Privacy Policy

Privacy Policy

Last updated: 29th September 2026

Last updated: 29th September 2026

1. Introduction

Hethena is a health technology brand operated by United Hero Investments Ltd, a company incorporated in the Republic of Seychelles. Our products and services are not yet live. In Australia, our current activities are limited to: informational web pages and advertising, an email waitlist, and invitations to take part in research surveys and interviews.

This Privacy Policy explains how we handle personal information collected from people in Australia in the course of those activities, in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), including the Notifiable Data Breaches (NDB) scheme.

We do not currently provide any health service, collect medical records or laboratory results, or process payments. If that changes, this policy will be updated and republished before any such collection begins. Where required by law, we will also provide a separate collection notice, and obtain any required consent, before collecting or using any new personal information — including sensitive information.

2. Who we are

Hethena is operated by United Hero Investments Ltd, a company incorporated in the Republic of Seychelles (registered address: Suite 23, 1st Floor, Eden Plaza, Eden Island, Mahé, Republic of Seychelles). We do not have an Australian office or corporate entity, and we are not registered in Australia. Personal information you provide is handled by our operating team — see Section 7 (Overseas handling) for details.

3. What we collect

We collect only the following, and only directly from you:

  • Contact information: your email address (and name, if you choose to provide it) when you join our waitlist or register interest in research participation.

  • Research responses: your answers to screening questions on our landing pages, and your answers to questions asked during interviews. Screening answers are collected without your name or email address and are not linked to your waitlist sign-up. Some questions may relate to your health or wellbeing. Health-related answers are sensitive information under the Privacy Act: we collect them only with your express consent, given at the point of collection. You may decline any question asked during an interview. A small number of screening questions are required to determine eligibility; if you prefer not to answer them, you can choose not to submit the form.

  • Interview recordings and transcripts: with your consent, we record research interviews and produce a written transcript of them. Taking part, answering health-related questions, recording and transcription are asked as separate consents at the start of the interview, and we do not record unless you agree to each one. We then produce a cleaned copy of the transcript with identifying details removed — including names, employer, location, and specific diagnoses, medications and test results — and that cleaned copy is the version our research team works from. Section 6 explains where each copy is held and Section 10 explains how long we keep it.

  • Technical information: analytics data (pages visited, device and browser type) collected via cookies — only if you consent through our cookie banner (Section 8).

We do not purchase personal information, collect it from data brokers, or collect it from third parties. Our waitlist and research activities are open only to people aged 18 or over; we do not knowingly collect information from anyone under 18.

4. How we use your information

  • Waitlist: to send you launch updates you have opted in to.

  • Research: survey and interview responses, recordings and transcripts are used for internal research and product development only. They are never published, never shared outside our team, and never used for marketing or advertising. Health-related answers are never shared with advertising platforms.

  • Site operation and improvement: consented analytics data helps us understand how our pages are used.

Where we collect information for more than one purpose (for example, research participation and waitlist sign-up), we will tell you all of those purposes before you submit. Health-related answers always require a separate, express consent and are never used for marketing or shared with advertising platforms.

5. Advertising

We may advertise on third-party platforms, including Meta. Our targeting uses only the interest and demographic tools those platforms provide — we do not upload contact lists or build custom audiences from personal information you have given us. Our web pages do not host the Meta Pixel or similar third-party advertising trackers. Data the advertising platform itself collects when you view or click an ad is governed by that platform’s own privacy policy.

6. Disclosure of personal information

We never sell or rent your personal information. We disclose it only to service providers that support our operations, under contracts that restrict them to processing on our instructions:

  • Google (Google Workspace, including Google Meet, Google Drive, Google Docs and Gemini): scheduling of research interviews; recording and automated transcription of interviews you have consented to; storage of those recordings and transcripts; and the removal of identifying details from a transcript before it is used by our research team. Recordings and raw transcripts are held in our Google Workspace account and are not transferred to any other provider.

  • Notion Labs, Inc. (USA): management of our research programme, and storage of the de-identified interview transcript and our coded research notes. Full recordings and raw transcripts are not stored there. Notion stores this information in the United States, and engages its own service providers for hosting, infrastructure and support located in the United States, the European Union, Japan, South Korea, India and Australia.

  • Microsoft Azure (Australia region): cloud hosting and storage.

  • Framer: hosting of our web pages and delivery of form submissions to our systems. Framer does not retain your submissions. Framer stores customer data redundantly in Amazon Web Services facilities in the United States, Europe and the Asia-Pacific region.

  • Google (Google Analytics 4, via Google Tag Manager): website analytics, active only after cookie consent.

