Purpose of this policy
The purpose of this privacy policy is to provide information about the personal information ADHD Done Differently collects, how that information will be handled, and how you can access your personal information or make a complaint about ADHD Done Differently’s handling of the information.
Personal information
ADHD Done Differently ensures the protection of any personal information it receives, as required by the Australian Privacy Act 1988 (Privacy Act). Your Personal Information is also protected in line with the requirements of the EU General Data Protection Regulation (GDPR), for individuals in the EU.
‘Personal information’ is defined in the Privacy Act as:
information or an opinion (including information or an opinion forming part of a database), whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.
On 12 March 2014, the Privacy Act was amended and the new definition of ‘personal information’ is: information or an opinion about an identified individual, or an individual who is reasonably identifiable: a) whether the information or opinion is true or not; and b) whether the information or opinion is recorded in a material form or not.
Where electronic data is transmitted to international-based servers, ADHD Done Differently has taken steps to ensure that data is maintained under security and privacy principles that provide a level of protection at least as secure as those protections required by the Australian Privacy Act 1988 and EU GDPR.
Collection of personal information – Email Opt-Ins
You may provide your email address, first and last name, phone number, address and vocational information to ADHD Done Differently when you register for or purchase online resources, freebies, quizzes, email list or courses. Your email address and name are held securely and kept private. Your contact details will never be sold or given to another party. You consent to receive emails from time to time from ADHD Done Differently and you can choose to unsubscribe at any time by clicking ‘unsubscribe’ at the bottom of emails.
Collection of personal information – Clients
ADHD Done Differently collects your personal and sensitive information only if you have consented to the information being collected, and if the information is reasonably necessary for conducting speech pathology services, including clinical supervision. We collect personal information about you, such as, but not limited to, your name, contact details, gender, date of birth, place of employment, and your Speech Pathology Australia Membership number. We also collect your credit/debit card details which are stored securely by WooCommerce. These payments are processed securely using encrypted transmissions.
We only collect your information by lawful and fair means. We collect your information in a few different ways, including:
- online forms
- electronically, such as through our website contact form or email
- phone calls and text messages
- information you provide during speech pathology and clinical supervision sessions
- other correspondence, such as mail
We will always collect personal information from you directly unless it is unreasonable or impractical for us to do so. On occasion, we may collect information from other involved services and professionals where you have expressly given permission.
When we collect your information, or as soon as practical after, we will take reasonable steps to let you know:
- that the information has been received by ADHD Done Differently and how to contact us
- if we received your information from another source, details of the information we have received and why we received it
- why we are collecting the information
- the main consequences (if any) for you if you do not provide all or part of the information we have requested
- the organisations or types of organisations to which we normally pass on information
- that you can access and seek to correct your information and that our Privacy Policy explains how that can be done
- that our Privacy Policy contains information about how someone can complain if they believe we may have breached the APPs and how we will handle that complaint and
- whether we are likely to disclose information to other parties and if so, why.
Security of your information
We take all possible steps to protect your personal and sensitive information held by us from misuse, interference, unauthorised access, modification, loss or disclosure. This includes storage, collection, processing, transfer and destruction of the information.
Information is stored in secure electronic databases. ADHD Done Differently has taken all reasonable care to ensure that all electronic databases and systems used are secure and maintain client data privacy and confidentiality. Only authorised staff of ADHD Done Differently have access to the secure physical and electronic database. You are permitted to request access or to request changes to your or your child’s information at any time by contacting ADHD Done Differently.
Electronic data may be stored or processed using the following services (see links for further information about how they maintain security and privacy):
Google Workspace – https://gsuite.google.com.au/intl/en_au/security/
Halaxy – https://www.halaxy.com/article/privacy
Zoom (online video conferencing) – https://zoom.us/privacy
Medipass (payment processing) – https://medipass.com.au/privacy-policy
WooCommerce (Shop and payment processing) – https://automattic.com/privacy/
Mailchimp – https://www.intuit.com/privacy/statement/
Jetpack – https://jetpack.com/support/privacy/
Where electronic data is transmitted to international-based servers, ADHD Done Differently has taken steps to ensure that data is maintained under security and privacy principles that provide a level of protection at least as secure as those protections required by the Privacy Act 1988.
