Privacy Policy

1.       Step Right Health Pty Ltd commitment to privacy

(a)         Step Right Health Pty Ltd (ACN: 649591408), its subsidiaries and affiliates in Australia (collectively referred to as "we" and "us") are committed to managing personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and in accordance with other applicable privacy laws.

(b)         This document sets out our policies for managing your personal information and is referred to as our Privacy Policy.

(c)         In this Privacy Policy, “we” and “us” refers to Step Right Health Pty Ltd and “you” refers to any individual about whom we collect personal information.

2.       About Step Right Health Pty Ltd

(a)         Step Right Health Pty Ltd is a mobile private speech pathology service based in the Melbourne western suburbs, specialising in evidence-based speech therapy for children and young people under 18 years of age. The practice operates from Caroline Springs and serves Brimbank, delivering services directly in the child's everyday environment—where they live, learn, and play.

(b)         Step Right Health provides comprehensive speech pathology services including assessment and therapy for speech, language, and communication needs in children and young people. Services are delivered in natural settings such as homes, schools, and community environments, working collaboratively with families, caregivers, and other professionals. The practice extensively supports NDIS-funded clients under formal service agreements, providing individualised, evidence-based interventions tailored to each child's developmental needs.

3.       What information does Step Right Health Pty Ltd collect about you?

3.1.      Clients and prospective clients

(i)            When you or your representenquire about our services or when you become a client of Step Right Health Pty Ltd, a record is made which includes your personal information.

(ii)           The type of personal information that we collect will vary depending on the circumstances of collection and the kind of service that you request from us, but will typically include:

(A)          your name, e-mail, postal address and other contact details;

(B)          information about your employer or an organisation who you represent;

(C)          your professional details; and

(D)          any additional personal information you provide to us, or authorise us to collect, as part of your interaction with Step Right Health Pty Ltd.

3.2.      Prospective employees or applicants

(i)            We collect personal information when recruiting personnel, such as your name, contact details, qualifications and work history. Generally, we will collect this information directly from you.

(ii)           We may also collect personal information from third parties in ways which you would expect (for example, from recruitment agencies or referees you have nominated). Before offering you a position, we may collect additional details such as your tax file number and superannuation information and other information necessary to conduct background checks to determine your suitability for certain positions (for example, positions which involve working with children).

3.3.      Other individuals

(i)            Step Right Health Pty Ltd may collect personal information about other individuals who are not clients of Step Right Health Pty Ltd. This includes customers and members of the public who participate in events we are involved with, individual service providers and contractors to Step Right Health Pty Ltd, and other individuals who interact with Step Right Health Pty Ltd on a commercial basis. The kinds of

personal information we collect will depend on the capacity in which you are dealing with Step Right Health Pty Ltd.

(ii)           If you are participating in an event we are managing or delivering, we may take images or audio-visual recordings which identify you.

(iii)          In limited circumstances, Step Right Health Pty Ltd may collect information which is considered sensitive information. For example, if you are injured at an event promoted or delivered by Step Right Health Pty Ltd we may collect health information about you in an emergency or otherwise with your consent.

(iv)          We may collect personal information about children (for example, when children participate in events we are involved with). Where children do not have sufficient maturity and understanding to make decisions about their personal information, we will require their parents or guardians to make decisions on their behalf.

(v)           You can always decline to give Step Right Health Pty Ltd any personal information we request, but that may mean we cannot provide you with some or all of the services you have requested. If you have any concerns about personal information we have requested, please let us know.

(vi)          Where collects sensitive health information about children (including speech and language assessments, therapy progress notes, medical history, and clinical recordings), we will obtain written informed consent from parents or guardians before collection. This consent will specify the purpose of collection, how the information will be used and stored, and may be withdrawn at any time by contacting .

3.4.      Visitors to our websites

The way in which we handle the personal information of visitors to our websites is discussed below.

4.       How and why does Step Right Health Pty Ltd collect and use your personal information?

(a)         Step Right Health Pty Ltd collects personal information and health information reasonably necessary to carry out our business, to assess and manage our clients' needs, and provide services including assessment and therapy for speech, language, and communication needs. We may also collect information to fulfil administrative functions associated with these services, for example billing, entering into contracts with you or third parties and managing client relationships.

(b)         The purposes for which Step Right Health Pty Ltd usually collects and uses personal information depends on the nature of your interaction with us, but may include:

(i)            responding to requests for information and other general inquiries;

(ii)           managing, planning, advertising and administering programs, events, competitions and performances;

(iii)          researching, developing and expanding our facilities and services;

(iv)          informing you of our activities, events, facilities and services;

(v)           recruitment processes (including for volunteers, internships and work experience); and

(vi)          responding to enquires and complaints.

