Personal Information

All personal information that we gather is collected with your consent, in a fair and non-intrusive manner, in order to provide you with better services. Personal information means information, or an opinion about you from which your identity is apparent or can reasonably be ascertained. This includes information or opinions whether they are true or not or if they have been recorded in material form. The personal information you submit is gathered only on a voluntary basis and you may decide not to provide this. If you choose not to share your personal information, you will still be able to visit most of our website, but you may not be able to access all of the features and/or participate with all our services. Users who are uncertain about what information is mandatory can contact us at admin@bluebirdmovement.com.au.

The types of personal information we may collect about you include:

• Identifying data including your name, age, date of birth, and gender.
• Contact data including your telephone number, address, postcode and email.
• Emergency contact data including your emergency contact’s name, telephone number and their relation to you.
• Financial data including bank account and payment card details.
• Transaction data including details about payments to you from us and from you to us and other details of products and services you have purchased from us, or we have purchased from you.
• Interaction data including information you provide to us when you participate in any interactive features, including surveys, contests, promotions, activities or events.
• Marketing and communications data including your preferences for receiving marketing from us and our third parties and your communication preferences.
• Professional data including where you are a worker of ours or applying for a role with us, your professional history such as your previous positions and professional experience.
• Log and Usage Data: Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
• Device Data: We collect device data such as information about your computer, phone, tablet, or other device you use to access the services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data: We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device.

Sensitive Personal Information

Sensitive information is a subset of personal information that is given a higher level of protection under the Australian Privacy Principles. Sensitive information means information relating to your racial or ethnic origin, political opinions, religion, trade union or other professional associations or memberships, philosophical beliefs, sexual orientation or practices, criminal records, health information or biometric information. The types of sensitive personal information we may collect about you include:

• Information regarding any ongoing or current health conditions (e.g. asthma, pregnancy) that may affect your ability to participate in our services.
• Information about disability and support needs that may affect your ability to participate in our services.

Collecting Personal Information

We will only collect personal information when it is necessary or required for us to be able to provide our services to you. We aim to collect this information from you lawfully and we strive to prevent intrusive, unreasonable or invasive collection. We seek consent from users to collect or use their personal information when they create a student profile on our website. Additional consent may be sought at a future date, to use your information for a purpose that was not previously identified or requested. You may withdraw your consent at any time, subject to legal, contractual or notice requirements. If you wish to withdraw your consent, please email admin@bluebirdmovement.com.au immediately.

There are a number of ways that we collect your personal information, including:

• Directly from you, such as, face-to-face, over the phone, over email, online, by completing forms, registration details, responses to surveys or other communications.
• Indirectly from you such as, from observing your activity on our website.
• Automatically from you, such as, through cookies we or our service providers set on your device as you navigate through our service.
• From service providers, such as, third-party vendors to monitor and analyse the use of our service, third-party vendors for payment processing, or other third-party vendors that we use to provide the Service to you.
• From third party providers, such as doctors or other treating practitioners.
• Other publicly available sources.

Using Personal Information

We may collect, hold and use your personal information for purposes:

• To manage the administration and provision of services, including to register your attendance at our services and manage your classes.
• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
• To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
• To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
• To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
• To deliver targeted advertising to you. We may process your information to develop and display personalized advertising tailored to your interests, location, and more.
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
• To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
• To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
• If you have applied for employment with us, to consider your employment application.

Using Sensitive Personal Information

We only collect, hold, use and disclose sensitive information for the following purposes:

• Any purposes that you consent to.
• The primary purpose for which it is collected.
• Secondary purposes that are directly related to the primary purpose for which it was collected, including disclosure to third parties as reasonably necessary to provide our services to you.
• To contact emergency services, or to speak with your family, partner or support person where we reasonably believe there is a serious risk to the life, health or safety of you or another person and it is impracticable for us to obtain your consent.
• If otherwise required or authorised by law.

Disclosing Personal Information

We may disclose personal information to:

• Third party service providers, for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, webhosting and server providers, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators.
• Our employees, contractors and/or related entities.
• Our existing or potential agents or business partners.
• Anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred.
• Courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided to you.
• Courts, tribunals, regulatory authorities and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.
• Third parties, including agents or sub-contractors, who assist us in providing information, products, services or direct marketing to you.
• Under certain circumstances, we may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
• Third parties who collect and process data, such as analytics providers and cookies.
• Any other third parties as required or permitted by law, such as where we receive a subpoena.

Disclosing Sensitive Personal Information

We will only disclose sensitive information with your consent or when we are permitted by law, we may disclose sensitive information to:

• Our employees, contractors and/or related entities.
• IT service providers, data storage, web hosting and server providers.
• If we merge with, or are acquired by, another company, or sell all or a portion of our assets, your personal information may be disclosed to our advisers and any prospective purchaser’s advisers and may be among the assets transferred.
• Courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.
• Third parties to collect and process data, such as analytics providers and cookies.
• Any other third parties as required or permitted by law, such as where we receive a subpoena.

Security of Information

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment. We have implemented the following measures to protect and safeguard your personal information:

• Limiting the amount of personal information we collect, including only what is necessary.
• Using SSL encryption or other secure technologies when receiving or sending personal information beyond internal networks.
• Screening (e.g. performing background checks) all employees with access to personal information.
• Implementing and monitoring intrusion prevention and detection systems (e.g. anti-virus software).
• Maintaining up-to-date software and safeguards.

