This Privacy Notice for Thorough Repository Pty Ltd (ABN 91 670 055 286) ("we", "us", or "our") describes how and why we access, collect, store, use, and share ("process") your personal information when you use our services ("Services"), including when you:
- Visit our website at https://thoroughvet.com (opens in a new tab), or any website of ours that links to this Privacy Notice
- Use the ThoroughRepository platform or mobile application
- Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, contact us at contact@thoroughvet.com.
SUMMARY OF KEY POINTSLink to this section
This summary provides key points from our Privacy Notice. Full details are in the numbered sections below.
What personal information do we process? When you visit, use, or navigate our Services, we process personal information depending on how you interact with us, the choices you make, and the features you use. See section 1.
We host clinical records on behalf of veterinary users. When a veterinarian uploads records about their clients or patients, the veterinarian decides how that information is used and we act on their instructions. See section 2.
Do we process sensitive personal information? We do not collect or process special category or sensitive personal information, such as racial or ethnic origin, sexual orientation, or religious beliefs, except account login credentials where applicable privacy law treats those as sensitive. See section 1.
Do we collect information from third parties? We may collect limited information from public databases, marketing partners, and other outside sources. See section 1.
How do we process your information? To provide, improve, and administer our Services, to communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so. See sections 3 and 4.
Do we sell your information or run targeted advertising? No. We do not sell or share personal information, and we do not use your personal information for targeted advertising or profiling. See sections 5 and 8.
How do we keep your information safe? We have organisational and technical processes and procedures in place to protect your personal information. No electronic transmission or storage technology can be guaranteed to be completely secure. See section 11.
What are your rights? Depending on where you are located, applicable privacy law may give you rights over your personal information. See sections 13, 14 and 16.
How do you exercise your rights? Email us at contact@thoroughvet.com. We will consider and act upon any request in accordance with applicable data protection laws. See section 19.
TABLE OF CONTENTSLink to this section
- What information do we collect?
- Client and patient information uploaded by veterinary users
- How do we process your information?
- What legal bases do we rely on to process your information?
- When and with whom do we share your personal information?
- International transfers of your information
- What is our stance on third-party websites?
- Do we use cookies and other tracking technologies?
- Do we offer artificial intelligence based products?
- How long do we keep your information?
- How do we keep your information safe?
- Do we collect information from minors?
- What are your privacy rights?
- Australian privacy rights
- Controls for do-not-track features
- Do United States residents have specific privacy rights?
- Do we make updates to this notice?
- How can you contact us about this notice?
- How can you review, update, or delete the data we collect from you?
1. WHAT INFORMATION DO WE COLLECT?Link to this section
Personal information you disclose to usLink to this section
In short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.
Personal information provided by you. The personal information we collect depends on the context of your interactions with us, the choices you make, and the features you use. It may include:
- names
- phone numbers
- email addresses
- mailing addresses
- job titles
- usernames
- passwords
- contact preferences
- contact or authentication data
- billing addresses
- horse inspection and veterinary report data
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to it.
Payment informationLink to this section
We do not collect or store full payment card numbers. Payments made through the Services are processed by third-party payment providers, who collect and process your card details directly under their own terms and privacy policies. We receive only limited transaction data from those providers, such as the last four digits of a card, the card type, the transaction amount, and whether the payment succeeded.
Sensitive informationLink to this section
We do not collect or process special category or sensitive personal information as defined under the GDPR or UK GDPR, such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data about you, sexual orientation, or sex life.
Some US state privacy laws treat account login credentials as sensitive personal information. Where that applies, we process those credentials only to authenticate you and secure your account. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.
Veterinary records uploaded to the Services concern animals, not people, and are not health data about you. Those records may nonetheless contain personal information about the veterinarian's client, which is covered by section 2.
Information automatically collectedLink to this section
In short: Some information, such as your IP address and browser and device characteristics, is collected automatically when you visit our Services.
This information does not reveal your specific identity but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, information about how and when you use our Services, and other technical information. It is primarily needed to maintain the security and operation of our Services, and for internal analytics and reporting.
