Legal
Last updated: August 2026 · Applies to optimastasis.com.au
Optima Stasis Pty Ltd (ACN 666 018 766 / ABN 18 666 018 766) trading as Optimastasis (we, us, our) is committed to protecting your personal information.
This Privacy Policy sets out how we collect, use, store, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and its Australian Privacy Principles (APPs), and the following state and territory legislation:
The above state and territory Health Privacy Principles and Privacy Principles are referred to in this Privacy Policy as the ‘HPPs’.
Optimastasis operates a digital platform through which customers can order patient-requested pathology testing services. Pathology services are performed by Healius Pathology Pty Ltd (ACN 007 190 043) and its associated brands, including QML Pathology, as our independent subcontractor (Healius). We are responsible for all customer-facing aspects of the service, including ordering, result delivery, and customer communications. Healius is responsible for specimen collection, analysis, and preparation of pathology test results.
This Privacy Policy applies to all personal information we collect through our website www.optimastasis.com.au, our platform, and through any other means by which you interact with us.
‘Personal information’ means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether the information is recorded in a material form or not.
Personal information includes ‘sensitive information’, which is a particular type of personal information. Sensitive information includes identifying health information about you, such as details of your health and medical history, and health services you have sought or received. Sensitive information also includes information about racial or ethnic origin, political opinions or associations, religious or philosophical beliefs, and sexual orientation or practices.
By creating an account, placing an order, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of your personal information as described in it. If you do not agree, please do not use our services.
This Privacy Policy forms an integral part of our Terms and Conditions.
Depending on how you interact with us, we may collect the following personal information:
The sensitive information we collect will primarily be health information. We collect health information because it is necessary to provide our platform services. The health information we collect includes:
We will only collect sensitive information, including health information, with your explicit consent. By placing an order for pathology services, you consent to us collecting and using your health information for the purposes described in this Privacy Policy.
We do not collect Medicare numbers or Individual Healthcare Identifiers (IHI). Our pathology services are not Medicare-rebatable or government-subsidised. We do not store your full payment card details — payment processing is handled securely by Stripe, our payment processor. We do not collect racial or ethnic origin, political opinions, religious beliefs, or criminal records unless you voluntarily provide such information.
We collect most information directly from you when you:
When you visit our website, we automatically collect certain technical data using cookies, tracking pixels, and similar technologies. This includes your IP address, browser and device information, pages visited, time spent on pages, and how you navigate the site. We use Google Analytics and Meta advertising tools (including Meta Pixel) for this purpose. See Section 9 (Cookies and Analytics) for more detail.
When you attend an Approved Pathology Collection Centre (ACC) and present your Request Form, Healius collects a specimen from you and conducts analysis. Healius then provides us with your pathology test results electronically. We receive those results and are responsible for delivering them to you securely through your account dashboard. Healius maintains patient records and retains title to those records. We encourage you to review the Healius privacy policy at https://www.qml.com.au/privacy.
We may receive limited information from Stripe (our payment processor) in connection with processing your payment. We do not receive your full card details from Stripe.
If you are person other than a user of our platform services, such as service providers, contractors and third parties we engage with, we will generally collect your personal information directly from you, and we may collect your personal information from third parties. For example, if you are a service provider we may collect information from your referees.
When we collect your personal information, we will as soon as is practicable take reasonable steps to notify you of the details of the collection (including notifying you through this Privacy Policy), such as the purposes for which the information was collected, the organisations (if any) to which the information will be disclosed, and also notify you that this Privacy Policy contains details on how you may access or correct your information, or raise any complaints.
The primary reason we collect your personal and health information is to provide our platform services and facilitate patient-requested pathology testing services. This includes:
Under our agreement with Healius, we are solely responsible for delivering your results to you and for all clinical follow-up. We use your personal and health information as necessary to fulfil these obligations, including counselling you about test results and managing any clinical response required.
