1. Introduction 

Beyond Limits Paediatric Therapy Pty Ltd (“we”, “our”, “us”) provides a purpose-built platform designed to facilitate staff training and deliver ongoing support to carers, parents, and educators, making therapy more accessible and consistent for patients of Beyond Limits Therapy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Beyond Limits Learning Hub app or website. By accessing or using the platform, you consent to the practices described in this policy.

For any questions regarding privacy, please contact us at privacy@beyondlimitstherapy.com.au. 

2. Information We Collect 

• Depending on your role and usage of the platform, we may collect:

• Personal information: name, email address, phone number, role (clinician, carer, parent, teacher, administrator), and account credentials.

• Professional information: occupation, department, or qualifications (for staff and administrators).

• User content: uploaded videos, training materials, care plans, notes, and other resources created within the platform.

• Patient or child information: details relevant to therapy or care, including personalised treatment content, progress tracking, and other educational data (collected only with explicit consent from a parent or guardian).

• Usage and technical information: IP address, device type, browser, operating system, analytics, crash reports, and session logs.

• Payment information: where subscriptions are purchased, we process payments via secure third-party payment providers (e.g., Stripe) and may store billing details to manage accounts and invoices.

• Sensitive and health information: developmental information, diagnoses, goals, preferences, service history, and user-generated notes, where you choose to provide it or where it is reasonably necessary for the operation of the platform.

3. Sensitive and Child-Related Information

Some information used within the platform may relate to health, disability, developmental, behavioural, emotional, feeding, communication, regulation, or family support matters. By providing this information, you acknowledge that it may be sensitive in nature and confirm that you are authorised to provide it.

Parents or guardians are responsible for ensuring that any child-related information provided is lawful and appropriate to share. Child-related or sensitive information is only shared with authorised carers, educators, or clinicians and with appropriate consent.

4. How We Collect Information 

We may collect information:

• Directly from you: when creating accounts, registering for subscriptions, uploading content, completing forms, or communicating with us.

• Automatically: through cookies, analytics technologies, application logs, device identifiers, and similar tracking tools.

• From third parties: if you choose to integrate external services (e.g., calendars, cloud storage), or where information is provided by treating practitioners, referral sources, caregivers, schools, or support coordinators with appropriate authority or consent.

5. How We Use Information 

Your information is used to:

• Deliver and manage core platform features, including course creation, content sharing, progress tracking, notifications, and account management.

• Enable carers, parents, and teachers to access therapy resources and track progress effectively.

• Allow clinicians and administrators to manage staff training, monitor engagement, and assess learning outcomes.

• Support billing, subscriptions, and NDIS or other funding claims.

• Improve and maintain the platform, including troubleshooting, analytics, and enhancing user experience.

• Communicate updates, notifications, or administrative information relevant to your account.

• Support appointment administration, clinical communications, consent management, complaints handling, and compliance with professional, regulatory, and legal requirements.

• Comply with legal and regulatory requirements.

We do not sell, rent, or trade your personal information for marketing purposes. 

6. Disclosure of Information

We may share your information with:

• Authorised staff: clinicians, administrators, or other personnel within Beyond Limits Therapy who require access to provide training or support.

• Service providers: trusted third-party providers assisting with hosting, analytics, email, video delivery, and payment processing, bound by strict privacy obligations.

• Health and care participants: treating practitioners, pathology or imaging providers, pharmacies, hospitals, schools, insurers, and NDIS-related providers where reasonably necessary and authorised.

• Legal requirements: if required by law, court order, or lawful request from a regulator or authority.

Child-related or sensitive information is only shared with authorised carers, educators, or clinicians and with appropriate consent.

7. De-identified and Aggregated Information

We may use de-identified, anonymised, or aggregated information for quality improvement, research, service planning, education, reporting, and business development purposes, provided that it does not reasonably identify an individual.

8. Data Storage and Security

We take reasonable steps to protect your data, including encryption, access controls, and secure hosting. Access to personal or sensitive data is limited to authorised personnel.

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. To the extent permitted by law, we are not liable for unauthorised access or security incidents beyond our reasonable control.

You are responsible for maintaining the security of your own devices, passwords, and account access details.

If you request deletion of your account or personal data, we will remove it within a reasonable timeframe, subject to legal retention obligations.

9. International Transfers

Where third-party services store or process data outside Australia, we ensure that privacy protections equivalent to those required under Australian law are applied, consistent with our obligations under the Australian Privacy Principles.

10. Children’s Privacy 

For users under 18 or patients of Beyond Limits Therapy:

• We collect child-related information only with parent or guardian consent.

• Access to child data is restricted to authorised carers, educators, or clinicians.

• We adhere to applicable privacy regulations protecting children and sensitive health information.

• A person under 18 must not create an account unless the practice expressly permits this and appropriate parental or guardian consent has been obtained.

11. Your Rights

You have the right to:

• Access and correct personal information we hold about you.

• Request deletion of your personal information, subject to legal retention obligations.

• Opt out of non-essential marketing communications using the unsubscribe function or by contacting us.

• Lodge a complaint if you believe we have breached applicable privacy laws.

To exercise your rights, contact us at privacy@beyondlimitstherapy.com.au. We may require verification of identity before actioning a request. 

12. Cookies and Analytics

We may use cookies, pixels, logs, and analytics technologies to understand usage patterns, measure performance, improve user experience, and support platform administration. You may be able to change browser or device settings to limit some tracking, although doing so may affect functionality.

13. Third-Party Links

The platform may contain links to third-party content or websites. We are not responsible for the privacy practices, policies, security, or content of those third parties, and you should review their terms and policies separately.

14. Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, to meet legal or regulatory obligations, resolve disputes, maintain business records, and enforce our rights.

15. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated effective date and, where appropriate, notified to users via the app or email. Continued use of the platform after changes are published constitutes acceptance of the updated policy.

16. Complaints

If you believe we have breached applicable privacy law, please contact us at privacy@beyondlimitstherapy.com.au. We will investigate your complaint and respond within a reasonable time. If you are not satisfied with our response, you may have the right to complain to the Office of the Australian Information Commissioner or, where applicable, the NSW Privacy Commissioner or Health Care Complaints Commission.

17. Consent 

By using the Beyond Limits Learning Hub, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your information as described in this Privacy Policy.