Changez Health & Fitness Privacy Policy

Last Updated: 23/08/2023

This privacy policy outlines the procedures that Changez Health & Fitness, operating under Changez (AUSTRALIA) PTY LTD (“Changez”), and our partner Halaxy, have in place to protect the data of our clients.

1. Introduction

At Changez Health & Fitness, your privacy is our priority. We have partnered with Halaxy, a renowned industry leader in healthcare data management and protection, to ensure your data remains secure and your privacy is maintained at all times. This policy details the lengths we go to in ensuring the safety and confidentiality of your data.

2. Data Management and Security

Changez Health & Fitness:

• All client data stored with us is encrypted both in transit and at rest.
• Regularly conduct security audits and vulnerability assessments to ensure the highest level of security.
• Maintain a strict access control procedure, ensuring only authorized personnel have access to client data.

Halaxy:

• Data is backed up daily and is protected by bank-grade security and encryption.
• Hosted on Amazon Web Services (AWS), a renowned global hosting service.
• Has integrated with governmental bodies, adhering to their stringent security requirements.
• Provides 24-hour data monitoring and quick-response customer support.
• Ensures GDPR compliance for EU-based clients.
• Has a rigorous software release process to maintain data security.

3. Data Integrations and Payment Details

Changez Health & Fitness:

• Any third-party integrations undergo thorough security vetting before integration.
• We never store payment details directly, instead relying on secure tokenization processes.

Halaxy:

• Allows integration with vetted third-party services such as Xero, QuickBooks, and SMS providers.
• Payment gateway is powered by Braintree in Australia and Hyperwallet globally, ensuring utmost safety in payment data handling.
• Card details are tokenized and never stored with patient records.

4. Data Access and Protection

Changez Health & Fitness:

• We have a clear access hierarchy, ensuring data is only accessible to those who genuinely require it.
• Our staff undergoes regular training to ensure they are up-to-date with the best data protection practices.

Halaxy:

• Offers varying access levels for practitioners and administrative staff.
• Features advanced anonymization options to protect patient identities.
• Their team does not have direct access to patient or practice data.

5. Proactive Steps for Data Security

Changez Health & Fitness:

• Encourage the use of strong, unique passwords and two-factor authentication.
• Maintain logs of user activity to detect any unauthorized access or suspicious activities.

Halaxy:

• Recommends the setup of two-factor authentication.
• Allows tracking of user activities for added transparency.
• Provides anonymization features to further protect patient data.
• Enables the secure sending of referrals and clinical notes.

6. Our Commitment

Neither Changez Health & Fitness nor Halaxy markets anything to your patients using the stored data. We prioritize the privacy of our clients above all else and do not partake in any activities that would compromise this.

7. More Information

For detailed insights into Halaxy’s data protection practices, you can visit their Terms and Conditions and Privacy Policy. Should you have any questions, concerns, or feedback about our privacy practices, please feel free to contact us directly or reach out to Halaxy at [email protected].

Thank you for entrusting Changez Health & Fitness with your health and fitness journey. Your privacy and trust mean everything to us.