The information we collect includes:
- Log and usage data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and record in log files. This may include your IP address, device information, browser type and settings, information about your activity in the Services (such as date and time stamps, pages and files viewed, searches, and other actions), and device event information such as system activity and error reports.
- Device data. Information about the computer, phone, tablet, or other device you use to access the Services, which may include your IP address or proxy server, device and application identification numbers, browser type, hardware model, internet service provider or mobile carrier, operating system, and system configuration information.
- Location data. Approximate location derived from your IP address, and, where a feature requires it and you grant permission, more precise device location. You can opt out by refusing the permission or disabling location services on your device, though some features may then not work.
Google APIsLink to this section
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Information collected from other sourcesLink to this section
In short: We may collect limited data from public databases, marketing partners, and other outside sources.
To enhance our ability to provide relevant information and services to you and to update our records, we may obtain information about you from sources such as public databases, joint marketing partners, affiliate programs, data providers, and other third parties. This information may include mailing addresses, job titles, email addresses, phone numbers, IP addresses, and business social media profiles, for the purposes of business development and event promotion.
2. CLIENT AND PATIENT INFORMATION UPLOADED BY VETERINARY USERSLink to this section
In short: When a veterinarian uploads records about their own clients and patients, the veterinarian decides how that information is used, and we process it only on their instructions.
The Services allow veterinarians and veterinary practices ("Veterinary Users") to create, store, manage and share veterinary reports, clinical notes, imaging and related records. Those records often contain personal information about the Veterinary User's own clients, such as the client's name, contact details, and the horses they own.
For that information:
- the Veterinary User is the data controller, or the equivalent under applicable law, and decides what is collected, why, and with whom it is shared;
- we act as a data processor, or the equivalent under applicable law, and process that information only to host, store, secure, format, transmit and deliver it as the Veterinary User directs, to provide support, and to meet our legal obligations;
- the Veterinary User is responsible for having a lawful basis to collect and upload that information, and for providing any privacy notice and obtaining any consent that applicable law requires of them; and
- we do not use that information for our own marketing, advertising or profiling purposes.
If you are a client or patient owner of a Veterinary User and you want to access, correct or delete information held about you, please contact that Veterinary User directly, as they control it. If you contact us instead, we will pass the request to the relevant Veterinary User and tell you that we have done so.
For everything else, including account holders' own registration details, billing information, support correspondence and usage data, we are the controller and this Privacy Notice describes how we process it.
Where applicable law requires a written data processing agreement between a Veterinary User and us, we will enter into one on request.
3. HOW DO WE PROCESS YOUR INFORMATION?Link to this section
In short: We process your information to provide, improve, and administer our Services, to communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To facilitate account creation and authentication and to manage user accounts. So that you can create and log in to your account and keep it in working order.
- To deliver and facilitate delivery of the Services. To provide you with the service you requested.
- To respond to user enquiries and offer support. To answer your questions and resolve issues with the Services.
- To send administrative information to you. Details about our products and services, changes to our terms and policies, and similar information.
- To fulfil and manage your orders. To process payments, renewals, refunds and related matters made through the Services.
- To enable user-to-user communications. Where you use features that allow you to communicate with another user or share a report with a recipient.
- To request feedback. To contact you about your use of our Services.
- To send you marketing communications. Where this is in accordance with your marketing preferences. You can opt out at any time. See section 13.
- To protect our Services. As part of our efforts to keep the Services safe and secure, including fraud monitoring and prevention.
- To identify usage trends. To understand how the Services are used so we can improve them.
- To measure the effectiveness of our communications. To understand which of our communications are useful to our users.
- To comply with legal obligations. Including tax, accounting and record-keeping requirements, and responding to lawful requests from authorities.
- To save or protect an individual's vital interest. Where necessary to prevent harm.
We do not process your personal information for targeted advertising, for the sale of personal data, or for profiling that produces legal or similarly significant effects.
4. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?Link to this section
In short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.
If you are located in the EU, the EEA, or the UKLink to this section
The General Data Protection Regulation and the UK GDPR require us to explain the valid legal bases we rely on. We may rely on:
- Consent. Where you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time. See section 13.