Some pathology test results may identify a notifiable condition under Australian state or territory public health legislation. Where a test you have ordered is potentially notifiable, we will inform you before you place your order and obtain your consent. Where your results indicate a notifiable condition, Healius (as the performing laboratory) is legally required to report the result to the relevant state or territory health authority. This is a statutory requirement that cannot be opted out of.
We use your information to maintain and improve our website and platform, conduct analytics, detect and prevent fraud, respond to your inquiries, and comply with our legal obligations.
Where you have provided consent, we may use your contact details to send you marketing communications about our services, new test offerings, health content, and promotions. We will never use your health information or pathology test results for marketing purposes. You can opt out at any time — see Section 13.5.
If you are a person other than a user of our platform services, such as a service provider, contractor or other third party we engage with, we will collect your personal information to the extent necessary for our functions or activities, and to work, transact or engage with you.
Our platform provides result interpretation and health scoring based on your pathology results. This content is prepared manually by our qualified, Australian Health Practitioner Regulation Agency (AHPRA)-registered medical team. No artificial intelligence (AI) is used to generate interpretations or health scores that are provided directly to you. All content is reviewed and approved by a qualified medical practitioner before it is made available in your dashboard.
We do not make decisions which could reasonably be expected to significantly affect the rights or interests of individuals by means of automated decision making or the use of AI.
We will inform you through this Privacy Policy if in future we use any other computer programs or AI systems that use personal information to make automated decisions that could reasonably be expected to significantly affect the rights or interests of an individual. This will include information about the kinds of personal information used in, and types of decisions made by, such computer programs or AI systems that use personal information to make such decisions.
You are not required to disclose your personal information to us. However, if you do not provide the information requested, you may not be able to receive our platform services, or patient-requested pathology testing services, or engage with us effectively.
We disclose your personal information (including relevant health information) to Healius Pathology Pty Ltd and its associated brands (including QML Pathology in Queensland) as our pathology subcontractor. Healius uses this information to perform specimen collection, laboratory analysis, and prepare your pathology test results. You consent to this disclosure by placing an order.
Your personal information and test results will be disclosed to our Chief Medical Officer and any other AHPRA-registered medical practitioners engaged by us to review results, prepare result interpretation and health scoring, and manage any clinical response required.
We disclose your payment information to Stripe solely for the purpose of processing your payment. Stripe is a reputable third-party payment processor. We do not store your full payment card details. Please review Stripe's privacy policy at stripe.com/au/privacy for further information.
We use Google Analytics to understand how visitors use our website, and Meta advertising tools (including Meta Pixel) to understand how our advertising performs. These tools may receive limited information about your interactions with our website (such as pages visited, actions taken, and device information). We do not share your health information with Google or Meta for any purpose.
We may disclose your personal information to government agencies, courts, or regulatory authorities where required or authorised by law. As described in Section 4.3, Healius (as the performing laboratory) is separately required by law to report notifiable conditions to relevant public health authorities.
If Optimastasis merges with, is acquired by, or sells all or part of its assets to another entity, your personal information may be transferred as part of that transaction, subject to this Privacy Policy or equivalent protections.
We may disclose your information to other parties where you have given explicit consent.
We may disclose your information where we are required or authorised to do so by Australian law or a court or tribunal order. This includes where we reasonably believe the disclosure is necessary to lessen or prevent a serious threat to the life, health, or safety of any individual, and it is unreasonable or impracticable to obtain consent.
By placing an order, you authorise us to provide your personal information (including relevant health information) to Healius to enable it to perform the pathology services. You also authorise Healius to collect, use, disclose, and otherwise handle your personal information in accordance with Healius's own privacy policy, available at https://www.qml.com.au/privacy.
Healius provides your test results to us electronically. We are solely responsible for delivering those results to you through your secure account dashboard, and for all clinical follow-up including counselling and clinical response management.
