This policy applies to:

• Children and families receiving physiotherapy services.
• Visitors to our website at https://leapingkids.com.au.
• Any person who interacts with us through email, phone, or other communication channels.

We may collect and hold the following types of information, depending on how you interact with us:

Personal information (collected during in-person services and agreements)

• Names of children, parents, and carers.
• Contact details (address, email, phone numbers).
• Date of birth, gender, and emergency contact information.
• Payment and billing details (including NDIS funding or private insurance information).

Health information (sensitive information, collected during in-person services and agreements)

• Medical and developmental history.
• Current diagnoses or conditions (e.g. cerebral palsy, autism spectrum disorder, genetic syndromes).
• Therapy assessments, treatment plans, progress notes, and outcomes.
• Reports from or to other healthcare providers.

Digital information (collected via our website)

• General website analytics (e.g. pages visited, device and browser details, IP addresses).
• Cookies and similar tracking technologies used to improve website performance.

Note: We do not collect personal or health information through our website. Such information is only collected directly from you under separate agreements when services are provided in person.

We collect personal and health information in several ways:

• Directly from you, during consultations, assessments, therapy sessions, forms, emails, or phone calls.
• From parents, carers, teachers, or guardians, when children are unable to provide information themselves.
  
• From other healthcare professionals, specialists, or service providers, with your consent or as required for coordinated care.
  
• From third parties such as the National Disability Insurance Scheme (NDIS), insurers, or funding agencies.
  
• Through our website, but only limited to cookies and analytics tools (not health or personal identifiers).

We collect, hold, and use personal information for purposes including:

• To deliver physiotherapy assessments and treatments tailored to each child.
  
• To prepare individualised reports, therapy plans, and recommendations.
  
• To communicate with parents, carers, teachers, and other healthcare providers involved in the child’s care.
  
• To process billing, claims, and administrative tasks (including NDIS invoicing).
  
• To manage scheduling, record-keeping, and internal quality assurance.
  
• To improve our website and services through analytics and feedback.
  
• To comply with legal obligations, including mandatory reporting requirements.

We will not use your information for direct marketing without your explicit consent.

We only disclose personal or health information where it is reasonably necessary for the provision of our services, or as required by law. This may include:

• Sharing reports with your GP, specialist, school, or other health professionals, with your consent.
  
• Providing information to the NDIS, insurers, or funding bodies for service and payment purposes.
  
• Disclosing information where legally required (e.g. child protection laws, court orders, public health and safety).
  
• In urgent situations where failure to disclose may place a child or others at risk of serious harm.

We will never sell or rent your personal information to third parties.

We take all reasonable steps to protect your personal and health information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes:

• Secure electronic systems with password protection and restricted staff access.

• Locked storage for any physical records.

• Staff training in privacy and confidentiality requirements.

Retention:

• Clinical records are kept for a minimum of 7 years after the last interaction with the child.
  
• If the client is under 18, records are kept until at least the child’s 25th birthday.
  
• When records are no longer required, they will be securely destroyed or permanently de-identified.

You have the right to access the personal and health information we hold about you or your child, subject to some exceptions allowed by law. You may also request corrections if the information is inaccurate, incomplete, or outdated.

Requests should be made in writing to our Privacy Officer (contact details below). We aim to respond within 30 days. In limited cases, we may refuse access (e.g. if release may cause serious harm, or breach another person’s privacy), but we will provide reasons for refusal.

If you have any concerns about how we handle your personal information, or if you wish to make a complaint, please contact us at:

Natasha Ardiles – Leaping Kids

Email: natasha@leapingkids.com.au
Phone: +61494174544
Address: Sydney, NSW, Australia

We will investigate your complaint and respond within a reasonable timeframe. If you are not satisfied with our response, you may escalate the matter to the Office of the Australian Information Commissioner (OAIC)

Website: www.oaic.gov.au
Phone: 1300 363 992

This Privacy Policy may be updated from time to time to reflect changes in law or business practices. The latest version will always be available on our website. Continued use of our services after updates indicates acceptance of the revised policy.

We may, from time to time, request permission to use photographs, videos, or testimonials for educational or promotional purposes. We will always seek explicit written consent before doing so. You have the right to refuse or withdraw consent at any time, and your choice will not affect access to services.