- Performance of a contract. Where processing is necessary to fulfil our contractual obligations to you, including providing the Services, or to take steps at your request before entering into a contract.
- Legitimate interests. Where processing is reasonably necessary to achieve our legitimate business interests and those interests do not override your interests, rights and freedoms. For example, to analyse how the Services are used so we can improve them, to support our business development activities, to diagnose problems and prevent fraudulent activity, and to keep our users informed about our products and services.
- Legal obligations. Where processing is necessary for compliance with our legal obligations, such as cooperating with a law enforcement body or regulator, exercising or defending legal rights, or disclosing information as evidence in litigation.
- Vital interests. Where processing is necessary to protect your vital interests or those of a third party.
If you are located in CanadaLink to this section
We may process your information where you have given express consent, or in situations where your permission can reasonably be inferred. You can withdraw your consent at any time.
In some exceptional cases we may be legally permitted to process your information without your consent, including where collection is clearly in the interests of an individual and consent cannot be obtained in a timely way, for investigations and fraud detection and prevention, for certain business transactions, where disclosure is required to comply with a subpoena, warrant or court order, or where the information is publicly available and specified by the regulations.
If you are located in AustraliaLink to this section
We collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. See section 14.
5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?Link to this section
In short: We share information only in the specific situations described in this section.
We do not sell your personal information, and we do not share it for cross-context behavioural or targeted advertising.
Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties.
We may need to share your personal information in the following situations:
- Service providers. We share information with third parties that perform services for us, including hosting and infrastructure providers, payment processors, email and communications providers, customer support tools, and analytics providers. They may access personal information only to perform those tasks on our behalf, under a written contract, and are obliged to protect it and not to use it for their own purposes.
- At your direction. Where you use the Services to send a report or record to a recipient you choose, we transmit it to that recipient as you direct.
- Business transfers. In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. We will give you notice if your information becomes subject to a different privacy notice as a result.
- Affiliates. With our affiliates, in which case we will require them to honour this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies under common control with us.
- Where we use mapping services. Where a feature of the Services displays a map, we may share limited location information with the mapping provider in order to render it. You can revoke any location permission you have granted at any time in your device settings.
- Legal obligations and rights. Where we are required to do so by law, or where disclosure is necessary to investigate, prevent or take action regarding potential violations of our policies, suspected fraud, threats to the safety of any person, or as evidence in litigation.
Other users. If you post content in a shared or public area of the Services, other users of that area may view it. Veterinary reports and clinical records are not public: they are visible only to the account that created them and to the recipients that account chooses to share them with.
6. INTERNATIONAL TRANSFERS OF YOUR INFORMATIONLink to this section
In short: We store and process information in Australia and in other countries, and we use approved safeguards when we do.
Our servers and those of our service providers are located in Australia, the United States, the United Kingdom and France. Your information may therefore be transferred to, stored in, and processed in countries other than the one you live in, where data protection laws may differ from those in your country.
Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on an appropriate safeguard permitted by applicable law. That will normally be the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where the transfer is from the United Kingdom, or a finding of adequacy in respect of the destination country.
Where we disclose personal information to an overseas recipient for the purposes of Australian Privacy Principle 8, we take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information.
You can request a copy of the safeguards we rely on by emailing contact@thoroughvet.com.
7. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?Link to this section
In short: We are not responsible for the safety of any information that you share with third parties that we link to but are not affiliated with.
The Services may link to third-party websites, online services, or mobile applications that are not affiliated with us. We do not make any guarantee regarding any such third parties and we will not be liable for any loss or damage caused by your use of them. The inclusion of a link does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third-party website. Any data collected by third parties is not covered by this Privacy Notice. You should review the policies of such third parties and contact them directly with your questions.
8. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?Link to this section
In short: We use cookies and similar technologies to operate and secure the Services and to understand how they are used. We do not use them for advertising.
We use cookies and similar technologies to gather information when you interact with our Services. These help us maintain the security of the Services and your account, keep you signed in, prevent crashes, fix bugs, save your preferences, and support basic site functions.
We also use a limited number of analytics cookies to understand how the Services are used so that we can improve them. Where applicable law requires your consent for non-essential cookies, we will ask for it before setting them, and you can change your choice at any time.