  • Resend (USA) and Brevo (primarily France/EU): email delivery for waitlist and launch updates. Brevo processing may also involve Brevo Group affiliates in Germany, India, the USA and Austria.

We may also disclose personal information where required by law.

7. Overseas handling of your information

Your interview recording and the full transcript of it are held by Google in our Google Workspace account, and Google may store and process them in the United States and in other countries where Google operates. The de-identified transcript and our coded research notes are stored in the United States by our research operations provider (Section 6). Our Azure cloud hosting is located in Australia. Hethena’s operating company is incorporated in the Republic of Seychelles, and your information is accessed and processed by our team members located in Australia, Singapore, Sri Lanka, the Philippines and Indonesia. Some of our other service providers also process personal information outside Australia, including in the United States, the European Union and elsewhere in the Asia-Pacific region (Section 6). Before disclosing personal information overseas we take reasonable steps, including contractual safeguards and access controls, to ensure it is handled consistently with the Australian Privacy Principles.

8. Cookies and analytics

Our pages use a cookie consent banner. Analytics cookies (Google Analytics 4, loaded via Google Tag Manager) are set only after you consent, and you can decline or withdraw consent at any time without affecting your ability to use our pages. We do not use advertising cookies.

9. Security

We protect personal information using encryption in transit, role-based access controls, and least-privilege access for our team. Interview recordings, raw transcripts and the link between a participant and their interview are held in restricted-access storage separate from the de-identified transcripts our wider research team works with. No internet transmission is completely secure, but we take reasonable steps appropriate to the small scope of data we currently hold.

10. Data retention

  • Waitlist contact details: retained until you ask us to remove you (Section 12), or until our launch communications conclude, whichever is earlier.

  • Screening responses: your answers to the screening questions are collected without your name or email address, and are not linked to your waitlist sign-up or to any other record that identifies you. Because they do not identify you, we keep them as de-identified research material and review them at the close of each research round, rather than setting a fixed deletion date. If we ever collect screening answers together with your contact details, we will delete them within 90 days.

  • Interview recordings and full transcripts: deleted at the close of the relevant research round, and in any case within 12 months of the interview.

  • De-identified transcripts and coded research notes: retained as de-identified research material and reviewed at the close of each research round. Because identifying details have been removed, these are not used to identify you.

  • On request, we will delete your personal information sooner (Section 12).

When we delete material held with a service provider, deletion begins when we issue the instruction and the provider’s own removal process may take up to a further 180 days to complete. Residual encrypted copies may persist temporarily in system backups before being overwritten.

11. Data breach response

If an eligible data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the NDB scheme, including the nature of the breach, the information involved, and recommended steps.

12. Access, correction, and complaints

  • Access and correction: you may request access to, or correction of, your personal information by contacting us below. We aim to respond within 30 days.

  • Deletion: you may ask us to delete your information, including your interview recording and transcript, and we will do so unless a legal obligation requires retention.

  • Complaints: if you believe we have breached your privacy, contact us first and we will respond promptly. If you are not satisfied with our response, you may lodge a complaint with the OAIC (oaic.gov.au).

13. Updates to this policy

We may update this policy to reflect changes in law or our practices. The “last updated” date will always be shown.

14. Contact us

For questions, access or correction requests, or complaints, contact our privacy contact:

privacy@hethena.com

Post: United Hero Investments Ltd, Suite 23, 1st Floor, Eden Plaza, Eden Island, Mahé, Republic of Seychelles

This mailbox is actively monitored.

Hethena

How It Works

How It Works

How It Works

What's Included

What's Included

What's Included

Membership Login

Membership Login

Membership Login

Company

Our Why

Our Why

Our Why

Join The Team

Join The Team

Join The Team

[We're hiring!]

[We're hiring!]

[We're hiring!]

Contact Us

Contact Us

Contact Us

FAQs

FAQs

FAQs

Partnership

For Creators

For Creators

For Creators

For Partners

For Partners

For Partners

For Organisations

For Organisations

For Organisations

Connect

Instagram

Instagram

Instagram

Linkedin

Linkedin

Linkedin

Email Us

Email Us

Email Us

Copyright © Hethena. All rights reserved.

Terms of Service

Privacy Policy

Cookie preferences

Hethena

How It Works

How It Works

How It Works

What's Included

What's Included

What's Included

Membership Login

Membership Login

Membership Login

Company

Our Why

Our Why

Our Why

Join The Team

Join The Team

Join The Team

[We're hiring!]

[We're hiring!]

[We're hiring!]

