Last Revised: 25-08-2025
At PK27 Performance Medicine (“PK27”, “we”, “our”, “us”), your trust is our most valuable asset. Our model is built on one clear principle: your data is yours. We act as stewards — never owners — of your information. This Privacy Policy explains what information we collect, how it is used, and how it is protected in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and relevant state/territory health privacy laws.
Scope
This Privacy Policy applies to all services provided by PK27 outside of direct healthcare delivery, including:
- Our performance medicine programs
- DNA and epigenomic testing integration
- Data interpretation services
- Non-clinical coaching, digital platforms, and education resources
Clinical healthcare delivery through our practitioners is also governed by our Health Records and Information Privacy Policy (specific to health information).
What Makes PK27 Different
- You own your results: All test results — including genomic and biomarker data — belong to you, not us.
- DNA results are yours to share: We do not retain raw genomic data unless you choose to provide it to us for interpretation.
- Epigenomic tests are de-identified: These are used for performance medicine insights and research but never linked back to you personally.
- We minimise data retention: We only store what’s necessary to provide you with ongoing support, and always under your consent.
Information We Collect
We collect the following types of information:
- Information you provide
- Contact details (name, email, phone)
- Lifestyle, training, or health questionnaires
- Enrolment details for PK27 programs
- DNA results
- Raw DNA data is generated by third-party labs you choose.
- PK27 does not collect or store raw DNA unless you explicitly provide it.
- You control access — you may share results with us, and you may withdraw that access at any time.
- Epigenomic tests
- Collected via validated lab partners.
- Results are de-identified for analysis — individual identifiers are removed.
- De-identified results may be used for research, benchmarking, and product development, but cannot be traced back to you.
- Technical and usage data
- Device ID, IP address, browser type, geolocation (if using digital tools)
- Website usage and analytics (via cookies)
How We Use Your Information
We use your personal information strictly for:
- Delivering PK27 performance medicine programs
- Interpreting DNA/epigenomic results (when shared by you)
- Communicating with you about your enrolment, results interpretation, or progress
- Customising your experience and optimising protocols
- Conducting de-identified research into performance and epigenomics
- Security, compliance, and safeguarding our systems
We do not use your DNA results for marketing, insurance, or third-party commercial purposes.
Sharing of Information
We may share your information in the following limited cases:
- With service providers: e.g., secure IT hosting, data analytics, communication platforms
- With lab partners: only when you authorise us to transmit your samples or results for testing
- With research teams: only de-identified, aggregated epigenomic data (never raw DNA or identifiable data)
- As required by law: if legally obligated to disclose to regulators or courts
We will never sell your DNA or health data.
Your Rights
As a PK27 participant, you have:
- Full ownership of results: All DNA data belongs to you; we interpret but do not own.
- Access rights: You can request a copy of any information we hold on you.
- Correction rights: You can update or correct personal details.
- Deletion rights: You may request deletion of your information (excluding cases where law requires retention).
- Withdrawal of consent: You may revoke our access to your DNA or health data at any time.
- Marketing opt-out: You can unsubscribe from non-essential communications at any time.
Cookies & Digital Tracking
We use cookies and similar tools to improve digital services and personalise your experience. You can disable cookies in your browser, although this may limit functionality.
Security & Data Storage
- DNA results remain with you. Where shared, they are stored using encrypted, access-controlled systems.
- Epigenomic data is stripped of identifiers before analysis or research use.
- We take reasonable administrative, physical, and technical safeguards to protect information.
- Data is stored in Australia where possible; if overseas storage is required (e.g., secure cloud services), we ensure compliance with Australian privacy standards.
Changes to This Policy
From time to time, we may update this Privacy Policy. Material changes will be notified directly to participants.
Contact Us
For questions, requests, or complaints regarding this Privacy Policy, please contact:
PK27 Performance Medicine
Suite 70, Level 7
166 Gipps St
East Melbourne VIC 3002
Phone: (03) 9999 9805
Email: reception@pk27.com
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or call 1300 363 992.
