Privacy Policy

All Ways Learning · Two Worlds Consulting Effective from: [DATE TO BE INSERTED ON LAUNCH] Last updated: [DATE]

In plain language

We collect as little as we can. Your first name, your email, and your password are all you give us to create an account. Once you're inside, you can complete assessments about your child — and that information stays yours.We do not sell your data and do not share it except as described in this policy with anyone except the technology providers that store it for us. You can ask for your data, ask us to fix it, or delete your account and everything in it at any time, and we’ll aim to do so within 30 days .

The rest of this policy is the detailed version. It's written to be read.

1. Who we are

This service is operated by Two Worlds Consulting (ABN 63 740 320 684), trading as All Ways Learning, located at Suite 3, The Marina Work Studios, 18 Park Street, Port Macquarie NSW.

When this policy says "we," "us," or "our," it means Two Worlds Consulting. When it says "you," it means anyone who creates an account on allwayslearning.com.au or uses the assessment tools we provide.

We are bound by the Australian Privacy Act 1988 and the Australian Privacy Principles. This policy explains how we comply with those obligations.

2. What we collect

At signup, we collect three things:

• Your first name

• Your email address

• A password (which is encrypted before storage — we cannot see it)

Inside the assessment tools, you may choose to enter:

• Your child's first name or initials

• Your child's age (or year of birth)

• Your responses to assessment questions about temperament, sensory profile, functional skills, and similar developmental areas

• Notes you write about goals, observations, or progress

We do not ask for, and you should not enter:

• Your or your child's surname

• Your child's full date of birth, school name, address, or Medicare/NDIS number

• Diagnoses or clinical labels (unless you choose to mention these in free-text notes)

• Any other identifying information about third parties (therapists, support workers, family members)

If you enter information we haven't asked for in free-text fields, we'll still treat it confidentially under this policy — but the more you choose to share, the more you ask us to protect, so we recommend keeping notes minimal.

3. How we collect it

We collect personal information directly from you when you:

• Create an account

• Complete an assessment or fill in any field within the tool

• Email us or contact us through the website

• Apply to participate in our pilot program

We generally collect personal information directly from you. We do not buy data, scrape data, or receive information about you from third parties.

4. Why we collect it

We collect personal information for the following purposes:

• To create and maintain your account

• To deliver the assessment tools and reports you've signed up for

• To save your progress so you can return to it later

• To send you communications related to the service (account confirmations, password resets, occasional product updates)

• To improve the service through aggregated, de-identified analysis (for example, "what proportion of users complete an assessment within 30 days"). Some platform features may use automated processing or artificial intelligence tools to assist with generating summaries, insights, or report wording based on the information you enter. These tools are designed to support reflection and organisation of information and are not intended to provide clinical diagnosis, treatment, or professional advice.

• To comply with our legal obligations

We will not use your personal information for any other purpose without your consent.

5. A note about sensitive and health-related information

Some of the information you enter — particularly information about your child's development, sensory profile, behaviour, or functional capacity — may be considered health information or sensitive information under the Privacy Act.

By entering this information into our tools, you are giving us your consent to collect, store, and use it for the purposes described in this policy. You can withdraw that consent at any time by deleting your account, which deletes the associated data.

We do not share health or sensitive information with anyone outside Two Worlds Consulting, except for the technology providers described in section 7 who store it on our behalf.

5A. Not a health service

This platform is designed as an educational, reflective, and support tool. It is not a medical, psychological, or crisis service and does not provide diagnosis, treatment, emergency support, or individual clinical care.

Reports, summaries, and insights generated through the platform are intended to support understanding, reflection, and planning only. They should not be relied upon as a substitute for professional medical, psychological, educational, legal, or allied health advice.

If you have concerns about safety, mental health, development, or wellbeing, you should seek support from an appropriately qualified professional or emergency service.

6. A note about children's information

Information about children is collected from parents and carers, not from children directly. By entering information about your child, you confirm that you have the right to do so as their parent or legal guardian.

If you are a young person creating an account on your own behalf and you are under 16, please ask a parent or guardian to set up the account with you.

