Privacy Policy

Last Updated: April 2026

About This Policy

Chris Barnes Wellness (CB Wellness Group Pty Ltd, ABN 42286238230) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information.

We operate under Australian privacy law, including the Privacy Act 1988 and the Australian Privacy Principles (APPs).

Quick Summary:

• We only collect information needed to provide our services
• We never sell your personal data
• You control your information and can access it anytime
• Your genetic and health data receives extra protection

What Information We Collect

Information You Provide to Us

When you use our services, we may collect:

Contact Details:

• Full name
• Email address
• Phone number
• Mailing address

Account Information:

• Username and password
• Payment information (processed securely through Stripe)
• Communication preferences

Health and Genetic Information:

• Genetic test results (DNA analysis)
• Epigenetic test results (biological age markers)
• Health history and symptoms
• Lifestyle information (diet, exercise, sleep)
• Supplement and medication use
• Family health history

Consultation Records:

• Session notes and summaries
• Voxer messages and support communications
• Progress tracking information

Information We Collect Automatically

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website
• Location data (city/region level)

How We Use Your Information

We use your information to:

Provide Our Services:

• Analyse your genetic and epigenetic test results
• Create personalized health protocols
• Deliver coaching sessions and support
• Track your progress over time

Communicate With You:

• Send appointment reminders
• Provide ongoing Voxer support
• Share educational content (with your permission)
• Respond to your questions

Improve Our Business:

• Understand how clients use our services
• Develop new programs and offerings
• Improve our website and user experience

Legal Obligations:

• Comply with Australian health regulations
• Maintain records as required by law
• Respond to legal requests

Special Protection for Genetic and Health Data

Your genetic and health information receives the highest level of protection.

How We Protect This Data:

• Stored on secure, encrypted servers
• Accessible only by Chris Barnes and authorized staff
• Never shared without your explicit written consent
• Kept separate from marketing databases
• Automatically deleted upon request

Important Note: Genetic and epigenetic testing is conducted through third-party laboratories (MyDNA and TruDiagnostic). These labs have their own privacy policies and are required to comply with health data protection laws. We provide you with their privacy policies before testing.

Use of artificial intelligence for dnaction plan generation

As part of our Genetic Blueprint Review and DNAge Coaching service, Chris Barnes Wellness uses an artificial intelligence system to assist in generating personalised DNAction Plans for clients.

The AI system we use:

• Provider: Anthropic PBC, San Francisco, California, USA
• System: Claude (commercial API)
• Purpose: Generating personalised DNAction Plans from client genetic reports and consultation transcripts

How your data is protected:

• Anthropic’s commercial API does not use client data to train AI models — this is confirmed by Anthropic’s published commercial terms of service
• Data sent to the Anthropic API is automatically deleted from Anthropic’s systems within 7 days of processing
• Your data is never sold to third parties by Anthropic or by Chris Barnes Wellness
• Every AI-generated plan is reviewed and approved by Chris Barnes before it is provided to you

Your consent:

Clients are asked to provide explicit written consent for AI-assisted processing of their genetic data before their DNAction Plan is generated. This consent is obtained via a separate consent form provided at the time of your Genetic Blueprint Review booking.

Who We Share Your Information With

We only share your information in specific circumstances:

Testing Laboratories:

• MyDNA (genetic testing) – Australian lab
• TruDiagnostic (epigenetic testing) – USA lab
• We share only information needed for testing

Payment Processing:

• Stripe (payment processor) – handles all payment information
• We never store your full credit card details

Professional Consultants:

• In the future, we may hire additional genetic consultants
• They will only access information needed for your care
• All consultants sign confidentiality agreements

Legal Requirements:

• We may disclose information if required by Australian law
• We will notify you unless prohibited by law

We Never:

• Sell your personal information
• Share your data for marketing purposes
• Give anyone access without your permission

Your Rights and Choices

Under Australian privacy law, you have the right to:

Access Your Information:

• Request copies of all information we hold about you
• We provide this within 30 days at no charge

Correct Your Information:

• Update incorrect or outdated information
• Request changes to your health records

Delete Your Information:

• Request deletion of your personal data
• We retain some information for legal/tax purposes (7 years)
• Genetic results can be permanently deleted

Withdraw Consent:

• Unsubscribe from marketing emails anytime
• Stop Voxer support (though this is part of your program)
• Cancel your account

Complain:

• Contact us first if you have concerns
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992

To Exercise Your Rights: Email chris@chrisbarneswellness.com.au or call 0438 283 952

How We Protect Your Information

Security Measures:

• SSL encryption on our website
• Secure, password-protected servers
• Regular security audits
• Staff trained in privacy protection
• Physical files stored in locked cabinets

Your Responsibility:

• Keep your password secure
• Don’t share your login details
• Use a secure internet connection
• Contact us immediately if you suspect unauthorized access

Reality Check: No system is 100% secure. We take every reasonable precaution, but we cannot guarantee absolute security against determined hackers or system failures.

Data Retention

How Long We Keep Your Information:

Note: The 7-year retention requirement for consultation records applies to certain registered health service providers under Australian law. Chris Barnes Wellness currently applies a 90-day retention policy for genetic and consultation records as a wellness coaching service.

Deletion: After the retention period, we securely delete or anonymize your information.

Overseas Disclosure

Some of your information is stored or processed overseas:

TruDiagnostic (USA):

• Processes epigenetic test samples
• Stores biological age results on US servers
• Complies with US health privacy laws (HIPAA)

Anthropic PBC (USA):

• Processes genetic report and consultation transcript data for DNAction Plan generation
• Data is automatically deleted from Anthropic systems within 7 days of processing
• Anthropic’s commercial API does not use client data for model training
• Anthropic maintains enterprise-grade security and privacy standards

Stripe (USA/Multiple Countries):

• Processes payments globally
• Certified compliant with international data standards

We only use overseas providers who maintain privacy standards similar to or exceeding Australian requirements.

Cookies and Tracking

Our website uses cookies to function properly. For full details, see our separate Cookie Policy.

Essential Cookies: Required for website functionality Analytics Cookies: Help us improve user experience (you can opt out) Marketing Cookies: Used only with your consent

Third-Party Links

Our website may link to other sites (TruDiagnostic, MyDNA, social media). We are not responsible for their privacy practices. Please read their privacy policies.

Children’s Privacy

Our services are for adults 18 and over. We do provide genetic testing for children, but only with full parental consent.

If a parent requests genetic testing for their child:

• Parents maintain full control of the child’s data
• Results are shared only with parents and authorised guardians
• A parent or guardian must be present or represented at all consultations involving a child
• Genetic reports, consultation records, and DNAction Plans for child clients are subject to the same 90-day retention and deletion policy as adult clients. We recommend parents download and retain permanent copies of all documents.
• Parents may request deletion of their child’s data at any time by contacting chris@chrisbarneswellness.com.au
• Once a child reaches 18 years of age, they may contact us directly to access, update, or request deletion of their own records

Changes to This Policy

We review this policy regularly and update it as needed.

How You’ll Know About Changes:

• Updated “Last Updated” date at the top
• Notification via email for significant changes
• Prominent notice on our website

Continued use of our services after changes means you accept the updated policy.

Contact Us

Questions About Privacy?

Email: chris@chrisbarneswellness.com.au
Phone: 0438 283 952
Mail: CB Wellness Group Pty Ltd, Gold Coast, Queensland, Australia

Complaints: We take privacy seriously. If you’re not satisfied with our response, contact the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

This policy is designed to be clear and accessible. If anything is unclear, please contact us.