Privacy Policy

Music Health Inc, Music Health Pty Ltd and its related and associated products (“Vera” or “us” or “we” or “our”) is committed to maintaining the privacy and security of personal data.

This Privacy Policy explains how we collect, store and use personal data in connection with our websites (“Sites”) and our applications, platforms and associated software, products and programs (the “Application”). Together, our Sites and Application are referred to in this Privacy Policy as our “Service”.

This Privacy Policy also tells you about your privacy rights and how the law protects you.

This Privacy Policy has been developed in accordance with the General Data Protection Regulations (GDPR), the UK General Data Protection Regulation (UK GDPR), the Data Protection Act (UK), the Privacy Act (Australia), the Privacy Act (New Zealand) and the California Consumer Privacy Act (CCPA) (collectively, “Data Protection Laws”).

By using the Service, you agree to the collection and use of personal data in accordance with this Privacy Policy. If you have any questions or if you wish to receive further details, please contact us using the method set out below.

How we collect personal data

We may collect personal data in a number of ways, including:

· when you access and use our Sites;

· when you sign up to access our Application on either a subscription or trial basis;

· during conversations or correspondence with you, for example to verify login details and for customer service enquiries; and

· to follow your usage, interaction and progress on our Application.

If you choose to create an account through Google, Facebook or Apple, we may collect personal data from those services in order to set up your account. If you choose to provide such personal data during registration, you are giving us permission to use, share, and store it in a manner consistent with this Privacy Policy.

If you are an authorised representative of an end user, we may collect your personal data and also collect the personal data of the nominated end user directly from you. As an authorised representative, you promise that you have the ongoing consent or legal authority to provide the personal data of the end user for our use in the manner specified in this Privacy Policy. For further information on authorised users, please see our Terms of Service.

Types of personal data we collect

The types of personal information we collect may include:

· first and last name;

· email address;

· physical address;

· phone number;

· usage data which you provide to us automatically from your interactions with the Service and also from any interactions with our support teams; and

· biometric data.

How we use personal data

We use personal data to provide and enhance our Service. This may include:

● To provide and maintain our Service, including to manage your registration as a user of the Application and your ongoing account, to provide ongoing support services, to monitor the usage of our Service, and to customise the user experience.

● For the performance of a contract: to manage and administer our agreement with you, and provide the content, functions and services offered in the Application.

● To contact you: to contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as push notifications regarding updates, developments, features or informative communications related to the Application.

● Usage analysis: to gain user insights and analysis to enable us to identify usage trends, to determine the effectiveness of Application features, and to evaluate and improve the Application.

● Aggregated data: creating anonymised, aggregated data reports strictly for research, educational and scientific purposes, for example to assist us with evaluating the effectiveness of music as a therapy.

We may share your personal information in the following situations:

● Service providers: We may share your personal information with third parties which provide services to us, such as web hosting, customer relationship management, performance analysis, or payment processing;

● Business transfers: in connection with, or during negotiations of, any merger, sale, financing, or acquisition of all or a portion of our business to another company;

● With other users: if the Application contains functionality which allows you to share personal data on the Application, such data may be viewed by other users;

● Legal requirements: if we believe, in good faith, that we are required to share your information with a third party such as a regulator or court in order to comply with a law, regulation, legal process or court order, or it is reasonably necessary to enforce our legal rights in relation to your access and use of our Application, or to prevent or investigate possible wrongdoing, or protect personal safety in connection with the Service;

● With your consent: We may disclose your personal data for any other purpose with your consent. For example, if you consent, we may share analysis of your usage of the Application with a health or care organisation of which you are a resident or member, or a family member.

We will not store or collect your payment card details or financial information. That information is provided directly to our third-party payment processor, Stripe. Stripe uses your personal data in accordance with Stripe’s Privacy Policy, which can be viewed at https://stripe.com/us/privacy

We may use your personal data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You can, at any time, opt out of receiving marketing material from us by contacting us using the method set out below or, where we have sent you electronic marketing materials, by using the unsubscribe link within the communication. You agree and acknowledge that even if you opt out of receiving marketing material, we will still send you essential information that we are required to send you relating to the Application.

Third party service providers which process personal information on our behalf are only engaged to assist us with providing and enhancing our Service. These providers are only granted access to personal data to the extent required to provide their services for us and strictly in accordance with our instructions, this Privacy Policy, and applicable privacy laws.

We will comply with our obligations under applicable Data Protection Laws when engaging service providers. Without limitation, we take reasonable steps to ensure that these organisations comply with regulations relating to the transfer of personal data and have technical and organisational security measures required to protect personal information.