Healius creates and maintains a patient record for each customer who attends a collection centre. Title to those patient records remains with Healius. Our platform maintains separate records of your orders and results.
Where your test results include a clinically significant, adverse, abnormal, or unexpected finding (as determined by Healius), Healius will contact our CMO directly by phone. Our CMO or medical team will then contact you directly, counsel you about the implications of your results, and manage any clinical response required.
Our pathology testing services are only available to persons aged 18 years and over. Our platform is configured to automatically decline orders placed by or on behalf of any person under the age of 18. If you are under 18, please do not attempt to use our services.
All personal information and health information is stored on servers located in Australia. We do not transfer your information to overseas servers or service providers in operating our platform.
If disclosure of personal information interstate or overseas is necessary, for example, if you have requested transfer of your information to an overseas recipient for care purposes, we will comply with the requirements of the APPs and HPPs when making such disclosure.
We take reasonable technical, administrative, and physical steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These measures include encryption of data in transit and at rest, secure access controls, and confidentiality obligations for all staff and contractors.
Despite these measures, no security system is completely impenetrable. In the event of a data breach likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.
We use Google Analytics to understand how visitors use our website. Google Analytics uses cookies to collect information about your browsing activity. You can opt out using the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
We use Meta's advertising and measurement tools (including Meta Pixel) to understand how our advertising performs and to show relevant advertisements on Facebook and Instagram. You can manage your advertising preferences through your Meta account settings. We do not share your health information with Meta.
You can manage cookies through your browser settings. Blocking all cookies may affect the functionality of our website and your ability to use certain features.
We retain your personal and health information for as long as necessary to provide our services and meet our legal obligations:
Note: Patient records held by Healius are subject to Healius's own data retention obligations. We cannot delete records held by Healius.
If you subscribe to our Premium membership, we collect and retain information about your subscription tier, billing cycle, payment history, and feature usage. This information is used to manage your membership, process payments through Stripe, and provide you with the features included in your plan. Membership data is retained for the duration of your subscription and for 7 years after cancellation in accordance with our legal obligations.
Where you choose to book an online consultation to discuss your results, we will collect information about the consultation including the date, time, and any notes or communications arising from it. This information forms part of your health record and is handled in accordance with this Privacy Policy.
You have the right to request access to the personal information we hold about you. Contact our Privacy Officer using the details in Section 14. We will respond within 30 days and may need to verify your identity before processing your request.
If you believe that personal information we hold about you is inaccurate, incomplete, or misleading, you may ask us to correct it. Contact our Privacy Officer using the details in Section 14.
You may request that we delete personal information we hold about you where we are legally permitted to do so. We may be required to retain certain information (including health and transaction records) for the periods set out in Section 10. We cannot delete patient records held by Healius.
If you are not satisfied with how we have handled your personal information, or if you have any questions about privacy-related issues, you may contact our Privacy Officer in the first instance. We will respond within 30 days. If you are not satisfied with our response, or if you do not wish to raise a question or complaint with us directly, you may contact the Office of the Australian Information Commissioner (OAIC):
You can withdraw consent for marketing communications at any time by using the unsubscribe link in any marketing email or by contacting us at info@optimastasis.com.au. We will process your request within 5 business days. We may continue to send essential service communications (such as order confirmations and result notifications) regardless of your marketing preferences.
For any questions about this Privacy Policy, to exercise your rights, or to make a complaint, please contact us:
Company — Optima Stasis Pty Ltd (ACN 666 018 766)
Trading as — Optimastasis
Privacy Officer email — info@optimastasis.com.au
Customer support email — info@optimastasis.com.au
Postal address — 70 Mary Street, Brisbane, 4000 QLD.
Website — www.optimastasis.com.au
See also our Terms & refund policy.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by prominent notice on our website and, where we hold your email address, by email, at least 30 days before the change takes effect. Continued use of our services after an updated Privacy Policy takes effect constitutes your acceptance of the updated policy.