(c)         Step Right Health Pty Ltd generally collects personal information directly from you. We may collect and update your personal information over the phone, by email, over the internet or social media, or in person. We may also collect personal information about you from other sources, for example:

(i)            our affiliated and related companies;

(ii)           third party suppliers and contractors who assist us to operate our business; and

(iii)          eductional institutes, other relevant external health services.

(d)         Step Right Health Pty Ltd also collects and uses personal information for market research purposes and to innovate our delivery of products and services. We may use secure tools and technologies, including software that assists with documentation and resource development, to support service delivery. Where such tools are used, we do not input identifiable personal or health information unless appropriate consent has been obtained. Any information used for these purposes is de-identified or general in nature.

5.       How does Step Right Health Pty Ltd interact with you via the internet?

(a)         You may visit our website (www.steprighthealth.com.au) without identifying yourself. If you identify yourself (for example, by providing your contact details in an enquiry), any personal information you provide to Step Right Health Pty Ltd will be managed in accordance with this Privacy Policy.

(b)         Step Right Health Pty Ltd's website uses cookies. A “cookie” is a small file stored on your computer's browser, which assists in managing customised settings of the website and delivering content. We collect certain information such as your device type, browser type, IP address, pages you have accessed on our websites and on third-party websites. You are not identifiable from such information.

(c)         You can use the settings in your browser to control how your browser deals with cookies. However, in doing so, you may be unable to access certain pages or content on our website.

(d)         Step Right Health Pty Ltd's website may contain links to third-party websites. Step Right Health Pty Ltd is not responsible for the content or privacy practices of websites that are linked to our website.

6.       Can you deal with Step Right Health Pty Ltd anonymously?

Step Right Health Pty Ltd will provide individuals with the opportunity to remain anonymous or use a pseudonym in their dealings with us where it is lawful and practicable (for example, when making a general enquiry). Generally, it is not practicable for Step Right Health Pty Ltd to deal with individuals anonymously or pseudonymously on an ongoing basis. If we do not collect

personal information about you, you may be unable to utilise our services or participate in our events, programs or activities we manage or deliver.

7.       How does Step Right Health Pty Ltd hold information?

(a)         Step Right Health Pty Ltd take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These measures include the use of secure systems, access controls, and trusted third-party service providers to store and manage information. While we take reasonable steps to protect your information, the transmission of information via the internet is not completely secure, and you provide information at your own risk.

(b)         Step Right Health Pty Ltd maintains physical security over paper and electronic data stores, such as through locks and security systems at our premises. We also maintain computer and network security, for example, we use firewalls (security measures for the internet) and other security systems such as user identifiers and passwords to control access to our computer systems.

(c)         Our websites do not necessarily use encryption or other technologies to ensure the secure transmission of information via the internet. Users of our websites are encouraged to exercise care in sending personal information via the internet. ‍

(d)         We retain therapeutic records for 7 years following the final service delivery or until the child reaches 25 years of age (whichever is longer), in accordance with healthcare regulations and NDIS service agreement requirements. Personal information is securely destroyed or permanently de-identified when retention periods expire, with deletion activities documented for audit purposes.

8.       Does Step Right Health Pty Ltd use or disclose your personal information for direct marketing?

(a)         Step Right Health Pty Ltd may use or disclose your personal information for the purpose of informing you about our services, upcoming promotions and events, or other opportunities that may interest you. If you do not want to receive direct marketing communications, you can opt-out at any time by contacting us using the contact details below.

(b)         If you opt-out of receiving marketing material from us, Step Right Health Pty Ltd may still contact you in relation to its ongoing relationship with you.

9.       How does Step Right Health Pty Ltd use and disclose personal information?

9.1.  For clients

The purposes for which we may use and disclose your personal information will depend on the services we are providing you. For example, if you have engaged us to deliver a service, we may disclose information about you to service providers where this is relevant to our services.

9.2.  For customers and participants

If you are a customer or participant in an event, we may disclose your personal information to our clients and venues where this is reasonably necessary for, and relevant to, the delivery of the event. We may use images or audio-visual recordings which identify you for promotional purposes where you would reasonably expect this to occur.