Contact Us

Contact Us

Contact Us

FAQs

FAQs

FAQs

Partnership

For Creators

For Creators

For Creators

For Partners

For Partners

For Partners

For Organisations

For Organisations

For Organisations

Connect

Instagram

Instagram

Instagram

Linkedin

Linkedin

Linkedin

Email Us

Email Us

Email Us

Copyright © Hethena. All rights reserved.

Terms of Service

Privacy Policy

Cookie preferences

Privacy Policy

Last updated: 29th September 2026

1. Introduction

Hethena is a health technology brand operated by United Hero Investments Ltd, a company incorporated in the Republic of Seychelles. Our products and services are not yet live. In Australia, our current activities are limited to: informational web pages and advertising, an email waitlist, and invitations to take part in research surveys and interviews.

This Privacy Policy explains how we handle personal information collected from people in Australia in the course of those activities, in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), including the Notifiable Data Breaches (NDB) scheme.

We do not currently provide any health service, collect medical records or laboratory results, or process payments. If that changes, this policy will be updated and republished before any such collection begins. Where required by law, we will also provide a separate collection notice, and obtain any required consent, before collecting or using any new personal information — including sensitive information.

2. Who we are

Hethena is operated by United Hero Investments Ltd, a company incorporated in the Republic of Seychelles (registered address: Suite 23, 1st Floor, Eden Plaza, Eden Island, Mahé, Republic of Seychelles). We do not have an Australian office or corporate entity, and we are not registered in Australia. Personal information you provide is handled by our operating team — see Section 7 (Overseas handling) for details.

3. What we collect

We collect only the following, and only directly from you:

  • Contact information: your email address (and name, if you choose to provide it) when you join our waitlist or register interest in research participation.

  • Research responses: your answers to screening questions on our landing pages, and your answers to questions asked during interviews. Screening answers are collected without your name or email address and are not linked to your waitlist sign-up. Some questions may relate to your health or wellbeing. Health-related answers are sensitive information under the Privacy Act: we collect them only with your express consent, given at the point of collection. You may decline any question asked during an interview. A small number of screening questions are required to determine eligibility; if you prefer not to answer them, you can choose not to submit the form.

  • Interview recordings and transcripts: with your consent, we record research interviews and produce a written transcript of them. Taking part, answering health-related questions, recording and transcription are asked as separate consents at the start of the interview, and we do not record unless you agree to each one. We then produce a cleaned copy of the transcript with identifying details removed — including names, employer, location, and specific diagnoses, medications and test results — and that cleaned copy is the version our research team works from. Section 6 explains where each copy is held and Section 10 explains how long we keep it.

  • Technical information: analytics data (pages visited, device and browser type) collected via cookies — only if you consent through our cookie banner (Section 8).

We do not purchase personal information, collect it from data brokers, or collect it from third parties. Our waitlist and research activities are open only to people aged 18 or over; we do not knowingly collect information from anyone under 18.

4. How we use your information

  • Waitlist: to send you launch updates you have opted in to.

  • Research: survey and interview responses, recordings and transcripts are used for internal research and product development only. They are never published, never shared outside our team, and never used for marketing or advertising. Health-related answers are never shared with advertising platforms.

  • Site operation and improvement: consented analytics data helps us understand how our pages are used.

Where we collect information for more than one purpose (for example, research participation and waitlist sign-up), we will tell you all of those purposes before you submit. Health-related answers always require a separate, express consent and are never used for marketing or shared with advertising platforms.

5. Advertising

We may advertise on third-party platforms, including Meta. Our targeting uses only the interest and demographic tools those platforms provide — we do not upload contact lists or build custom audiences from personal information you have given us. Our web pages do not host the Meta Pixel or similar third-party advertising trackers. Data the advertising platform itself collects when you view or click an ad is governed by that platform’s own privacy policy.

6. Disclosure of personal information

We never sell or rent your personal information. We disclose it only to service providers that support our operations, under contracts that restrict them to processing on our instructions:

  • Google (Google Workspace, including Google Meet, Google Drive, Google Docs and Gemini): scheduling of research interviews; recording and automated transcription of interviews you have consented to; storage of those recordings and transcripts; and the removal of identifying details from a transcript before it is used by our research team. Recordings and raw transcripts are held in our Google Workspace account and are not transferred to any other provider.

  • Notion Labs, Inc. (USA): management of our research programme, and storage of the de-identified interview transcript and our coded research notes. Full recordings and raw transcripts are not stored there. Notion stores this information in the United States, and engages its own service providers for hosting, infrastructure and support located in the United States, the European Union, Japan, South Korea, India and Australia.

