Privacy Policy

Last updated: 12 September 2026.

This Privacy Policy explains how Centre for Neurodivergence [legal entity name and ABN to be confirmed] ("the Centre", "we", "us") handles personal information when you visit this website, create an account on our learning platform, or contact us. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you are in the United Kingdom or the European Economic Area, our GDPR Policy sets out the additional rights and safeguards that apply to you.

What we collect

  • Account details: your name, email address, password (stored only as a one-way hash) and language preference.
  • Learning activity: which courses, modules and lessons you open or complete, so the platform can show your progress.
  • Payment details for paid courses, which are handled by our payment provider. We do not store card numbers.
  • Correspondence: anything you send us by email or through a contact form, including complaints.
  • Technical data: IP address, browser type, device and approximate location, collected in server logs to keep the service secure.

Our courses are for parents and carers. We do not ask you to tell us about your child, and we ask that you do not include health information about your child or anyone else in messages to us unless it is necessary to answer your question.

Why we collect it

  • To create and secure your account and deliver the courses you enrol in.
  • To process payments and send receipts.
  • To answer your questions, handle complaints and provide support.
  • To send service messages about your account, such as email verification or password resets.
  • To send news about new courses, only where you have opted in, and you can unsubscribe at any time.
  • To understand how the platform is used, in aggregate, so we can improve it.
  • To meet our legal obligations.

Who we share it with

We share personal information only with service providers who process it on our behalf and under contract: hosting and database providers, our email delivery provider, and our payment provider. Some of these providers store data outside Australia, including in the United States and the European Union. We take reasonable steps to ensure they protect your information to a standard consistent with Australian law. We do not sell personal information and we do not share it with advertisers.

How long we keep it

We keep account information for as long as your account is active. If you close your account we delete or de-identify your personal information within 90 days, except where we must keep records for tax, legal or dispute purposes. Server logs are kept for no longer than 12 months.

Security

Access to personal information is restricted to people who need it to run the service. Data is encrypted in transit, passwords are hashed, and sessions expire. No online service is perfectly secure, and if we become aware of a data breach likely to cause serious harm we will notify you and the Office of the Australian Information Commissioner as required by law.

Your rights

  • Access: ask for a copy of the personal information we hold about you.
  • Correction: ask us to fix information that is inaccurate or out of date.
  • Deletion: ask us to delete your account and personal information.
  • Marketing: opt out of news emails at any time using the link in the email or by contacting us.

To exercise any of these rights, contact us using the details below. We will respond within 30 days. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Children

This website and the learning platform are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Significant changes will be announced on the website or by email to account holders.

Contact

Contact: [privacy contact email to be confirmed], or by post to [postal address].