9.3.  Disclosure to contractors and other service providers

(i)            Step Right Health Pty Ltd may disclose information to third parties we engage in order to provide our services, including contractors and service providers used for data processing, data analysis, customer satisfaction surveys, accounting, information technology services and support, website maintenance/development, printing, archiving, mail-outs, and market research.

(ii)           For NDIS-funded services, personal information of participants will only be disclosed to the NDIS, service coordinators, or other healthcare providers with prior written consent from the participant or their guardian, documented in accordance with NDIS Practice Standards and subject to formal data sharing agreements.

(iii)          Third parties to whom we have disclosed your personal information may contact you directly to let you know they have collected your personal information and to give you information about their privacy policies.

9.4.  Use and disclosure for administration and management

Step Right Health Pty Ltd will also use and disclose personal information for a range of administrative, management and operational purposes. This includes:

(i)            administering billing and payments and debt recovery;

(ii)           planning, managing, monitoring and evaluating our services;

(iii)          quality improvement activities;

(iv)          statistical analysis and reporting;

(v)           training staff, contractors and other workers;

(vi)          risk management and management of legal liabilities and claims (for example, liaising with insurers and legal representatives);

(vii)         responding to enquiries and complaints regarding our services;

(viii)       obtaining advice from consultants and other professional advisers; and

(ix)          responding to subpoenas and other legal orders and obligations.

9.5.  Other uses and disclosures

We may use and disclose your personal information for other purposes explained at the time of collection or otherwise as set out in this Privacy Policy.

10.    How can you access or seek correction of your personal information?

(a)         You are entitled to access your personal information held by Step Right Health Pty Ltd on request. To request access to your personal information please contact our privacy officer using the contact details set out below.

(b)         You will not be charged for making a request to access your personal information but you may be charged for the reasonable time and expense incurred in compiling information in response to your request.

(c)         We will take reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up-to-date. You can help us to do this by letting us know if you notice errors or discrepancies in information we hold about you and letting us know if your personal details change.

(d)         However, if you consider any personal information we hold about you is inaccurate, out-of-date, incomplete, irrelevant or misleading you are entitled to request correction of the information. After receiving a request from you, we will take reasonable steps to correct your information.

(e)         We may decline your request to access or correct your personal information in certain circumstances in accordance with the Australian Privacy Principles. If we do refuse your request, we will provide you with a reason for our decision and, in the case of a request for correction, we will include a statement with your personal information about the requested correction.

(f)          For clients under 18 years of age, access requests may be made by a parent, guardian or the child themselves where they have sufficient maturity to understand the request. We will respond to access requests within 5 business days for routine requests and 15 business days for complex requests involving health records, and may withhold information where disclosure could reasonably be expected to pose a serious threat to the child's wellbeing.

11.    What should you do if you have a complaint about the handling of your personal information?

(a)         You may contact Step Right Health Pty Ltd at any time if you have any questions or concerns about this Privacy Policy or about the way in which your personal information has been handled.

(b)         You may make a complaint about privacy to the privacy officer at the contact details set out below.

(c)         The privacy officer will first consider your complaint to determine whether there are simple or immediate steps which can be taken to resolve the complaint. We will generally respond to your complaint within a week.

(d)         If your complaint requires more detailed consideration or investigation, we will acknowledge receipt of your complaint within a week and endeavour to complete our investigation into your complaint promptly. We may ask you to provide further information about your complaint and the outcome you are seeking. We will then typically gather relevant facts, locate and review relevant documents and speak with individuals involved.

(e)         In most cases, we will investigate and respond to a complaint within 30 days of receipt of the complaint. If the matter is more complex or our investigation may take longer, we will let you know.

(f)          If you are not satisfied with our response to your complaint, or you consider that Step Right Health Pty Ltd may have breached the Australian Privacy Principles or the Privacy Act, a complaint may be made to the Office of the Australian Information Commissioner. The Office of the Australian Information Commissioner can be contacted by telephone on 1300 363 992 or by using the contact details on the website (www.oaic.gov.au).

12.    How changes are made to this Privacy Policy?

Step Right Health Pty Ltd may amend this Privacy Policy from time to time, with or without notice to you. We recommend that you visit our website (www.steprighthealth.com.au) regularly to keep up to date with any changes.

13.    How can you contact Step Right Health Pty Ltd?

The contact details for Step Right Health Pty Ltd are:

(a)         Step Right Health Pty Ltd privacy officer: Weng In (Rebeca) Lou

(b)         L1 2-8 Lake Street, Caroline Springs, Victoria, 3023

(c)         info@steprighthealth.com.au

This Privacy Policy was last updated on 16 Apr 2026.