  • Microsoft Azure (Australia region): cloud hosting and storage.

  • Framer: hosting of our web pages and delivery of form submissions to our systems. Framer does not retain your submissions. Framer stores customer data redundantly in Amazon Web Services facilities in the United States, Europe and the Asia-Pacific region.

  • Google (Google Analytics 4, via Google Tag Manager): website analytics, active only after cookie consent.

  • Resend (USA) and Brevo (primarily France/EU): email delivery for waitlist and launch updates. Brevo processing may also involve Brevo Group affiliates in Germany, India, the USA and Austria.

We may also disclose personal information where required by law.

7. Overseas handling of your information

Your interview recording and the full transcript of it are held by Google in our Google Workspace account, and Google may store and process them in the United States and in other countries where Google operates. The de-identified transcript and our coded research notes are stored in the United States by our research operations provider (Section 6). Our Azure cloud hosting is located in Australia. Hethena’s operating company is incorporated in the Republic of Seychelles, and your information is accessed and processed by our team members located in Australia, Singapore, Sri Lanka, the Philippines and Indonesia. Some of our other service providers also process personal information outside Australia, including in the United States, the European Union and elsewhere in the Asia-Pacific region (Section 6). Before disclosing personal information overseas we take reasonable steps, including contractual safeguards and access controls, to ensure it is handled consistently with the Australian Privacy Principles.

8. Cookies and analytics

Our pages use a cookie consent banner. Analytics cookies (Google Analytics 4, loaded via Google Tag Manager) are set only after you consent, and you can decline or withdraw consent at any time without affecting your ability to use our pages. We do not use advertising cookies.

9. Security

We protect personal information using encryption in transit, role-based access controls, and least-privilege access for our team. Interview recordings, raw transcripts and the link between a participant and their interview are held in restricted-access storage separate from the de-identified transcripts our wider research team works with. No internet transmission is completely secure, but we take reasonable steps appropriate to the small scope of data we currently hold.

10. Data retention

  • Waitlist contact details: retained until you ask us to remove you (Section 12), or until our launch communications conclude, whichever is earlier.

  • Screening responses: your answers to the screening questions are collected without your name or email address, and are not linked to your waitlist sign-up or to any other record that identifies you. Because they do not identify you, we keep them as de-identified research material and review them at the close of each research round, rather than setting a fixed deletion date. If we ever collect screening answers together with your contact details, we will delete them within 90 days.

  • Interview recordings and full transcripts: deleted at the close of the relevant research round, and in any case within 12 months of the interview.

  • De-identified transcripts and coded research notes: retained as de-identified research material and reviewed at the close of each research round. Because identifying details have been removed, these are not used to identify you.

  • On request, we will delete your personal information sooner (Section 12).

When we delete material held with a service provider, deletion begins when we issue the instruction and the provider’s own removal process may take up to a further 180 days to complete. Residual encrypted copies may persist temporarily in system backups before being overwritten.

11. Data breach response

If an eligible data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the NDB scheme, including the nature of the breach, the information involved, and recommended steps.

12. Access, correction, and complaints

  • Access and correction: you may request access to, or correction of, your personal information by contacting us below. We aim to respond within 30 days.

  • Deletion: you may ask us to delete your information, including your interview recording and transcript, and we will do so unless a legal obligation requires retention.

  • Complaints: if you believe we have breached your privacy, contact us first and we will respond promptly. If you are not satisfied with our response, you may lodge a complaint with the OAIC (oaic.gov.au).

13. Updates to this policy

We may update this policy to reflect changes in law or our practices. The “last updated” date will always be shown.

14. Contact us

For questions, access or correction requests, or complaints, contact our privacy contact:

privacy@hethena.com

Post: United Hero Investments Ltd, Suite 23, 1st Floor, Eden Plaza, Eden Island, Mahé, Republic of Seychelles

This mailbox is actively monitored.

Hethena

How It Works

How It Works

How It Works

What's Included

What's Included

What's Included

Membership Login

Membership Login

Membership Login

Company

Our Why

Our Why

Our Why

Join The Team

Join The Team

Join The Team

[We're hiring!]

[We're hiring!]

[We're hiring!]

Contact Us

Contact Us

Contact Us

FAQs

FAQs

FAQs

Partnership

For Creators

For Creators

For Creators

For Partners

For Partners

For Partners

For Organisations

For Organisations

For Organisations

Connect

Instagram

Instagram

Instagram

Linkedin

Linkedin

Linkedin

Email Us

Email Us

Email Us

Copyright © Hethena. All rights reserved.

Terms of Service

Privacy Policy

Cookie preferences