Our use of tracking technologies and cookies

We may use cookies, web beacons, pixels, log files and other technologies to collect information about visitors to our Sites and users of our Service. This may include:

Necessary cookies - cookies which are essential to provide you with the Service and to enable you to use some of its features.
Functional cookies - these cookies improve the functionality and personalisation of our Service. For example, these cookies may be used to remember that you have previously logged in to the Application and to remember your preferences.
Performance cookies – these cookies allow us to recognise and count visits to our Service and see how users navigate our Service. This helps to improve how our Service works.

How long we hold personal data

We will retain personal data only for as long as is necessary to provide access to our Service and for the purposes set out in this Privacy Policy. We will retain and use personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We may retain and use anonymous and aggregated information for product and service improvement, and research and education purposes.

We will delete personal data when lawfully requested in accordance with applicable Data Protection Laws.

Storage, security and transfer of personal data

We will take all reasonable steps to keep personal data in a secure environment in accordance with the requirements of applicable Data Protection Laws. We have implemented measures to protect personal data from unauthorised access, disclosure and use. If you reasonably believe that there has been unauthorised use or disclosure of your personal data, please contact us using the method set out below.

Personal data may be stored and processed at locations outside of your state, province, or country. We will take all steps reasonably necessary to ensure that all transfers of personal data to an organisation or a country have adequate security controls in place.

Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. If we make material variations to our Privacy Policy, we’ll provide you with notice as appropriate under the circumstances.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. You will be deemed to have consented to such variations by your continued use of the Service following such changes being made.

Access to information we hold about you

We will take reasonable steps to ensure that all personal data we hold is accurate, up-to-date and relevant. A person may request access to, review of, corrections of, or erasure of personal data held by us, or complain or object to the use of personal data by us. You can contact us using the methods set out below. We will respond to your request as quickly as possible and in accordance with applicable Data Protection Laws.

Contact Us

If you have any questions about this Privacy Policy or wish to contact us in relation to your personal data, you can contact us:

By email: help@veramusic.com

By visiting this page on our website: https://www.veramusic.com/privacy

Specific information for residents of the European Union and the UK

We are committed to compliance with our obligations under the applicable Data Protection Laws in the EU and the UK.

Data Processor

In most cases we will be a data processor for the purposes of applicable Data Protection Laws and you will be the data controller.

This means we only use the personal data as consented to by you and for the purpose of providing the Service.

Basis for processing

Depending on the context and the purpose of our processing activities we generally process personal information on the basis of consent, or the legitimate interests pursued by us in delivering the Service. Our legitimate interests are further detailed in the section above entitled “How we use personal data”.

Transfer of personal data

Personal information we collect may be transferred and stored on servers located in Australia, the United States, or other countries in which the privacy or data protection laws differ from those of the European Union and the UK. Our international transfer of personal data collected in the European Economic Area and the United Kingdom is governed by Standard Contractual Clauses approved by the European Commission and further recognised by the UK Government for data transfers from the UK under the UK GDPR.

Your rights

Individual users can exercise the following rights:

● the right to be informed;

● the right of access;

● the right to rectification;

● the right to erasure;

● the right to restrict processing;

● the right to data portability;

● the right to object to processing; and

● rights in relation to automated decision making and profiling.

We will enable you to exercise these rights in accordance with the GDPR, or UK GDPR, as applicable.

You can contact us using the method set out above in this Privacy Policy.

Specific information for residents in California

California residents have a right to knowledge, access, and deletion of their personal information under the CCPA. California residents also have a right to opt out of the sale of their personal information by a business and a right not to be discriminated against for exercising one of their California privacy rights.

Collection and use of personal information

We may collect and use personal information for business purposes. The types of personal information we collect, and our use of personal information is specified above in this Privacy Policy. See sections entitled “Types of personal data we collect” and “How we use personal data”.

No sale of personal information

California residents have the right to opt out of the sale of their personal information. We do not sell the personal information of users to third parties and we ensure that our service providers do not sell that personal information to third parties. The types of third party service providers we may engage, and the purposes of such services, are specified above in this Privacy Policy in the section entitled, “How we use personal data”.

No collection of personal information of children without consent

We do not knowingly permit children under the age of 13 to create an account or provide us with personal information.

If you believe we have collected information from a child under the age of 13, please contact us using the method set out above in this Privacy Policy.

Right to know, access and delete personal information

California residents (or their agents) have certain rights to request access to or deletion of their personal information in accordance with the CCPA. You can do this by contacting us using the method set out above in this Privacy Policy. We may require you to take certain steps to verify your identity.

Do not track

We do not track our customers over time and across third party websites to provide targeted advertising and therefore we do not respond to Do Not Track (DNT) signals.

You may also contact us using the method set out above in this Privacy Policy.

You will not be discriminated against for exercising your rights under the CCPA or other applicable Data Protection Laws.