Thank you for your interest in how we handle your data.
At Cubro, we're committed to providing you with the highest level of protection for your data and privacy.
When you provide us with your personal information (whether directly or indirectly) you are deemed to have read this Privacy Policy and to accept and consent to the provisions of this policy without qualification.
It is important to note that, if we are unable to collect, use, hold, disclose and otherwise process your personal information in the manner authorised by this Privacy Policy then we may not be able to provide you with the full benefit of our products, services, offers or online and digital platforms.
This Privacy Policy has been published to provide details of how and when personal information is collected, stored, used and disclosed by Cubro Pty Ltd ABN 92 673 754 151. Cubro is the controller responsible for your personal data (collectively referred to “we”, “us” or “our” in this Privacy Policy).
We process different data when you use our online products or visit our websites. We collect personal information from or about you in a variety of ways. We will try to collect personal information directly from you, either in person, over the phone, by email, or through our digital and online channels. However, we may also collect your personal information from other third parties, including our digital integrations, related entities, service providers, contractors, and agents.
Generally, the types of personal information that we collect from or about you depends on the circumstances in which the information is collected. Most of the data is collected in a pseudonymised or anonymised form. We have described below examples of the types of personal information that may be collected, however this is not an exhaustive list:
Information when you visit our websites
When you visit one of our websites or access one of our online services, we may process information on the region you are visiting us from, information on your device, its operating system and browser, your user behaviour on our site during the current session, and whether you have visited us before. For this, we use cookies.
Registration information
To activate or use some of our products or services, you need to create an account. During the process of setting up your Account, we will ask you for certain personal information such as your name, email address, possibly supplemented by additional information, such as your telephone number and address details.
Support enquiries
If you contact us for support enquiries, we will store your data in connection with this enquiry, such as contact details, information on your enquiry and any related material that may help us provide the service you request. In some cases, we may ask you to provide us with additional information to manage your support enquiry.
Usage information
When using our products and services, we collect and process personal data at various points. The respective collection and processing of personal data depends on the product used and the associated services and product features. In some cases, you may deliberately submit or provide us with files for verification. If these contain personal data, processing is carried out in accordance with the guidelines set out in this Privacy Policy.
Payment information
We do not offer any online payment options on our websites or online services. We will not request details of payment cards, and do not store payment card details on our systems and storage.
Digital Integration
With our digital integration offering for Operating Theatres, the Customer may authorise Cubro to have Remote Access to the system. This Remote Access is for the sole purpose of providing upgrades, updates, maintenance and troubleshooting operational issues.
We use Digital Integration Data to enable the integrated features, improve the functionality and user experience of our service and provide relevant support for integrated features.
We maintain appropriate security measures to protect Digital Integration Data. We also require our third-party integration partners to adhere to strict data security standards.
We will not save any personal information, patient records, case data or patient operating notes.
Processing purposes
We process your data, whether it can be traced back directly or indirectly to a natural person or not, for the following purposes:
Consent
Your consent is required for the processing of certain data. In these events we will inform you expressly about the situation and provide you with the opportunity to allow us to process this data.
In these cases, we will inform you about the purpose of the data processing and about your right of revocation.
Storage and deletion periods
Any personal information that falls within the scope of this Privacy Policy is collected and held by us or trusted third parties we may engage to store information on our behalf. We will take reasonable steps to protect your personal information from misuse, interference, corruption, loss or unauthorised access, modification or disclosure, including through physical, electronic and procedural safeguards.
We will only keep your personal information for as long as it is required for the purposes for which it was collected.
Should the data no longer be required for the purpose it was collected, it will be anonymised and/or deleted in accordance with legal regulation.
Should you wish to have your data deleted, note that due to technical restrictions it may take up to 180 days to permanently delete your data from the live systems.
Further, note that after the confirmation of your deletion request it is not possible to restore your data.
When you use a product or service, cookies are uploaded to your browser. Cookies may be used to identify your browser so that our website is displayed correctly. We also use cookies at various points on our website to analyse the use of our website and thereby optimise it.
Cookies are stored on your individual device, and you have full control over their use. You may deactivate or restrict the transmission of cookies by changing the settings of your web browser.
Cookies that are already stored may be deleted at any time. Should you visit our website with cookies deactivated, you may possibly not be able to use all of the functions on our website to the full extent.
In addition to our own systems, we also use the following third-party tools for marketing purposes and to make your visit to our websites or the use of our products/services more user-friendly.
Google Analytics 360
We use Google Analytics 360, a web analysis service from Google (Google Inc.). Google Analytics uses cookies that enable us to analyse your use of our websites. The data generated by cookies about your use of our website and may involve the transfer of data to servers in the USA. Prior to this, however, Google will shorten your IP address if it originates in a member state of the European Union or in other signatory states to the Agreement on the European Economic Area and thus make it anonymous (Google's anonymizeip process). The entire IP address is transferred to a Google server in the USA and saved there only in exceptional cases. Google uses this data to evaluate your use of the website, to generate reports on website activities for Cubro, and to provide other services associated with website and internet use. Google can transfer this information to third parties, where appropriate, if legally mandated or if Google contracts with third parties to process such data. Google will not associate your IP address with other Google data.
You still have the option to prevent Google from collecting data generated by cookies and relating to your use of the website.
For more information about Google Analytics Privacy Policy, click here.
