Privacy Policy

Introduction
The Little Co is committed to protecting your privacy and ensuring the security of your personal and health information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the Health Records Act 2001 (Vic), which governs how we handle health information. This policy explains how we collect, use, store, and disclose personal and health information in our work with children with autism and disabilities.

A copy of the Australian Privacy Principles can be accessed via the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

What Personal and Health Information We Collect
Personal and health information includes any data that identifies an individual. We may collect:

• Personal Information: Name, address, phone number, email, date of birth, emergency contacts.
• Health Information: Medical history, diagnoses, therapy progress, reports from other professionals (e.g., paediatricians, psychologists, speech therapists, occupational therapists).
• NDIS Information: Participant number, funding details, plan manager details (if applicable).
• Sensitive Information: Cultural background, disability status, and other details relevant to service provision.

How We Collect Information
We collect information in various ways, including:

• Directly from parents/carers (via intake forms, phone calls, emails, or in-person consultations).
• From third parties (e.g., healthcare providers, schools, therapists) with your consent.
• Through our website (via contact forms, cookies, and analytics tools).
• As required by NDIS, Medicare, or other regulatory bodies.

Why We Collect This Information
We collect personal and health information for the following purposes:

• To develop individualised therapy programmes.
• To provide ABA and related services tailored to the child’s needs.
• To communicate with families, schools, and other healthcare professionals.
• To comply with legal, regulatory, and funding requirements (e.g., NDIS, Medicare, reporting obligations).
• To conduct internal record-keeping, programme evaluation, and quality improvement.

Disclosure of Information
We respect your privacy and only disclose information when necessary. Personal and health information may be shared with:

• Allied health professionals involved in your child’s care (e.g., speech therapists, occupational therapists, psychologists) with your consent.
• NDIS plan managers or coordinators if required for service funding.
• Schools or educators working collaboratively in your child’s support plan.
• Legal or regulatory authorities where required by law.

We do not sell or trade personal information. If third-party service providers assist us in our operations (e.g., IT support, data storage providers), they are required to protect your information under strict confidentiality agreements.

Security & Storage of Personal Information
We take reasonable steps to ensure your information is protected from misuse, loss, unauthorised access, modification, or disclosure. We store records in secure electronic databases and locked physical files with access restricted to authorised personnel only.

Health records are retained in accordance with legal requirements. For children, records are typically kept until they turn 25 years old (seven years after they turn 18). When no longer required, information is securely deleted or de-identified.

Parental Consent & Children’s Privacy
As we work with children, we require parental or legal guardian consent before collecting and using a child’s information. We take extra precautions to ensure children’s data is handled securely and ethically.

Accessing & Correcting Your Information
You have the right to:

• Request access to personal and health information we hold about you or your child.
• Request corrections if any information is inaccurate, incomplete, or outdated.

To make a request, please contact us in writing. We do not charge a fee for access requests, but an administrative fee may apply for providing copies of records. Identification may be required to verify your request.

Website Data Collection (Cookies & Analytics)
Our website may collect certain information through cookies and analytics tools to improve user experience. This may include browsing behaviour and site interactions. You can adjust your browser settings to manage cookies.

Updates to This Policy
This Privacy Policy may be updated periodically. The latest version will always be available on our website.

Complaints & Contact Information
If you have any questions, concerns, or complaints about our privacy practices, please contact us:

The Little Co

hello@thelittleco.com.au

We aim to respond to privacy-related complaints promptly and resolve any concerns in accordance with legal requirements.