Tesa Cloud – Privacy Policy

Last updated: November 2025
Issued by: Tesa Medical Inc.
Governing law: New South Wales, Australia

1. Introduction

This Privacy Policy explains how Tesa Medical Inc. (“Tesa”, “we”, “us”, “our”) collects, uses, and protects information within the Tesa Cloud platform.

2. Who This Policy Applies To

It applies to surgeons (Primary Users) and authorised Sub-Users (assistants, nurses, admin staff, or sales reps). Patients do not access the app directly, though limited patient data are processed for communication and reporting.

3. Information We Collect

• User information (name, email, role, device purchase verification)
• Patient identifiers (first name, initial of surname, year of birth, email/mobile, EHR ID)
• Device and procedure data (tension readings, timestamps, ligament type)

4. How We Use Information

• To deliver and improve the Tesa Cloud service
• To facilitate secure communication among authorised users
• To generate intra- and post-operative reports
• To integrate with EHR systems you enable
• To ensure safety, traceability, and compliance

Tesa never sells or trades user or patient data.

5. Legal Basis for Processing

We process data based on performance of contract, legal obligation, legitimate interests, or explicit consent (where applicable).

6. Data Protection

We use encryption, secure authentication, and strict role-based access controls to protect all stored and transmitted data. Access is logged and continuously monitored to ensure the integrity and confidentiality of information. Tesa complies with HIPAA, GDPR, PIPEDA, and Australian Privacy Principles.

7. Data Retention

Data are retained only as long as needed for clinical, operational, or legal purposes. Surgeons may request deletion or anonymisation when retention obligations end.

8. Sharing Information

We share limited data with authorised Sub-Users, approved service providers, regulatory bodies (if required), and explicitly enabled EHR integrations.

9. Cross-Border Transfers

Data may be processed on secure servers in the United States. Cross-border transfers follow appropriate safeguards.

10. Your Rights

Depending on your jurisdiction, you may access, correct, delete, or restrict processing of your personal data. Requests can be sent to info@tesacloud.com.

11. User Confidentiality

All users must treat patient and procedural data as confidential and may not disclose or export it without authorisation.

12. Data Breach Notification

If a serious data breach occurs, Tesa will notify affected users and relevant authorities as required by law.

13. Policy Updates

This Policy may be updated from time to time. Continued use of Tesa Cloud after updates means you accept the revised version.

14. Contact

Email: info@tesacloud.com
Website: https://tesacloud.com