Where information of EU residents may be stored (e.g. emails in G Suite, newsletter sign-ups in website cookies on WordPress and Jetpack) all data is securely stored on platforms that adhere to EU GDPR requirements.
We reserve the right to change the electronic systems used from time to time. We commit to careful review of each system used to ensure that it provides maximum protections for your private information.
As required by the Health Records and Information Privacy Act 2002, records for children will be kept securely until the child turns 25 years of age. Records for clients who are adults will be kept securely for 7 years from the last occasion of service. After this time, records will be securely destroyed.
Website and Cookies
We take steps to ensure the security of the ADHD Done Differently website. However, users are advised that there is always some risk when transmitting information across the Internet, including a risk that information sent to or from a website may be intercepted, corrupted or modified by third parties. All cookies are stored on platforms that adhere to EU GDPR requirements.
The ADHD Done Differently website uses software known as ‘cookies’ to record your visit to the website and collect some statistical information. We use this information to help administer and improve our website. We do not use this information to personally identify you. Information we may collect includes:
- your server address
- your domain name
- the date and time of access to the website
- pages accessed and documents downloaded
- the previous site visited
- if you have visited the website before
- the type of browser you use
You may set your web browser to disable cookies when visiting our websites.
The ADHD Done Differently website contains links to external websites, as well as plugins. We recommend that you review the privacy policies of those external websites and plugins as we are not responsible for their privacy practices.
Use of your information
We only use your personal and sensitive information for purposes which are directly related to the reason you provided us with your information in the first place and where you would reasonably expect us to use your information.
We will not use your personal information for another purpose unless you have given consent (for example, in a consent form) or one of the exceptions under the Privacy Act applies. For example, if the use of the information is authorised by Australian law or is necessary for law enforcement by an enforcement body, such as the Australian Federal Police.
Disclosure of your information
We only disclose your personal and sensitive information with your express consent and for purposes which are directly related to the reason you provided us with your information in the first place and where you would reasonably expect us to disclose your information.
For example, with your consent, we may disclose information with your child’s school, preschool, or other involved professionals where this information may be clinically relevant.
Speech pathologists are mandatory reporters. This means that we are required by law to disclose information to legal services if we have concerns for your safety or your child’s safety. We will only disclose information to legal services if we are required to by law.
Direct communications and promotional materials
From time to time, we may send out promotional materials for the purposes of ADHD Done Differently. If you do not wish to receive these communications, you may click ‘unsubscribe’ or contact ADHD Done Differently to unsubscribe (see contact details below).
Requests to participate in research by ADHD Done Differently or third parties
We sometimes take part in, or receive requests from, researchers for data to assist them to write research papers. You may receive information from ADHD Done Differently . about opportunities to participate in research. There is no obligation to participate in a study. If you choose not to participate, there is no negative impact on your services with ADHD Done Differently.
How to access and correct your information
We will take reasonable steps to ensure that all personal information that we collect, use or disclose is accurate, up-to-date, complete, relevant and not misleading.
We will correct any personal information that we believe to be incorrect, out-of-date, incomplete, irrelevant or misleading. You may request to access or correct your personal information at any time by contacting us using the details below. We will give you access to the information unless one of the exceptions under the Privacy Act applies. For example, if providing access would be unlawful or denying access is authorised by law.
If you request to access or correct your information, we will respond within a reasonable time (usually within 14 days). If your request is refused, we will give you a written notice that sets out the reasons for refusal and how to complain about the decision.
Complaints and enquiries
ADHD Done Differently is committed to the protection of your privacy. If you have any questions about how we handle personal information, would like to complain about how we have handled your information, or would like further information about our Privacy Policy, please submit a written query or complaint to ADHD Done Differently. We will assess any complaints and liaise with you to resolve any issues within a reasonable time (usually within 14 days).
If you are unhappy with the outcome, you may lodge a complaint with the Australian Information Commissioner. See http://www.oaic.gov.au/privacy/making-a-privacy-complaint for further information.
Contact Details
Email: adhddonedifferently.com.au