We do not permit third parties to use tracking technologies on our Services for advertising purposes, and we do not use tracking technologies for targeted advertising or for any activity that constitutes a "sale" or "sharing" of personal information under applicable US state privacy laws.
Most web browsers accept cookies by default. You can set your browser to remove or reject cookies, though this may affect certain features of the Services.
9. DO WE OFFER ARTIFICIAL INTELLIGENCE BASED PRODUCTS?Link to this section
In short: Yes. We offer products and features powered by artificial intelligence and machine learning, and we explain here how they handle your information.
As part of our Services we offer products, features, and tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). The terms in this Privacy Notice govern your use of the AI Products within our Services.
Our AI ProductsLink to this section
Our AI Products are designed for the following functions:
- Video analysis
- AI predictive analytics
- AI insights
- AI research
- AI document generation
- Machine learning models
- Text analysis
- Natural language processing
How we process your data using AILink to this section
All personal information processed using our AI Products is handled in line with this Privacy Notice and our agreements with the third-party providers of the underlying technology. Where an AI Product processes records that a Veterinary User has uploaded, we process those records as that Veterinary User's processor and on their instructions, as described in section 2.
Automated decision-makingLink to this section
We do not use AI Products to make decisions about you that produce legal effects concerning you or similarly significantly affect you, without human involvement. If we introduce such a feature in the future, we will update this notice first and, where the GDPR or UK GDPR applies, we will implement the safeguards it requires, including your right to obtain human intervention, to express your point of view, and to contest the decision.
AI output is not veterinary adviceLink to this section
Output produced by our AI Products is a tool to assist a qualified professional. It is not a veterinary diagnosis, opinion, or recommendation, and it does not replace the professional judgement of a registered veterinarian.
TrainingLink to this section
We do not use personal information contained in records uploaded by Veterinary Users to train general-purpose AI models for our own or any third party's benefit, except where we have that Veterinary User's express written agreement, or where the information has been fully aggregated and de-identified so that no individual, client or patient can be identified from it.
10. HOW LONG DO WE KEEP YOUR INFORMATION?Link to this section
In short: We keep your information for as long as necessary for the purposes set out in this Privacy Notice, unless a longer period is required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law, such as for tax, accounting, or other legal requirements. In general, we keep account information for as long as you have an account with us, and for a reasonable period afterwards to handle queries, disputes, and legal obligations.
Records uploaded by a Veterinary User are retained according to that Veterinary User's instructions and their own professional and regulatory record-keeping obligations, which may require them to be kept for a number of years after the record was created. We will not delete a Veterinary User's records solely because their account has closed, without first giving them the opportunity to export those records.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymise it, or, where that is not possible because it is held in backup archives, we will securely store it and isolate it from any further processing until deletion is possible.
11. HOW DO WE KEEP YOUR INFORMATION SAFE?Link to this section
In short: We aim to protect your personal information through a system of organisational and technical security measures.
We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of the personal information we process. However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be completely secure, so we cannot promise or guarantee that unauthorised third parties will not defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
If a data breach occurs that is likely to result in serious harm to you, or that otherwise triggers a notification obligation under applicable law, we will notify you and the relevant supervisory authority within the timeframes that law requires. Where we act as a processor for a Veterinary User, we will notify that Veterinary User without undue delay so that they can meet their own obligations.
12. DO WE COLLECT INFORMATION FROM MINORS?Link to this section
In short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect or solicit data from, or market to, children under 18 years of age, and we do not knowingly sell such personal information. By using the Services, you represent that you are at least 18 years old. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete that data from our records. If you become aware of any data we may have collected from a child under 18, please contact us at contact@thoroughvet.com.
13. WHAT ARE YOUR PRIVACY RIGHTS?Link to this section
In short: Depending on where you live, you may have rights that give you greater access to and control over your personal information.
In some regions, including the European Economic Area, the United Kingdom, Switzerland, Canada and Australia, you have certain rights under applicable data protection laws. These may include the right:
- to request access to and obtain a copy of your personal information;
- to request rectification of inaccurate information or erasure of your information;
- to restrict the processing of your personal information;
- to data portability, where applicable;
- to object to the processing of your personal information in certain circumstances; and
- not to be subject to a decision based solely on automated processing.
