Privacy | Amazing Kids Early Intervention

Privacy – Who we are

Our website address is: https://amazingkids.com.au.

General

We comply with the Privacy Act 1988 (Cth) (Privacy Act) and handle personal information that we collect in accordance with the Australian Privacy Principles (APPs). The Privacy Act and the APPs apply to all our child care services operating nationally. By providing personal information to us, you consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy and any other arrangements that apply between us. This Policy should be read together with any terms and conditions related to our dealings with you and any location specific legal notice.

What is personal information?

Personal information means information or an opinion about you which identifies you (or from which you can reasonably be identified), or as otherwise defined by an privacy law. It does not include information that is de-identified.

Dealings

Where it is lawful and practicable to do so, you may deal with us anonymously (e.g. when contacting us about our services generally). However, we normally require your name, contact information and other details to enable us to provide services.

Why do we collect personal information?

We will only collect personal information when it is reasonably necessary to undertake our business activities or as otherwise permitted by law. We may collect your personal information for one or more of the following purposes:

to provide our services to your children, with their well-being, protection and development
to contact you with helpful resources to support your child’s treatments
to manage our services including billing and collections
to analyse our customer needs to develop services
for market research and surveys, direct marketing, promotions and/or competitions
to notify you (either directly or via a third party) about services available from us or our partners
to ensure the proper function of our website and online software
fulfilling our mandatory reporting obligations required by law
if you are applying for a job, to assess your application for a role with us and to take references
any other purpose for which we have your direct or reasonably implied consent
any related secondary purpose which we believe you would reasonably expect when we collected your personal information or as a result of our ongoing relationship with you
to respond to and manage enquiries, complaints, feedback and claims, defend our legal interests and investigate and protect against fraud, theft and other activities

We may also use your personal information for other purposes not listed above which will be made clear to you at the time we collect your personal information, or for such purposes as may be required or permitted by law.

What personal information do we collect ?

The personal information collected depends on the dealings you have with us. If you enrol (or contact us to enquire about enrolling) your child we may collect you or your child’s:

name, date of birth, gender, address (postal and email) and telephone numbers
government identifiers (for example Centrelink, NDIS or Medicare reference numbers)
other information necessary for our functions and activities, including sensitive information described in this policy
with your consent, an image or video
and details of your occupation, financial information (including credit card details), nominated emergency contact person
opinion in relation to any of our services
other such information (including proof of identity) that is relevant for us to provide our services to you in the manner that you have requested, or to comply with applicable laws.

We collect personal information from a range of individuals in the context of business activities, including representatives of our suppliers, customers, sponsors and business partners; contractors; landowners; vendors; investors and job applicants. We may collect a range of information in a business context, such as your name, gender, job title, identification, email address, home address and other contact details, details of your business and other interests, experience and/or academic and professional qualifications, third party references, communications with you (including notes from meetings and telephone call recordings), feedback or survey responses that you provide to us, financial and payment information, and information collected from clearance questionnaires and/or interviews. We use this information for business-related purposes, including negotiating, concluding and performing contracts, managing business relationships, recruitment, managing accounts and records, communicating with you or third party contacts, supporting corporate social responsibility activities, security, legal, regulatory and internal investigations and debt administration.

We may collect personal information about you when you use and access our website. While we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the IP address assigned to your computer. We may also use ‘cookies’ or other similar tracking technologies on our website that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, mobile phone or other device. They enable us recognise you across different websites, services, devices and/or browsing sessions. You can disable cookies through your internet browser but our websites may not work as intended for you if you do so.

We only collect sensitive information where it is reasonably necessary for our services and either you have explicitly consented, or we are required or authorised by law to do so. In some circumstances we may ask for personal information that is sensitive. This may include information such as your child’s cultural or other requirements. We are also required by law to collect and hold details of your child’s medical conditions, immunisation history and additional needs. We collect this information as it is reasonably necessary for ensuring the well-being, protection or development.

If you apply for a position with us, we may collect your health information, medical history, information about national origin or immigration status, or optional demographic information.

We may collect your credit card details or other financial information where you provide them to us for the purposes of arranging direct debit or payment plans you have requested. Financial or credit card information we collect from you is strictly confidential.

