Privacy Policy

1 About us

This Privacy Policy applies to SG OT Holdings Pty Ltd (ABN 51 669 041 829), trading as Your Early Education OT and offering the Regulation Rituals® program. References to "we", "us" or "our" mean SG OT Holdings Pty Ltd. References to "you" mean any person whose personal information we collect.

We are based in Queensland, Australia, and we are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2 What personal information we collect

We only collect personal information that we genuinely need to provide our services and run our business. The kinds of information we may collect include:

• Identity and contact details — your name, email address, phone number, postal address, job role, and the early childhood centre or organisation you work for.
• Account information — login details, course progress, and engagement data within the Regulation Rituals® learning platform (Kajabi).
• Payment information — billing details processed through our payment providers. We do not store your full credit card or bank details on our systems.
• Communications — emails, contact form submissions, social media messages, and any voice notes or written feedback you share with us.
• Professional information — for centres engaging our consulting or professional development services, this may include details about your team, programs, and general group practices. Our consultancy services are not specific health services and we do not work with children or educators on a one-to-one clinical basis. We focus on whole-group and universal approaches rather than individual child cases.
• Technical and website usage data — IP address, browser type, device, pages visited, and referring URLs (see our Cookie & Tracking Notice).

Sensitive information

Our consultancy and professional development services are not specific health services. We do not work with individual children or families in a clinical capacity, and we do not collect, discuss, or store any identifying information about individual children. Our work focuses on whole-group and universal practices at an organisational or team level. We ask that educators and centre staff do not share identifying information about specific children when engaging with our services.

Where SG OT Holdings Pty Ltd provides specific occupational therapy health services to a patient, that service is managed separately through Splose, a secure practice management platform. Information collected in a clinical health context is handled in accordance with the Australian Privacy Principles and the relevant obligations of the Australian Health Practitioner Regulation Agency (AHPRA).

3 How we collect personal information

We collect personal information directly from you when you:

• Submit an enquiry or contact form on our website.
• Subscribe to our email list or download a free resource.
• Enrol in Regulation Rituals® or any other program.
• Engage us to provide consulting, training, or coaching services.
• Communicate with us by email, phone, social media, or messaging.
• Attend an event, workshop, or webinar we run.

We may also collect information indirectly through our website analytics, our email platform, our learning platform, and our accounting and customer relationship management systems.

4 Why we collect, use, and disclose your information

We collect, use, and disclose personal information to:

• Provide our courses, services, and resources to you.
• Process payments and issue invoices and receipts.
• Communicate with you about your enrolment, services, or enquiry.
• Send you marketing communications (where you have opted in), including newsletters, course updates, and offers — you can unsubscribe at any time.
• Improve our website, services, and content.
• Comply with our legal, regulatory, and professional obligations, including those of the Australian Health Practitioner Regulation Agency (AHPRA).
• Maintain business records, including for tax and accounting purposes.

5 Who we share your information with

We share personal information only with parties who help us run our business, and only to the extent necessary. These include:

• Course and content platforms — Kajabi (our learning platform) and our email marketing provider.
• Payment providers — for processing payments and managing subscriptions.
• Accounting software — Xero, for invoicing and bookkeeping.
• Workflow and automation tools — Google Workspace (Gmail, Drive, Forms, Sheets, Calendar) and similar tools used to operate the business.
• AI-assisted tools — we use Anthropic's Claude to power an internal business dashboard that helps us analyse and present operational business data (such as sales summaries, scheduling, and course metrics). No personal information, health information, or client data is processed through this tool. Anthropic handles data in accordance with its own privacy and security commitments.
• Professional advisors — accountants, lawyers, and insurers, where reasonably necessary.
• Regulators or law enforcement — where we are required or authorised by law.

We do not sell or rent your personal information to anyone.

6 Overseas disclosure

Some of the providers we use store data on servers located outside Australia, including in the United States and the European Union. By using our website and services, you acknowledge that your personal information may be stored or processed overseas. We take reasonable steps to ensure that overseas providers handle personal information in a way that is consistent with the Australian Privacy Principles.

7 How we store and protect your information

We take the security of your personal information seriously. We use:

• Reputable, enterprise-grade providers with their own security and privacy practices.
• Strong, unique passwords and multi-factor authentication on key accounts.
• Restricted access — only people who need access to do their work have it.
• Encryption in transit (HTTPS) for our website.
• Regular review of the tools and integrations we use.

No system is ever completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security. If we ever become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.

8 How long we keep your information

We keep personal information only for as long as we need it for the purposes set out in this policy, or for as long as we are required to keep it under Australian law (for example, financial records must generally be kept for at least seven years). When we no longer need information, we take reasonable steps to delete or de-identify it.

9 Your rights

Under Australian privacy law, you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate, out of date, or incomplete.
• Ask us to delete your information (subject to our legal record-keeping obligations).
• Withdraw consent for marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly.
• Make a complaint about how we have handled your information.

To make any of these requests, please contact us using the details below. We will respond within a reasonable time, generally within 30 days.

10 Children and privacy

Our website and services are designed for adults — early childhood educators, centre leaders, and other professionals. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

11 Complaints

If you are unhappy with how we have handled your personal information, please contact us first using the details below. We take privacy concerns seriously and will work with you to resolve the issue.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

12 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will publish the updated policy on our website with a new "last reviewed" date. Significant changes will be communicated to subscribers and clients.