Transfer of Information

Your personal information will not be disclosed to recipients outside Australia unless you expressly request us to do so. If you request us to transfer your personal information to an overseas recipient, the overseas recipient will not be required to comply with the Australian Privacy Principles, and we will not be liable for any mishandling of your information in such circumstances.

Storage of Information

When your personal information is no longer needed for the purpose of which it was obtained, we will take reasonable steps to destroy or permanently de-identify your personal information. However, most of the personal information is or will be stored in files which will be kept by us for a minimum of 7 years. In some circumstances, we will retain your personal information for longer periods of time, such as:

• When it is necessary and relevant for our operations or if required to provide services.
• To comply with applicable laws, prevent fraud, troubleshoot problems, assist with any investigation, enforce our legal agreements and policies or take other actions as permitted by the law.

Tracking Technologies and Cookies

Cookies

A cookie is a small file placed on your device. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some parts of our website. Unless you have adjusted your browser setting so that it will refuse Cookies, our website may use Cookies.

Web Beacons

Certain sections of our website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the website to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Third-Party Websites and Providers

This website may link to third-party websites, online services, or mobile applications and/or contain advertisements from third parties that are not affiliated with us, and which may link to other websites, services, or applications. Accordingly, we do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites, services, or applications. The inclusion of a link towards a third-party website, service, or application does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy notice. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Services. You should review the policies of such third parties and contact them directly to respond to your questions.

Payment Processing

We use Stripe, a third-party service provider for payment processing (e.g. payment processors). We do not store or collect your payment card details, that information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. All payment data is handled and stored by Stripe; you can find a link to their privacy notice here: https://stripe.com/au/privacy.

Authentication Processing

We use Kinde, a third-party service provider for identity management and authentication solutions to support secure user management and access control when they sign up or register a student profile/account on our website. Kinde stores or collects your information to provide password-less authentication, social sign-in using Google or Facebook, storing and/or managing user profile information and controlling user permissions or access. Kinde’s use of your personal information is governed by their Privacy Policy, you can find a link to their privacy notice here: https://docs.kinde.com/trust-center/privacy-and-compliance/privacy-policy/.

Single Sign-On Services

If you connect your account with us using a single sign-on account, such as, Facebook or Google, we will collect your personal information from the single sign-on provider. We will do this in accordance with the privacy settings you have chosen with that provider. The personal information that we may receive includes your name, email address, ID, username, handle and profile picture. We will use the information we receive only for the purposes that are described in this privacy policy or that are otherwise made clear to you on our website or services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use and share your personal information, and how you can set your privacy preferences on their sites and apps.

Privacy of Children

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of, or have reason to believe that a child under the age of 18 has provided Personal Information to us through the Website and Services, please contact us at admin@bluebirdmovement.com.au.

Your Privacy Rights and Control of Personal Information

Choice and Consent

Please read this Privacy Policy carefully, by providing personal information to us, you understand we will collect, hold, use and disclose your personal information in accordance with this Privacy Policy. You do not have to provide personal information to us, however, if you do not, it may affect your use of this website, or the services offered on or through it.

Information from Third Parties

If we receive personal information about you from a third party, we will protect it as set out in this Privacy Policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

Updating Personal Information

We take steps to ensure that the personal information we collect is accurate and up to date. All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information. In the event that you believe your information is in any way incorrect or inaccurate, please let us know immediately. We will make sure we investigate the matter and make corrections as quickly as possible or give you ways to update or delete it quickly, unless we are required to keep that information for legitimate business or legal purposes. When updating your personal information, we will ask you to verify your identity before we can act on your request. If for any reason you have a problem with updating your personal information, please contact us at admin@bluebirdmovement.com.au.

Deleting Personal Information

You have the right to delete or request that we assist in deleting the personal data that we have collected about you. You may update, amend, or delete some of your information by signing in to your account, if you have one, and visiting the account settings section that allows you to manage your personal information. You may also contact us to request access to, correct, or delete any personal information that you have provided to us. Please note, however, that we may need to retain certain information when we have a legal obligation or lawful basis to do so. If you would like to request that we delete your personal data, please contact us immediately at admin@bluebirdmovement.com.au.

Opting out of Communications

You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us at admin@bluebirdmovement.com.au. You will then be removed from our marketing lists, however, we may still communicate with you for reasons such as, to send you service-related messages that are necessary for administration and use of your account, to respond to service requests, or for other non-marketing purposes.

Cookies and Similar Technologies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features of our website.

Complaints

You have the right to lodge a complaint regarding our collection, use and sharing of your personal information. If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us in writing as required by Australia Privacy Act 1988 S 40(1A) and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. We will respond to all complaints within a reasonable time (usually 30 days). If you are not satisfied with our response to your complaint, you may then lodge a complaint with the Office of the Australian Information Commissioner by following the steps on: https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us.

Changes to This Privacy Policy

We reserve the right to modify this Policy, or its terms relating to the Website and our Services at any time and at our discretion. We will revise the ‘updated’ date to indicate the updated version of this privacy policy, the updated version will be effective as soon as it is made accessible on our website. If we make material changes to this privacy policy, we may notify you either by posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information. When we do, we will revise the updated date at the bottom of this page and will provide you with access to the updated privacy policy on the website. You are advised to review this Privacy Policy periodically to stay up to date with any changes.

Acceptance of This Privacy Policy

You acknowledge that you have read this Policy and agree to all its terms and conditions. By accessing and using the Website and Services and submitting your information you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorized to access or use the Website and Services.

Contact Us

If you have any questions, concerns, or complaints regarding this policy, or if you wish to exercise your rights, we encourage you to contact us using the details provided below: