Last Updated: 06 August 2025

Privacy Policy

3DICOM Viewer is a product/service developed and delivered by Singular Health Pty Ltd, part of the Singular Health Group which includes Singular Health Pty Ltd and Singular Health Group Limited. This privacy policy will explain how our organization uses the personal data we collect from you when you use our website and the 3DICOM software.

What data do we collect?

3DICOM Viewer collects the following data:

• Personal identification information (Name, email address, phone number, etc.)
• Usage Meta-Data (Number of scans loaded, sharing, tools used, time spent per scan etc.)
• Medical scans that may reveal medical data as well as DICOM tags. (For registered users only).
• Name and Public Profile, Email, and Profile Picture from your Google Account (if using Google Single Sign On (SSO)).

The scope of the information collected from Google is limited to the usage of the Name, Email, and/or Profile Picture associated with your Google Account and is detailed below:

Your name and Public Profile is used to personalise your experience and to ensure a personalised, human readable identifier within the software when using the collaborative features and/or scan sharing offered by 3DICOM Viewer.

Your email is used to allow for necessary account creation, maintenance, ongoing services, marketing, and legal notices to be communicated to your nominated email address.

The medical scans that may reveal medical data, as well as DICOM tags, are uploaded by you if you want to use our core features. The DICOM tags are metadata that may be contained by the scans you upload. If you want to know more about DICOM tags, you can find additional information here.

Finally, your profile picture is used to further personalise your experience and provide visual verification for other users in collaborative sessions.

How do we collect your data?

You directly provide 3DICOM Viewer with most of the data we collect. We collect data and process data when you:

• Register online or place an order for any of our products or services;
• Voluntarily complete a customer survey or provide feedback on any of our message boards or via email;
• Use or view our website via your browser’s cookies; or,
• Use our 3DICOM Viewer software.

3DICOM Viewer may also receive your data indirectly from the following sources:

• Google Analytics, Google Ads, and Facebook or other advertisers.
• SSO / OAuth.

How will we use your data?

3DICOM Viewer collects your data so that we can:

• Process your order,
• Email you with further details, instructions for use for 3DICOM and special offers on other products and services we think you might like.
• Further improve our software products/services using only aggregated and anonymized meta-data.

When 3DICOM Viewer processes your order, it may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases.

How do we store your data?

3DICOM Viewer securely stores your data at https://3dicomviewer.com which is HTTPS encrypted and maintained on a secure AWS server, and our internal server.
3DICOM Viewer will keep your personal and cookie data for up to 3 years unless you ask us to delete it. Once this time period has expired, we will delete your data.

Marketing

3DICOM Viewer would like to send you information about products and services of ours that we think you might like, as well as those of our partner companies.

• Singular Health Pty Ltd,
• Singular Health Group Ltd.

If you have agreed to receive marketing, you may always opt out at a later date.

You have the right at any time to stop 3DICOM from contacting you for marketing purposes.

You consent to still receive essential communications relating to your account, security, service updates, or other critical operational matters. These emails are necessary for the proper functioning of our services and cannot be unsubscribed from as they are not promotional in nature.

If you no longer wish to be contacted for marketing purposes, please click here.

What are your data protection rights?

3DICOM Viewer would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The Right to Access – You have the right to request 3DICOM Viewer for copies of your personal data. We may charge you a small fee for this service.

The Right to Rectification – You have the right to request that 3DICOM Viewer correct any information you believe is inaccurate. You also have the right to request 3DICOM Viewer to complete the information you believe is incomplete.

The Right to Erasure – You have the right to request that 3DICOM Viewer erase your personal data, under certain conditions.

The Right to Restrict Processing – You have the right to request that 3DICOM Viewer restrict the processing of your personal data, under certain conditions.

The Right to Object to Processing – You have the right to object to 3DICOM Viewer’s processing of your personal data, under certain conditions.

The Right to Data Portability – You have the right to request that 3DICOM Viewer transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: support@3dicom-support

Call us at: 1300 167 795

Cookies & Local Storage

Cookies are text files placed on your computer, and Local Storage is a way for websites to store larger amounts of data directly on a user’s browser, including both localStorage (persistent) and sessionStorage (temporary).  They are used to collect standard Internet log information and visitor behavior information. When you visit our website and use our software, we may collect information from you automatically through cookies or similar technology.

How do we use Cookies & Local Storage?

3DICOM Viewer uses them in a range of ways to improve your experience on our website and in the software, including:

Analyzing the functionality that you use to interact with your data.

Keeping you signed in.

Understanding how you use our website and software.

What types of cookies do we use?

There are a few different types of them, however, our website & software uses:

Functionality – 3DICOM Viewer uses them so that we recognize you on our website and software and remember your previously selected preferences and meta-data. These could include what language you prefer and the location you are in. A mix of first-party and third-party cookies are used.

Advertising – 3DICOM Viewer uses them to collect information about your visit to our website and software, the content you viewed, the links you followed and functionality you used and information about your browser, device, and your IP address. 3DICOM Viewer sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.

How to manage Cookies & Local Storage

You can set your browser not to accept Cookies & Local Storage, and the above website tells you how to remove the collected data from your browser. However, in a few cases, some of our website features may not function as a result.

Privacy policies of other websites

The 3DICOM Viewer website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

3DICOM Viewer keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on the 06 of August 2025.

How to contact us

If you have any questions about 3DICOM Viewer’s privacy policy, the data we hold on you, or if you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: [email protected]

Call us: 1300 167 795

Or write to us at: Singular Health Pty Ltd,
E3/661 Newcastle Street, Leederville 6007
Western Australia, Australia

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that 3DICOM Viewer has not addressed your concern in a satisfactory manner, you may contact the Office of the Australian Information Commissioner (OAIC).

Website: https://www.oaic.gov.au/about-us/contact-us/

Address: GPO Box 5218 Sydney NSW 2001

Jurisdiction Specific Notices

(These notices apply for the residents listed below)

ADDITIONAL NOTICE TO EU RESIDENTS 

If you are an EU resident under the General Data Protection Regulation, you are granted certain fundamental rights when data about you is processed. We will ensure that we reach out without undue delay (no more than one month) when you submit a request related to exercising your data subject rights. Although uncommon, when applicable for official or legal reasons, we may be unable to address the specific request you make regarding your rights, or we may delay our response by up to two additional weeks months. 

Additionally, if a request is clearly unreasonable or overly burdensome, we may either: 

• impose a reasonable fee that reflects the administrative costs of fulfilling the request; or 
• decline to process the request. 

In this scenario, will we inform you of the reasons we believe your request is the manifestly unfounded or excessive character of the request. 

As a data subject, you have the right to: 

• Request confirmation of whether we process Personal Data relating to you, and if so, to request a copy of that Personal Data; 
• Request that we rectify or update your Personal Data that is inaccurate, incomplete, or outdated;      
• Request that we erase your Personal Data in certain circumstances provided by law;
• Request that we restrict the use of your Personal Data in certain circumstances, such as while we consider another request that you have submitted (including a request that we make an update to your Personal Data); 
• Request that we export your Personal Data that you have provided us to another company, where technically feasible; 
• Where the processing of your Personal Data is based on your previously given consent, you have the right to withdraw your consent at any time; and/or: 
  • In some cases, you may also have the right to object to the processing of your Personal Data. 
  • The right to non-discrimination is based upon your exercise of these rights. 

If you believe that you have not received a satisfactory response from us, you may have the right under applicable laws to consult with the data protection authority in your area country. 

To ensure your protection, we might need to confirm your identity prior to addressing your request. This could involve verifying that the email address from which you submit the request aligns with the one we have on record. Additionally, we may require further information for identity verification, such as a government-issued ID. You have the option to exercise these rights yourself or designate a legal representative to submit requests on your behalf. 

ADDITIONAL NOTICE TO CALIFORNIA RESIDENTS 

This section applies only to California residents. Pursuant to the CCPA, please see the CCPA Privacy Notice which discloses the categories of personal information collected, purpose of processing, source, categories of recipients with whom the personal information is shared for a business purpose, whether the personal information is sole or shared, the retention period, and how to exercise your rights as a California resident. 

ADDITIONAL NOTICE TO COLORADO RESIDENTS 

Under the Colorado Privacy Act (“CPA”) if you are a resident of Colorado, acting only as an individual or household context (and not in a commercial or employment context, as a job applicant or as a beneficiary of someone acting in an employment context), your rights with respect to your personal data are described below. 
 
“Personal Data” as defined in the CPA means: “information that is linked or reasonably linkable to an identified or identifiable individual” and does not include any of the following: publicly available information, de-identified or aggregated consumer, and information excluded from the CPA scope, such as: Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPPA) or 42 CFR Part 2- “Confidentiality Of Substance Use Disorder Patient Records”, Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or and the Driver’s Privacy Protection Act of 1994, Children’s Online Policy Protection Act of 1998 (COPPA), Family Educational Rights and Privacy Act of 1974, national Security Exchange Act of 1934, higher education data and employment data. 
Sensitive Data includes (i) racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life or sexual orientation; (ii) Genetic or biometric data that can be processed to uniquely identify an individual; or (iii) child data. We do not process or collect any sensitive data. 
 
Your Rights Under CPA: 

Herein below, we will detail how consumers can exercise their rights, and appeal such decision, or if  we sell the personal data, or sell the personal data for advertising and how to opt-out. We do not sell your Personal Data. 
 
Right to Access/ Right to Know – you have the right to confirm whether and know the Personal Data we collected on you. You can exercise your right by reviewing this Privacy Policy, in case you would like to receive the Personal Data please contact us to receive a copy of your data. 
 
Right to Correction – you have the right to correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. You can exercise this right directly through your account or by contacting us. 
 
Right to Deletion – you have the right to delete the Personal Data, this right is not absolute and in certain circumstances we may deny such request. We may deny your deletion request, in full or in part, if retaining the information is necessary for us or our service provider(s) for any of the following reasons:  

1. Complete the transaction for which we collected the Personal Data, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you;  
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;  
3. Debug products to identify and repair errors that impair existing intended functionality;  
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;  
5. Comply with the law or legal obligation;  
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;  
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;  
8. Make other internal and lawful uses of that information that are compatible with the context in which you provided it. We will delete or de-identify personal information not subject to one of these exceptions from our records and will direct our processors to take similar action. If you would like to delete your Personal Data please contact [email protected].  
    

Right to Portability – you have the right to obtain the Personal Data in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. If you would like to receive the Personal Data please contact us. To receive a copy of your data we will select a format to provide your Personal Data that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance. 
 
Right to Opt-Out from Selling Personal Data – you have the right to opt out of the sale of your Personal Data for the purposes of targeted advertising, sale to a third party for monetary gain, or for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you or any other consumer. You may authorize another person acting on your behalf to opt out, . We do not sell your Personal Data, so we do not offer an opt out. 

Right to Opt-Out from Targeted Advertising – you have the right to opt out of the sale of your Personal Data for the purposes of targeted advertising, sale to a third party for monetary gain, or for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you or any other consumer.  We do not profile you, thus we do not need to provide an opt-out. 
 
Right to Appeal – if we decline to take action on your request, we shall so inform you without undue delay, within 45 days of receipt of your request. The notification will include a justification for declining to take action and instructions on how you may appeal. If we deny the appeal, you may contact the Colorado Attorney General using this link: https://coag.gov/office-sections/consumer-protection/  or (720) 508-6000. Not more than 60 days after receipt of an appeal we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reason for the decisions. 
Duty not to violate the existing laws against discrimination or non-discrimination – such discrimination may include denying a good or service, providing a different level or quality of service, or charging different prices. We do not discriminate our Users. 
 
How to Submit a Request Under CPA? 

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your Personal Data. If request is submitted by someone other than the consumer about whom information is being requested, proof of authorization (such as power of attorney or probate documents) will be required. 
 
We will respond to your request within 45 days after receiving and verifying your request. We only accept two requests in a twelve-month period. We reserve the right to extend the response time by an additional 45 days when reasonably necessary and provided consumer notification of the extension is made within the first 45 days. 

 If we refuse to take action on a request, you may appeal our decision within a reasonable period time by contacting us at: [email protected] and specifying you wish to appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.  

If the appeal is denied, you may submit a complaint as follows: Colorado AG at https://coag.gov/file-complaint/ 
 
Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. 

ADDITIONAL NOTICE TO VIRGINIA RESIDENTS 

Under the Virginia Consumer Data Protection Act, as amended (“VCDPA”) if you are a resident of Virginia acting in an individual or household context (and not in an employment or commercial context), you have the following rights with respect to your Personal Data. 

“Personal data” means any information that is linked or reasonably linkable to an identified or identifiable natural person. “Personal data” does not include de-identified data or publicly available information. Personal Data does not include de-identified data or publicly available data, and information excluded from the scope such as: HIPAA, GBPA, non-profit entities, higher education, employment data and FCRA, Driver’s Privacy Protection Act of 1994, Family Educational Rights and Privacy Act, Farm Credit Act. 
 
The categories of personal data processed, purpose of processing, categories of personal data shared with third parties, categories of third parties with whom data is shared, your Rights are detailed above in the sections of this Policy. 
 
How to Submit a Request Under VCDPA? 

We shall respond to your request within 45 days of receipt. We reserve the right to extend the response time by an additional 45 days when reasonably necessary and provided consumer notification of the extension is made within the first 45 days. If we refuse to take action on a request, you may appeal our decision within a reasonable period time by contacting us at: [email protected]  and specifying you wish to appeal.  

 Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may submit a complaint as follows: Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform 
 
We shall provide information in response to your request free of charge, up to twice annually, unless requests are manifestly unfounded, excessive or repetitive. If we are unable to authenticate your request using commercially reasonable efforts, we may request additional information reasonably necessary to authenticate you and your request. If we cannot authenticate you and your request we will not be able to grant your request. 

ADDITIONAL NOTICE TO CONNECTICUT RESIDENTS 

 Under the Connecticut Data Privacy Act, Public Act. No. 22-14 (the “CDPA”) if you are a resident of Connecticut, acting in an individual or household context (and not in a commercial or employment context or as a representative of business, non-profit or governmental entity), your rights with respect to your personal data are described below. 
 
“Personal data” means any information that is linked or reasonably linkable to an identified or identifiable individual. It does not include de-identified data or publicly available information. If further does not include information excluded from the scope such as: HIPAA, GBPA, non-profit entities, higher education, employment data and FCRA, Driver’s Privacy Protection Act of 1994, Family Educational Rights and Privacy Act, Farm Credit Act. 
 
The categories of personal data processed, purpose of processing, categories of personal data shared with third parties, categories of third parties with whom data is shared, your Rights are detailed above in the sections of this Policy. 
 
How to Submit a request under CDPA? 

We shall respond to your request within 45 days of receipt. The response period may be extended once by 45 additional days when reasonably necessary, taking into account the complexity and number of requests and we inform you of such extension within the initial 45 days response period, together with the reason for the extension. 
 
If we decline to take action on your request, we shall so inform you without undue delay, within 45 days of receipt of your request. The notification will include a justification for declining to take action and instructions on how you may appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may submit a complaint to the Connecticut Attorney General at link: https://www.dir.ct.gov/ag/complaint/ or (860) 808-5318. 
 
We shall provide information in response to your request free of charge, up to twice annually, unless requests are manifestly unfounded, excessive or repetitive. If we are unable to authenticate your request using commercially reasonable efforts, we may request additional information reasonably necessary to authenticate you and your request. If we cannot authenticate you and your request, we will not be able to grant your request. 

ADDITIONAL NOTICE TO UTAH RESIDENTS  

Under the Utah Consumer Privacy Act (the “UCPA”) if you are a resident of Utah, acting in an individual or household context (and not in a commercial or employment context) your rights with respect to your Personal Data are described below. “Personal Data” refers that is linked or reasonably linkable to an identifiable individual, and does not include de-identified data and publicly available data.  
 
The categories of personal data processed, purpose of processing, categories of personal data shared with third parties, categories of third parties with whom data is shared, your Rights are detailed above in the sections of this Policy.  

ADDITIONAL NOTICE TO NEVADA RESIDENTS 

Nevada law allows Nevada residents to opt out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. We currently do not sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt out of sales and will record your instructions and incorporate them in the future if our policy changes. You may send opt-out requests to [email protected].

ADDITIONAL NOTICE TO FLORIDA RESIDENTS

 Under the Florida Digital Bill of Rights (FDBR), if you are a resident of Florida acting in an individual or household context (and not in an employment or commercial context), you are granted specific rights with respect to your personal data. 

“Personal Data” means information that is linked or reasonably linkable to an identified or identifiable individual.  

Your rights under FDBR include: 

• Right to Confirm and Access – You have the right to confirm whether we are processing your Personal Data and to access such data. 
• Right to Correct – You may request the correction of inaccuracies in your Personal Data. 
• Right to Delete – You may request deletion of Personal Data collected from or about you, subject to certain legal and operational exceptions. 
• Right to Obtain a Copy – You have the right to receive a copy of your Personal Data in a portable and technically feasible format. 
• Right to Opt Out – You may opt out of: 
  • Targeted advertising 
  • Sale of personal data 
  • Profiling in furtherance of decisions that produce legal or similarly significant effects 

We do not sell your Personal Data or use it for profiling that results in legal or significant decisions about you. We also do not discriminate against users who exercise these rights.