PRIVACY POLICY

Connect Movement Therapy Pty Ltd

Last updated April 2026  |  ABN 17 636 388 157

Connect Movement Therapy respects your right to privacy and is committed to protecting the personal information of clients, families and carers. We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and handle all health and sensitive information with the highest level of care.

 

1.  What Information We Collect

Connect Movement Therapy (CMT) collects personal information necessary to provide neurodevelopmental capacity-building supports and related services, and to manage our practice. This may include:

  • Name, address and contact details
  • Date of birth
  • Medical history, developmental history and family history
  • Details of past and current therapies and supports
  • NDIS details including plan type, funding category and plan manager details
  • Medicare or private health fund details where applicable
  • Relevant lifestyle, social or educational information that helps inform the planning of neurodevelopmental capacity-building supports
  • Login credentials and payment or billing information (where applicable)

We may also collect sensitive information, such as health status, disability, cultural background or religious beliefs, where directly relevant to the services we provide. Sensitive information is handled with additional care and is only collected with your consent or as required by law.

 

2.  How We Collect Your Information

We usually collect your information directly from you, or from your child's parent or carer, during registration, consultations or assessments. With your consent, we may also collect information from:

  • Other healthcare providers or allied health professionals
  • NDIS planners or funding agencies
  • Teachers or school staff
  • Family members or carers
  • Support workers involved in your or your child's care

In rare cases, we may collect information without consent where required by law, or in an emergency where health or safety is at risk.

We also collect cookies and similar data when you use our website. Cookies help us understand how visitors use the site and improve your experience. They do not, in most cases, identify you personally.

 

3.  How We Use Your Information

We use your personal information for the following purposes:

  • Providing neurodevelopmental capacity-building supports and services tailored to you or your child
  • Communicating with other healthcare or support providers involved in your care, with your consent
  • Meeting reporting requirements for the NDIS and other funding bodies
  • Processing payments and maintaining accurate practice records
  • Managing and improving our practice, including training, auditing and quality assurance
  • Complying with legal obligations, such as mandatory reporting of child safety concerns
  • Sending relevant practice updates or health information (see Direct Marketing below)

Direct Marketing

We may contact you with relevant information about our services or practice where we have collected your contact details directly from you and where the communication is of a type you would reasonably expect from a neurodevelopmental capacity-building support practice. We will never use sensitive information, including health information, for direct marketing. Every marketing communication will include a simple way to opt out at any time.

 

4.  Disclosure of Your Information

We only disclose your personal information where necessary. This may include disclosure to:

  • CMT staff, contractors and assistants involved in service delivery
  • Other health professionals, therapists or educators involved in your care, with your consent
  • The NDIS, Medicare, private health insurers or government agencies when required
  • A parent, carer or guardian with legal authority
  • IT service providers who securely manage our electronic records systems
  • Payment processors

We will never sell your personal information to third parties. We will only share your information without your consent where required by law, or where it is necessary to protect the health or safety of you or another person.

 

5.  NDIA Information Requests

Connect Movement Therapy may be required to provide information to the NDIA in relation to claims for payment under Section 45A of the NDIS Act. Where such requests occur:

  • Information provided will be limited to the minimum required, typically attendance records, service dates, high-level service descriptions and session notes
  • Internal clinical notes, raw assessment data, audio recordings and practitioner reflections are not NDIA-facing records
  • You will be notified where practicable prior to any disclosure, unless prohibited by law

 

6.  Data Storage and Security

CMT stores all client records electronically in secure, encrypted cloud-based systems. Paper forms are securely destroyed once entered electronically. Records are backed up regularly and protected by security measures to prevent unauthorised access, modification or disclosure.

All staff and contractors are trained in their privacy obligations and follow strict internal protocols. Access to participant records is restricted to authorised personnel only.

 

7.  Access and Correction

Under Australian Privacy Principles 12 and 13, you have the right to access the personal information we hold about you or your child, and to request correction of any information that is inaccurate, incomplete or out of date.

Requests can be made in writing at admin@connectmt.com.au, addressed to Director. We may charge a small administrative fee for copies of records. If we are unable to provide access for legal or other reasons, we will explain why in writing.

 

8.  Overseas Transfers of Personal Information

Some of our service providers, such as cloud hosting or practice management software providers, may store or process your personal information in countries outside Australia, including the United States of America. Where this occurs, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles.

 

9.  Retention and Destruction

CMT is required to retain health records in accordance with Australian legislation governing health records. Once records are no longer required to be retained, they will be securely destroyed in accordance with applicable privacy laws and professional standards.

 

10.  Complaints

If you have a concern about how we have handled your personal information, please contact our Director at admin@connectmt.com.au. We will acknowledge your complaint within 10 business days, investigate the issue and respond in writing with the outcome.

If you are dissatisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner (OAIC) at http://www.oaic.gov.au.

 

11.  Changes To This Policy

This Privacy Policy may be updated from time to time in line with legislative changes or practice reviews. The current version will always be available on our website and on request. This policy was last updated in April 2026 and is current as of that date.