In certain circumstances we are required, to collect government identifiers such as those used by NDIS, Centrelink and the Department of Human Services. We will only use or disclose this information in accordance with the law.

How is personal information collected?

We will normally only collect personal information directly from you when you provide it to us:

when you attend our clinics, complete an enrolment form or survey
when you call us, email us or post us your information
via our website or our social media pages
if you apply for any job vacancy
if you make a complaint to us

We may sometimes collect personal information about you from other sources, for example our third-party suppliers and contractors who assist us to operate our business (such as a third party payment gateway or a recruitment agency).

Using and disclosing personal information

We will not sell, share or pass your personal information on to any third parties, other than in accordance with this Policy, with your consent or to those who are contracted to us to keep personal information confidential. We may disclose personal information:

to our related bodies corporate, suppliers, consultants, contractors or agents to help us to provide you with services
if we merge with or are acquired by another entity, to that entity as a part of the merger or acquisition
to relevant federal, state and territory authorities for the purpose of investigating a health or safety issue, including a workplace health and safety matter or child protection matter
when conveying information to a responsible person (e.g. a guardian or emergency contact), unless you have requested otherwise
as required by law

Do we disclose any information overseas?

We may disclose personal information outside of Australia to our third party suppliers such as cloud storage providers or datacentres for software we use. When you provide your personal information to us, you consent to the disclosure of your information outside of Australia. We will take reasonable steps to ensure that any overseas recipient will deal with such personal information in a way that is consistent with the Australian Privacy Principles.

Marketing and your consent/opting out

We and/or our carefully selected partners may send you direct marketing communications and information about our services. This may take the form of emails, SMS or mail, in accordance with the Spam Act and the Privacy Act. You may opt-out of receiving marketing materials from us by contacting us using the details set out below or by using the opt-out facilities provided (e.g. an unsubscribe link). We may occasionally engage other companies to provide marketing or advertising services on our behalf. Those companies will be permitted to obtain only the personal information they need to deliver the service. If we provide those companies with any of your personal information, it is to provide you with a better or more relevant and personalised experience and to improve the quality of those services. We take reasonable steps to ensure that these organisations are bound by confidentiality and privacy obligations in relation to the protection of your personal information.

Third party advertising services

We may utilise certain third-party advertising services (e.g. organisations such as Google) to display advertising for our advertisers. These third-party services may place a cookie on your computer for the purposes of ad tracking and presentation. We do not share personally identifiable visitor information with these third-party services.

Storing personal information

We take all reasonable and appropriate steps (including organisational and technological measures) to protect your personal information from misuse, interference and loss, and unauthorised access, modification or disclosure. Some of the ways this is done include:

requiring our staff to maintain confidentiality
implementing physical and network security measures
providing a secure environment and access control for confidential information
only allowing access to personal information where the individual seeking access has satisfied our identification requirements

Where we store your personal information depends on what interaction you have had with us. These include electronic databases, email databases for marketing communications or secure archiving for paper based forms. We will only store your personal information for as long as our dealings with you continue, or as otherwise required by law.

Data breaches

The Privacy Act requires us to notify affected individuals and the Australian Privacy Commissioner about ‘eligible data breaches’. An eligible data breach occurs when the following criteria are met:

there is unauthorised access to or disclosure of personal information we hold (or information is lost in circumstances where unauthorised access or disclosure is likely to occur);
the access, disclosure or loss is likely to result in serious harm to any of the individuals to whom the information relates; and
we are unable to prevent the likely risk of serious harm with remedial action.

If it is not clear whether a suspected data breach meets these criteria, we will investigate and assess the breach to determine whether the breach is an ‘eligible data breach’ that requires us to notify the affected individuals. This is to ensure that you are notified if your personal information is involved in a data breach that is likely to result in serious harm. Even if the criteria are not met, we may decide it appropriate to notify you anyway as part of our commitments.

Keeping personal information accurate and up to date

You can access the personal information we hold about you by contacting us using the information below. Sometimes, we may not be able to provide you with access to all of your personal information and, where this is the case, we will tell you why. We may also need to verify your identity when you request your personal information.

If you think that any personal information we hold about you is inaccurate, please contact us and we will take reasonable steps to ensure that it is corrected.