improve our services and website experience.

Some cookies may be provided by third-party services. You can restrict or delete cookies through your browser settings, although doing so may affect website functionality.

Links from our website to external websites or social-media services are governed by the privacy practices of those third parties. We are not responsible for their privacy practices.

10. Direct marketing

With your consent, or where permitted by law, we may send information about our services, products, training or business updates.

You may opt out at any time by:

• selecting the unsubscribe link in an electronic message;

• replying with an opt-out request; or

• contacting us using the details below.

We will process an opt-out request within a reasonable period. Opting out of marketing will not prevent us from sending service-related communications, such as appointment reminders, order updates or safety information.

11. Storage and security

We may hold personal information electronically or in physical records. We use reasonable administrative, technical and physical safeguards designed to protect information against loss, misuse, interference and unauthorised access, modification or disclosure.

These safeguards may include access controls, password protection, staff confidentiality obligations, secure systems, backups and appropriate disposal processes.

No internet transmission or storage system can be guaranteed to be completely secure. If a data breach occurs, we will investigate and respond in accordance with applicable law, including the Notifiable Data Breaches scheme where relevant.

12. Retention and disposal

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy legal, health-record, workplace safety, insurance, accreditation and business requirements.

Retention periods may vary depending on the type of record, the service provided, the individual’s age and the state or territory in which the service was delivered.

When information is no longer required, we will take reasonable steps to securely destroy it or permanently de-identify it, unless we are legally required or permitted to retain it.

13. Accessing or correcting your information

You may ask to access personal information we hold about you or request that inaccurate, incomplete, out-of-date, irrelevant or misleading information be corrected.

Please contact us using the details below. We may need to verify your identity before processing the request.

We will respond within a reasonable period. Access may be refused or limited where permitted by law, including where disclosure would unreasonably affect another person’s privacy or create a serious threat to health or safety. If we refuse a request, we will generally explain the reason and the available complaint options.

We do not ordinarily charge for making a request. We may charge a reasonable fee for providing access where permitted by law, but we will notify you beforehand.

14. Children and young people

Where a person is under 18, we will consider their maturity and capacity to consent. We may require consent from a parent or legal guardian where appropriate or required by law.

We will still take reasonable steps to explain the collection and handling of information to the young person in a way they can understand.

15. Privacy complaints

If you believe we have mishandled your personal information or breached your privacy rights, please contact our Privacy Officer using the details below.

Please include enough information for us to understand and investigate your concern. We will acknowledge the complaint and aim to provide a response within 30 days, although complex matters may require additional time. If more time is required, we will let you know.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au

• Telephone: 1300 363 992

You may also have the right to contact an applicable state or territory health-privacy regulator.

16. Changes to this policy

We may update this Privacy Policy when our practices, service providers or legal obligations change. The current version will be published on www.fta.net.au, with its effective date shown at the beginning.

17. Contact us

For privacy questions, access or correction requests, or complaints, contact:

Privacy Officer
Fit Test Australia Pty Ltd
ABN 70 658 559 721
Level 2, 65–71 Belmore Road
Randwick NSW 2031
Email: info@fta.net.au
Telephone: 0440 138 105
Website: www.fta.net.au