Australia's Local CPAP Specialists — 1300 27 27 66

Privacy Policy

Last updated: 7 August 2026

1. About this policy

This privacy policy explains how [CONFIRM: registered entity name and ABN] (“we”, “us”, “our”), trading as MyCPAP, collects, holds, uses and discloses your personal information. It applies to the mycpap.com.au website and to our related sales and support activities.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our registered address is [CONFIRM: registered address].

2. The kinds of information we collect

Personal information

  • Name, email address, phone number, billing and delivery addresses
  • Order history, cart contents and customer account details
  • Correspondence with our team, including support enquiries and returns requests
  • Technical information such as IP address, device and browser type, and the pages you view

Sensitive information, including health information

Some of the products we sell are medical devices, and some require a prescription or a clinical recommendation. Under the Privacy Act 1988 (Cth), health information is sensitive information and attracts stronger protections than other personal information. We only collect sensitive information where it is reasonably necessary for our functions and, except where the Act permits otherwise, only with your consent.

[CONFIRM: whether prescriptions or health details are collected, and where] — this section must state precisely what health information is collected, at what point in the purchase or support process, who within the business can access it, and how long it is retained.

Payment information

We do not store your full card details. Card payments are processed by our payment providers (see section 5).

3. How we collect information

We collect information directly from you when you place an order, create an account, contact us, subscribe to marketing, or leave a review. We also collect technical information automatically through cookies and similar technologies (see section 6). Where it is reasonable and practicable, we collect personal information directly from you.

4. Why we collect and how we use it

  • To process, fulfil and deliver your orders and to take payment
  • To provide customer support, handle returns, repairs and warranty claims
  • To manage your customer account
  • To send you marketing communications where you have not opted out (see section 9)
  • To improve our website, product range and service
  • To meet our legal, tax and regulatory obligations

5. Who we disclose information to

We disclose personal information to service providers who help us operate the business. These include:

  • E-commerce platform: Shopify, which hosts this store and processes order data
  • Payment processing: Stripe (including Link, Apple Pay and Google Pay) and PayPal
  • Delivery: our carriers, in order to deliver your order
  • Analytics and marketing: Google Analytics 4, Meta pixel, Microsoft Bing UET, Hotjar
  • Reviews: Trustpilot
  • Security and content delivery: Cloudflare

We do not sell your personal information. We may also disclose information where required or authorised by law.

6. Cookies and tracking

We use cookies and similar technologies for essential site functions (such as your cart and login), for analytics, and for advertising measurement. The tracking technologies currently in use on this site are Google Analytics 4, the Meta pixel, Microsoft Bing UET, Hotjar, Trustpilot and Cloudflare.

You can control cookies through your browser settings. Blocking some cookies may affect how the site works.

7. Overseas disclosure

Several of the providers listed in section 5 store or process data outside Australia, including in the United States and the European Union. By using this site you acknowledge that your personal information may be disclosed to overseas recipients. We take reasonable steps to ensure those recipients handle your information consistently with the Australian Privacy Principles.

8. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. We retain personal information for as long as it is needed for the purposes described in this policy, or for as long as we are required to keep it by law, after which we take reasonable steps to destroy or de-identify it.

[CONFIRM: retention period for order records and for any health information]

9. Direct marketing and how to opt out

If you have given us your details we may send you marketing about our products. Every marketing email includes an unsubscribe link, and you can opt out at any time by using that link or by contacting us. We do not use sensitive information for direct marketing without your consent.

10. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us using the details in section 13. We will respond within a reasonable period. In limited circumstances we may refuse access, in which case we will tell you why in writing.

11. Complaints

If you believe we have breached the Australian Privacy Principles, please contact us first using the details in section 13 so we can investigate. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Notifiable data breaches

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the OAIC as required by the Notifiable Data Breaches scheme.

13. Contact us

Privacy enquiries: [CONFIRM: privacy contact email and postal address]

Postal address: [CONFIRM: registered address]

14. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, and the “last updated” date above shows when it was last revised.