TO THE MOON & BACK — PRIVACY POLICY
Version: 1.1
Date: June 2025
Next Review Date: June 2026
PART 1 – ABOUT THIS POLICY
1.1 Purpose
To the Moon & Back (TMB) respects every person’s right to privacy and confidentiality. We are committed to protecting the privacy of the personal information we collect and hold about individuals.
To the Moon & Back ensures that appropriate standards are maintained to protect the privacy of the data it holds. To allow us to provide you and your family with the best possible services, we need to collect and store personal and health information about you and your child.
To the Moon & Back complies with:
This Privacy Policy explains how To the Moon & Back manages the personal and health information we collect, use, and disclose, in line with our legal, ethical, and professional obligations.
To the Moon & Back is a private specialist behaviour support practice owned and operated by Kristin Bayley. We provide behaviour support services directly and through trusted partnerships with other organisations and practitioners, under our active NDIS registration.
PART 2 – HOW TO THE MOON & BACK HANDLES YOUR PERSONAL INFORMATION
2.1 Legal Obligations
To provide you with the services you have requested, To the Moon & Back will need to collect and use your personal and health information. If you provide incomplete or inaccurate information to us, or withhold personal and health information from us, we may not be able to provide you with the services you are seeking.
2.2 What Information Do We Collect?
We collect information from you that is necessary to provide you with behaviour support services and to manage our relationship with you. The information we collect includes:
2.3 How Do We Collect Personal and Health Information?
We usually collect your personal and health information directly from you. We may collect it at various stages, including (but not limited to):
We collect information through:
Sometimes, we may need to collect information about you from a third party (such as a relative or another health service provider).
2.4 How Do We Use Your Information?
We use your personal and health information for the purpose you have given the information to us. We will use your information to provide behaviour support services to you, to manage our relationship with you, and to contact you in relation to matters concerning your care. We may also use your information for other purposes permitted under the Privacy Act 1988.
We collect, hold, use and disclose your personal information for the following purposes:
We may contact you regarding the above by email, post, or telephone.
From time to time we may use the information you give us for marketing purposes. Other than as required by law, or as set out in this Privacy Policy, we will not disclose information about you to any third party without your permission.
At all times, To the Moon & Back ensures that the handling of your personal information aligns with our obligations under the NDIS Code of Conduct, NDIS Practice Standards, ABAA Code of Ethics, BACB Code of Ethics, and BSPA Code of Conduct.
2.5 Who Might We Disclose Your Information To?
We may disclose your information to the following:
Other health professionals involved in your care:
We may disclose information across health professionals providing your care.
The referrer:
We will usually send a discharge summary to your referrer (e.g. medical practitioner). You may request that we do not do so.
Relatives, guardian, close friends or legal representative:
We may provide information to a parent, child, guardian or responsible person unless you request otherwise.
Child safety obligations:
If concerns are held about a child’s safety, we may be legally obligated to disclose information without consent under Chapter 16A of the Children and Young Persons (Care and Protection) Act 1998.
Third-party service providers:
Including:
Other uses and disclosures:
For quality assurance, accreditation, audits, risk management, and to liaise with government agencies where required.
Direct marketing:
You may opt out of marketing communications at any time.
2.6 Access to and Correction of Your Information
You have the right to access your personal and health information and request corrections if necessary. Please contact our Privacy Officer.
2.7 Data Quality
We will take reasonable steps to ensure your information is accurate, complete and up to date.
2.8 Data Security
We will take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification or disclosure.
We will retain records in line with the Health Records and Information Privacy Act 2002:
Data is stored via:
Where data is transmitted to overseas servers, appropriate privacy protections are in place in accordance with APP 8.
2.9 Withdrawal or Limitation of Consent
You may withdraw or limit your consent at any time by providing written notice. Doing so may affect the services we can provide.
2.10 Complaints About Privacy Issues
If you have questions or complaints about our privacy practices, you may contact our Privacy Officer:
Privacy Officer: Binta Hellemans
Address: PO Box 651 St Ives 2075
Email: Binta@tothemoonandback.net.au
Phone: 0411 427 233
PART 3 – HOW WE HANDLE INFORMATION ON OUR WEBSITE
3.1 Collection
We do not attempt to identify individual users unless you provide information directly.
3.2 Cookies
Our website uses temporary cookies for improved functionality.
3.3 Links to Third-Party Websites
We are not responsible for the privacy practices of third-party websites.
3.4 Use and Disclosure
Any personal information collected via our website will be used in line with this Privacy Policy and our professional obligations.
PART 4 – POLICY VERSION AND REVIEW
This Privacy Policy will be reviewed annually or more frequently if required.
Version: 1.1
Date: June 2025
Next Review Date: June 2026