Privacy POLICY
Last Updated: 4 July 2026Our Commitment
Regeneration Laboratories Pty Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
What Personal Information We Collect
We collect personal information that is reasonably necessary for our business operations, including:
| Type | Examples |
|---|---|
| Identity | Name, title, position |
| Contact | Email address, phone number, billing/delivery address |
| Organisation | Institution, department, ABN/ACN |
| Account | Username, password, order history |
| Payment | Credit card or bank details (processed securely; we do not store full card numbers) |
| Research Context | Intended research use, institutional approvals, licence numbers |
| Communications | Correspondence, feedback, support enquiries |
| Technical | IP address, browser type, device information, cookies |
How We Collect Information
3.1We collect personal information:
- Directly from you (via website, email, phone, or order forms);
- Automatically when you use our website (via cookies and analytics);
- From third parties where you have consented (e.g., institutional procurement systems).
3.2We do not collect sensitive information (as defined in the Privacy Act) unless required by law or with your explicit consent.
Why We Collect, Use, and Disclose Personal Information
We use your personal information for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling orders | Performance of contract |
| Communicating about orders, deliveries, and support | Performance of contract / legitimate interests |
| Verifying research credentials and compliance | Legal obligation / legitimate interests |
| Processing payments and maintaining accounts | Performance of contract |
| Sending marketing communications (with opt-out) | Consent / legitimate interests |
| Improving our website and services | Legitimate interests |
| Complying with legal and regulatory obligations | Legal obligation |
| Protecting against fraud and misuse | Legitimate interests / legal obligation |
Disclosure of Personal Information
5.1We may disclose personal information to:
- Service providers: Payment processors, freight carriers, IT support, cloud storage providers (bound by confidentiality);
- Regulators: TGA, OGTR, or other authorities as required by law;
- Professional advisers: Lawyers, accountants, insurers;
- Institutions: Your employing institution where necessary for verification or compliance.
5.2We do not sell or rent your personal information to third parties for marketing purposes.
5.3Overseas Disclosure: Some service providers may be located overseas (e.g., cloud hosting in the US or EU). Where we disclose personal information overseas, we take reasonable steps to ensure the recipient complies with the APPs or is subject to comparable privacy laws.
Data Security
6.1We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration, including:
- Encryption of data in transit (SSL/TLS);
- Access controls and authentication;
- Regular security assessments;
- Staff training on privacy and data handling.
6.2While we take these precautions, no internet transmission is completely secure. You provide information at your own risk.
Data Retention
7.1We retain personal information for as long as necessary for the purposes outlined in this Policy, or as required by law.
7.2Typically, we retain:
- Order and transaction records: 7 years (for tax and accounting purposes);
- Account information: While your account is active, plus 2 years;
- Marketing preferences: Until you opt out;
- Correspondence: 3 years.
7.3When no longer required, we securely destroy or de-identify personal information.
Your Rights
Under the Privacy Act 1988, you have the right to:
| Right | How to Exercise |
|---|---|
| Access your personal information | Contact us in writing; we respond within 30 days |
| Request correction of inaccurate information | Contact us with details; we will promptly update |
| Opt out of marketing communications | Click "unsubscribe" or contact us directly |
| Complain about a privacy breach | Contact us first; you may also complain to the OAIC |
8.1Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992
Cookies and Analytics
9.1Our website uses cookies to:
- Maintain your session and shopping cart;
- Remember your preferences;
- Analyse website traffic and usage (via Google Analytics or similar).
9.2You can manage or disable cookies through your browser settings. Disabling cookies may affect website functionality.
Direct Marketing
10.1We may send you promotional emails about new products, research updates, or special offers if you have consented or if we have an existing business relationship.
10.2Every marketing communication includes an unsubscribe option. You may also contact us directly to opt out.
Privacy Complaints
11.1If you believe we have breached your privacy, please contact us using the details below. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
11.2If you are not satisfied with our response, you may lodge a complaint with the OAIC (see clause 8.1).
Changes to This Policy
12.1We may update this Privacy Policy from time to time. Changes are effective when posted on our website. We encourage you to review this Policy periodically.