You can make a request by emailing contact@thoroughvet.com. We will acknowledge your request promptly and respond within the timeframe required by applicable law, which is one month under the GDPR and UK GDPR and 30 days under the Australian Privacy Principles, unless the request is complex and we tell you that we need longer. We may need to verify your identity before we act on a request.
If you are located in the EEA or the UK and you believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or to the UK Information Commissioner's Office. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner. If you are located in Australia, see section 14.
Withdrawing your consent. Where we rely on your consent to process your personal information, you have the right to withdraw it at any time by emailing contact@thoroughvet.com or updating your preferences. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, nor the processing of your personal information carried out in reliance on a lawful basis other than consent.
Opting out of marketing communications. You can unsubscribe from our marketing communications at any time using the unsubscribe link in any marketing email, by replying "STOP" or "UNSUBSCRIBE" to an SMS we send, or by emailing contact@thoroughvet.com. You will then be removed from our marketing lists. We may still send you service-related messages that are necessary for the administration and use of your account.
Account information. If you want to review or change the information in your account, you can log in to your account settings and update it, or email us at contact@thoroughvet.com.
Deleting your account. You can delete your account yourself at any time. In the mobile app on iOS or Android, go to More › Profile › Sign-in › Delete account. On the web or in the desktop app, go to Settings › Profile › Delete account. Deleting your account signs you out on all of your devices, and we remove your account data within 30 days, though we may retain some information where we must to prevent fraud, assist with investigations, enforce our legal terms, or comply with legal requirements. Veterinary records you have submitted to a practice or to a sale stay with that practice or sale as their records (see sections 2 and 10). Your access to ThoroughWorks is not affected. If you cannot sign in, email support@thoroughvet.com from the email address on your account and ask us to delete it. These steps are also at https://thoroughvet.com/delete-account (opens in a new tab).
14. AUSTRALIAN PRIVACY RIGHTSLink to this section
In short: We are an Australian company and we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
We collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").
You have the right to request access to the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Email contact@thoroughvet.com. We will respond within 30 days. We do not charge a fee for making a request, though we may charge a reasonable fee for providing access where the request is substantial. If we refuse access or refuse to correct information, we will tell you why in writing and explain how you can complain.
We are not required to collect personal information from you if you deal with us anonymously or by pseudonym, though in most cases we cannot provide the Services without identifying you.
Notifiable data breaches. If we become aware of an eligible data breach under Part IIIC of the Privacy Act, we will assess it promptly and, where it is likely to result in serious harm, notify affected individuals and the Office of the Australian Information Commissioner as the scheme requires.
Complaints. If you have a complaint about how we have handled your personal information, email contact@thoroughvet.com with the details. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au (opens in a new tab), by phone on 1300 363 992, or by post to GPO Box 5288, Sydney NSW 2001.
15. CONTROLS FOR DO-NOT-TRACK FEATURESLink to this section
Most web browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow, we will inform you about that practice in a revised version of this Privacy Notice.
California law requires us to let you know how we respond to web browser DNT signals. Because there is currently no industry or legal standard for recognising or honouring DNT signals, we do not respond to them at this time.
16. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?Link to this section
In short: If you are a resident of a US state with a comprehensive privacy law, you may have rights to access, correct, delete, and obtain a copy of your personal information.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, to correct inaccuracies, to obtain a copy of it, or to delete it. You may also have the right to withdraw your consent to our processing. These rights may be limited in some circumstances by applicable law.
Categories of personal information we collectLink to this section
We have collected the following categories of personal information in the past twelve months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile number, unique personal identifier, online identifier, IP address, email address, and account name | YES |
| B. Personal information as defined in the California Customer Records statute | Name, contact information, employment, and billing information | YES |
| C. Protected classification characteristics under state or federal law | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | NO |
| D. Commercial information | Transaction information, purchase history, and payment records | YES |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behaviour, and interactions with our websites and applications | YES |
| G. Geolocation data | Device location | YES |
| H. Audio, electronic, sensory, or similar information | Images and audio, video or call recordings created in connection with our business activities | YES |
| I. Professional or employment-related information | Business contact details in order to provide you our Services at a business level, or job title, work history, and professional qualifications if you apply for a job with us | YES |
| J. Education information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about an individual's preferences and characteristics | NO |
| L. Sensitive personal information | Account login information | YES |
We only collect sensitive personal information as permitted by law or with your consent, and we do not collect or process it for the purpose of inferring characteristics about you. We do not use or disclose sensitive personal information for purposes other than those permitted without a right to limit.
We may also collect other personal information outside these categories where you interact with us in person, online, by phone, or by post, in the context of receiving help through our customer support channels, participating in customer surveys, and the delivery of our Services.
We retain the collected personal information for as long as you have an account with us, and afterwards as described in section 10.
Will your information be shared with anyone else?Link to this section
We disclose personal information to our service providers under a written contract, as described in section 5. We may use your personal information for our own business purposes, such as internal research for technological development and demonstration. This is not considered a sale of your personal information.
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve months, and we do not sell or share the personal information of website visitors, users, or other consumers. We have not processed personal information for targeted advertising in the preceding twelve months.
Your rightsLink to this section
You have rights under certain US state data protection laws. These rights are not absolute, and in certain cases we may decline a request as permitted by law. They include:
- the right to know whether we are processing your personal data;
- the right to access your personal data;
- the right to correct inaccuracies in your personal data;
- the right to request deletion of your personal data;
- the right to obtain a copy of the personal data you previously shared with us;
- the right to non-discrimination for exercising your rights; and
- the right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. As set out above, we do not carry out any of these activities.
Depending on the state where you live, you may also have the right to obtain a list of the categories of third parties to which we have disclosed personal data, the right to obtain a list of specific third parties to which we have disclosed personal data, and the right to limit the use and disclosure of sensitive personal data.
How to exercise your rightsLink to this section
Email us at contact@thoroughvet.com, or write to us using the postal address in section 18.
Under certain US state data protection laws you can designate an authorised agent to make a request on your behalf. We may deny a request from an authorised agent who does not submit proof that they have been validly authorised to act on your behalf.
Request verificationLink to this section
On receiving your request we will verify your identity to confirm that you are the person about whom we hold the information. We will only use personal information provided in your request to verify your identity or authority to make the request. If we cannot verify your identity from information we already hold, we may ask you to provide additional information for verification and fraud-prevention purposes.
AppealsLink to this section
If we decline to take action regarding your request, you may appeal by emailing contact@thoroughvet.com with the word "Appeal" in the subject line. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons. If your appeal is denied, you may submit a complaint to your state attorney general.
California "Shine The Light" lawLink to this section
California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about the categories of personal information, if any, that we disclosed to third parties for direct marketing purposes, and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. We do not disclose personal information to third parties for their direct marketing purposes. If you are a California resident and would like to make such a request, email contact@thoroughvet.com.
17. DO WE MAKE UPDATES TO THIS NOTICE?Link to this section
In short: Yes, we will update this notice as necessary to stay compliant with relevant laws and to reflect changes in what we do.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top. If we make material changes, including if we begin any processing activity that this notice currently says we do not carry out, we will notify you either by prominently posting a notice of the changes or by sending you a notification directly, before the change takes effect. We encourage you to review this Privacy Notice regularly.
18. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?Link to this section
If you have questions or comments about this notice, email us at contact@thoroughvet.com or write to us at:
Thorough Repository Pty Ltd ABN 91 670 055 286 Unit 2, 3 Northward Street Upper Coomera, Queensland 4209 Australia
19. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?Link to this section
Depending on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information. You may also have the right to withdraw your consent to our processing. These rights may be limited in some circumstances by applicable law.
To make a request, email contact@thoroughvet.com with the subject line "Privacy request" and tell us what you would like us to do. We may ask you for information to verify your identity. We will respond within the timeframe required by applicable law.
If your request concerns records that a veterinarian uploaded about you or your horse, please see section 2: those records are controlled by that veterinarian, and we will forward your request to them.