Adobe Analytics (Omniture)
We use Adobe Analytics by Adobe (Adobe Systems, Inc.). The program uses cookies and tracking pixels, which are either retrieved from your device or stored there and enable an analysis of your use of our website and online services. This process collects and saves data based on pseudonyms. These profiles are used to analyse visitor behaviour on our services and to adapt our offerings and design based on user needs.
Without your express consent, the pseudonymised usage profiles will not be merged with other personal information that we may have received from you. Adobe does not process your IP address and only saves it in a shortened form. You may also opt-out of the collection and storage of your information by Adobe here.
For more information about Adobe Systems' Privacy Policy, click here.
Hotjar
We use Hotjar, a web analytics service provided by Hotjar. Hotjar uses cookies to process information including standard internet log information and details of the visitor’s behavioural patterns upon visiting our site. This is done to provide you with a better experience, and to facilitate the use of certain functions. Cookies are small data files transferred onto computers or devices by sites for record-keeping purposes and to enhance functionality on our site. Hotjar stores this information in a pseudonymized user profile. Hotjar does not process this information to identify individual users or to match it with further data on an individual user.
Remarketing
We may use remarketing services to advertise on third party websites to you after you visit our website. We manage this through a variety of remarketing services and ad exchanges which use cookies to inform, optimise and serve ads based on your past visits to our website.
For example, we use Google AdWords, provided by Google Inc, and Facebook Custom Audiences, Facebook Dynamic Ads and Facebook Pixel, provided by Facebook Inc, to deliver targeted advertisements to individuals who visit our website.
The remarketing services we use offer you the opportunity to opt out of their tracking systems. You can read about the information they collect and how to opt through each remarketing service’s own privacy policy.
For more info about the cookies, we make use of in conjunction with Hotjar, please visit Cookie Information. You may opt-out of the collection and storage of your information by Hotjar at any time by following the instructions here.
For more information about the software used and Hotjar’s Privacy Policy, visit here.
We respect the privacy of your personal information and will take all reasonable steps to keep it confidential. However, we may disclose your personal information if required in connection with the purposes described in this Privacy Policy. This may include disclosure where:
Personal information that we collect is either held by us on our systems and storage facilities or is held by these parties on our behalf. Some information we hold will be stored in ‘the cloud’ in secure databases on our behalf by third parties based overseas. The use of these services, and the transfer of information overseas (if applicable) will not relieve us of our obligations under the Privacy Act and this Privacy Policy.
We share personal data with the following recipients or categories of recipients for the aforementioned reasons:
We may share anonymised and aggregated information (which is not capable of identifying you) with our contractors, affiliates, business partners and other third parties.
In providing and managing our customer products, we also contract with other businesses to provide services to us and we may disclose personal information to them to enable them to provide those services.
We require these service providers to adhere to our confidentiality requirements and to the requirements of the Privacy Act.
We use a global IT infrastructure including computers, cloud-based servers, networks, and software solutions of international companies to provide our services. In certain specific cases your personal data may be forwarded to third countries based on your express consent. In these countries, the same level of data protection is not always governed by and established in law as in Australia.
When we disclose personal information to third parties based offshore, we will comply with the requirements of the Privacy Act that relate to the transfer of personal information offshore.
We insist that our partners take reasonable technical and organisational precautions, including complying with generally accepted industry standards, to protect personal information that they hold. However, no method is completely secure, and we cannot be responsible for any breach of security caused by third parties.
Browsers used to access our products offer you several options and settings. These are usually explained to you when you first install or use them. It is quite possible that by changing the settings, certain Cubro services may no longer function properly.
If you have given us your consent to process certain data, e.g. to receive a newsletter or third-party offers, you have the right to revoke this consent - also in part - at any time. You can do so by contacting us directly.
In the case of direct advertising, you have a general right to object without having to provide information on the situation. Please inform us of your objection in writing (e.g. email) or by telephone.
You have the following rights in connection with your personal data, subject to possible legal restrictions:
The right to information, rectification, erasure, restriction of processing, portability, and objection.
Right to information
If you would like to know what personal data we hold on you please contact us directly. Following your request, we will send you information about the data we have via email. The provision of this information may take some time, depending on the scope of the activity data.
Right to rectification
You can request to change or update your data at any time by contacting us directly.
Right to erasure
If you wish to delete your data, please contact us directly. We will then erase your data in accordance with legal requirements.
Wherever possible, we will block your data immediately, however due to technical restrictions it may take up to 180 days to permanently delete your data, provided there are no legal obligations and statutory rights preventing deletion.
Please note that after the confirmation of your deletion request it is not possible to restore your data.
Right to restriction of processing
You have the right to restrict the processing of your personal data. To this end, inform us of the categories of data affected by your request and the reasons for your request. We will examine the facts and inform you of the result.
Right to data portability
Contact us directly and inform us in writing which data you would like to transfer to whom. We will examine your request and inform you of the result.
Right to lodge a complaint
If you have any concerns or complaints about how we are collecting or processing your personal information, you can complain to your local data protection authority. We request that you contact us first to seek to resolve the concern or complaint.
In Australia, you can contact the Privacy Commissioner at the Office of the Australian Information Commissioner (www.oaic.gov.au).
If you believe the privacy of your personal information has been breached in any way, please notify us by:
Telephone 1800 656 527
E-mail: [email protected]
Cubro Privacy Policy
Level 2, 700 Springvale Road,
Mulgrave VIC 3170
This policy will be published on our website and will be accessible to all employees, customers, suppliers and contractors at any time. If we modify this policy, changes will be published on our website, on the day the changes are made.
This Privacy Policy was last updated in April 2025.