7. How and where we store your information

Your account information and assessment data is stored using secure cloud infrastructure provided by trusted third-party technology providers, including Supabase (database and authentication services) and Google Firebase (website hosting and application delivery).

These providers may process or store some information in regional data centres located outside Australia. By using this service, you acknowledge that some information may be processed or stored outside Australia as part of normal cloud infrastructure operations.

We are committed to minimising identifiable information collection wherever possible. The platform is designed so that surnames, home addresses, phone numbers, Medicare numbers, and similar identifying details are not required for participation.

We use reasonable industry-standard security measures to help protect your information, including:

• Encryption of data in transit (HTTPS) and at rest

• Secure password hashing and authentication systems

• Database access controls restricting users to their own information

• Restricted administrative access within Two Worlds Consulting

• Automated backups and infrastructure monitoring

Some report-generation or processing features may utilise third-party AI or cloud processing providers. Where used, these services operate under their own security and privacy obligations. We take reasonable steps to minimise identifiable information processed through these systems.

No online platform can guarantee absolute security. However, we take reasonable steps consistent with Australian privacy expectations and industry practice to protect the information entrusted to us.

8. Who we share your information with

We do not sell your information. We do not share your information with marketing companies, data brokers, advertisers, insurers, schools, the NDIA, or any other third party.

The only entities that handle your information are:

• The technology providers named in section 7, who store and process it on our behalf under their own privacy and security obligations

• Email service providers we use to send you account-related emails (for example, password reset emails)

• Our own staff at Two Worlds Consulting, on a need-to-know basis

We will only disclose your information to anyone else if:

• You have given us explicit consent to do so

• We are required by law (for example, a court order or a regulatory direction)

• It is necessary to protect someone from serious harm

9. How long we keep your information

We keep your account information and assessment data for as long as your account is active.

If you delete your account, we will delete your personal information and assessment data within 30 days, except where we are legally required to keep specific records for longer (for example, financial records related to any payments, which are kept for 7 years under Australian tax law).

If your account is inactive for more than 24 months, we may contact you and, if we don't hear back, archive or delete the account.

10. Your rights

Under the Australian Privacy Principles, you have the right to:

• Access your information. You can request a copy of the personal information we hold about you. We'll provide it within 30 days, in a usable format, free of charge for a reasonable request.

• Correct your information. If anything we hold about you is wrong, you can ask us to fix it. Most fields you can edit yourself within the tool. For anything you can't, email us.

• Delete your information. You can delete your account and all associated data at any time from within the tool. If you'd prefer we did it for you, email us.

• Withdraw consent. You can withdraw consent for us to use your information at any time. In practice, this usually means deleting your account.

• Make a complaint. If you think we've mishandled your information, you can complain to us using the contact details below. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Cookies and tracking

Our website uses minimal cookies — only those necessary to keep you logged in and to remember your preferences within the tool. We do not use third-party advertising cookies, and we do not use cross-site tracking pixels (for example, Facebook Pixel) on the parts of our site that handle your personal data.

If we run advertising on Facebook, Instagram, or Google to promote the service, those ad platforms may set their own cookies on the public landing pages you arrive at. Once you create an account and enter the tool, no advertising trackers follow you in.

12. Data breaches

If we discover a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme. We'll tell you what happened, what data was involved, and what steps to take.

13. Changes to this policy

We may update this policy from time to time. If we make significant changes — particularly anything that affects how your data is used or shared — we'll let you know by email and through a notice on the website before the changes take effect.

The date at the top of this policy shows when it was last updated.

14. Contact us

If you have questions, want to access or correct your information, or want to make a complaint, email us at:

[CONTACT EMAIL TO BE INSERTED — e.g. privacy@allwayslearning.com.au]

Or write to:

Two Worlds Consulting Suite 3, The Marina Work Studios 18 Park Street, Port Macquarie NSW 2444

We'll respond within 30 days. Most responses are much faster than that.

This policy is written in plain language on purpose. If anything in it is unclear, ask us — that's a sign the policy needs to be better, not that you've missed something.