Privacy policy · Kids Will Thrive

IT-Inserts Pty Ltd t/a Kids Will Thrive (ABN 26 634 846 325) (“Kids Will Thrive”, “we”, “us”) runs small, play-based groups for children and parent programs. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, who we share it with and your rights.

What we collect

Family details: parent or carer names, email, phone, address and postcode, and any second guardian you add.
Child details: name, date of birth, emergency contacts and photo consent choices.
Health information (sensitive information): allergies, medical needs, health notes and support needs you tell us about.
NDIS information: NDIS number, funding type, plan dates and plan manager details, if you use NDIS funding.
Screening answers: your answers to our booking questions, so we can place your child in a group that suits them safely.
Payments: invoices, receipts and refund records. Card details are entered directly with Stripe; we never see or store your full card number.
Enquiries and applications: what you send us through our forms, including job applications and CVs.
Technical information: basic logs (such as IP address and browser) used for security and to stop abuse of our forms.

We collect information directly from you. We collect sensitive information, such as health information, only with your consent and only when it’s reasonably necessary to provide our services.

Why we collect it

To take bookings, check a group is a good fit, and run sessions safely.
To invoice and take payment, including claiming NDIS funding where it applies.
To contact you about bookings, changes, reminders and (if you opt in) news about new groups and workshops.
To meet our legal obligations, including NDIS Practice Standards, record-keeping and incident reporting.
To respond to enquiries, feedback, complaints and job applications.

Who we share it with

We share information only as needed for the purposes above:

Plan managers, for plan-managed NDIS bookings, so they can pay our invoices.
Marsden Therapy (Brix Ability Pty Ltd), for NDIA-managed bookings, which they provide and claim, and for allied health referrals you ask for.
Stripe, our payment processor, to take card payments and issue receipts and refunds.
Resend, our email delivery service, to send confirmations, reminders and other emails.
Supabase, our database and hosting provider. Your data is stored in Sydney, Australia.
The NDIA and the NDIS Quality and Safeguards Commission, when the law requires it (for example, reportable incidents).
Our group leaders, who see only what they need to run their group safely.

Some of our service providers may process limited information outside Australia (for example, Stripe and Resend). We choose providers with strong security and privacy commitments. We don’t sell personal information.

Photos

We take photos or videos only with the consent you choose at booking (internal use, our website, or social media). You can change your choice any time in My bookings.

How we keep it safe

Access is limited to people who need it, protected by sign-in and two-step verification for staff, and every database table is protected by access rules. Data is encrypted in transit.

How long we keep it

We keep service records, including bookings, agreements, invoices and incident records, for 7 years after the service ends, as required for NDIS providers and tax law. After that we securely delete or de-identify them. Enquiries and marketing details are deleted sooner when no longer needed or when you ask.

Access and correction

You can see and update most of your details in My bookings. You can ask for a copy of the information we hold about you, or ask us to correct it, by emailing hello@kidswillthrive.com. We’ll respond within 30 days.

Marketing emails

We only send news if you opt in. Every email has an unsubscribe link, or you can use our email preferences page.

Complaints

If you’re worried about how we’ve handled your information, contact us first at hello@kidswillthrive.com or 1300 001 747. We’ll acknowledge your complaint within 2 business days and aim to resolve it within 30 days. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Contact

Privacy contact: hello@kidswillthrive.com · 1300 001 747