Their Path Youth Services is responsible for the personal information described in this notice. For privacy questions, access or correction requests, or concerns about how information has been handled, email alex@theirpathyouthservices.com.au. Please keep your first message general so we can arrange an appropriate way to discuss any private details.
What we collect and why
When you email us, we receive the name and email address you use, your message and any information you choose to include. We use this to respond, discuss whether a service could fit and keep track of the conversation. If a trusted person enquires for you, we also receive what they share; please ask them to share only what is needed.
A general outline is enough for an initial enquiry. We do not need children's names, dates of birth, diagnoses, medical records or funding documents. A suburb and broad age or year group can help us consider the location and service. If you do not provide a usable reply address, we may be unable to respond. You do not have to subscribe to marketing or supply participant records to ask a general question.
If you raise feedback or a complaint, we use the information needed to understand it, assess any immediate safety concern, respond and record the action taken. You can raise a concern anonymously, although that may limit our ability to investigate or give you updates.
Consultation bookings
Our booking form uses Google Apps Script and Google Calendar. Loading it connects your browser to Google, which processes technical information to provide the service. When you book, Google and Their Path receive your name, email address, selected time, call preference and service of interest. Phone bookings require a callback number. You also select Yes, No or Not sure for NDIS funding so we can prepare for the conversation; we do not request funding records. We use these details to arrange the consultation, send a confirmation and calendar invitation, and manage cancellations. Details are held in the private business calendar and confirmation emails. A Google Meet link is created for video bookings only. Please provide adult contact details only, without child identifiers, diagnoses or documents.
Google may process booking information internationally as described under Who receives information and in its Privacy Policy. Initial consultations follow our general enquiry retention approach unless they become a service booking or another retention need applies. Contact us to request access or corrections.
To protect online bookings from automated misuse, we use Cloudflare Turnstile when you reach the contact-details step. The check connects your browser to Cloudflare, which processes technical browser and network information, including your IP address. Our server sends Cloudflare the check result token and a random retry reference for validation; it does not send your name, email, phone number or service answers to that validation endpoint. Cloudflare may process information internationally; see its Privacy Policy and Turnstile Privacy Addendum. If the check is inaccessible or unavailable, you can email us to arrange your consultation.
Our booking system keeps a small, bounded record of hashed request references and safety-check results to prevent repeats and manage short-term booking limits. Expired entries stop being used after five or fifteen minutes, depending on the control, and are replaced by later booking activity; they are not automatically deleted at those times. These control records do not contain the contact details entered in the form.
Who receives information
Their Path Youth Services handles enquiries through its business Google Workspace email account. Google processes information as part of providing the email service. Google uses facilities and service providers in several countries. Its published data-centre locations include the United States, Belgium, Denmark, Finland, Germany, Ireland, Japan, the Netherlands, Singapore and Taiwan. These are examples of possible processing locations, not a list of where each email is stored. Google's data-centre locations and Workspace service-provider list explain its international operations. Applicable service and account arrangements can affect processing locations.
Cloudflare provides our website hosting and delivery. In doing so it processes technical information about visits, which can include IP addresses, routing details and website traffic information, to operate and protect its services. Its privacy policy describes international processing, including storage primarily in the United States and European Economic Area and access from other countries. Provider records may be retained for service and legal purposes under their applicable policies. We do not promise that all website or email information stays in Australia.
We do not add people to marketing lists because they enquire, or use their information for testimonials. We may share relevant information with a person you authorise, an adviser where needed to address a matter, or an authority where required or permitted for safety or legal reasons. We limit what is shared to the purpose involved. We do not promise absolute confidentiality where someone may be unsafe.
Paying through Stripe
We send an invoice only after agreeing the service and price with the adult payer or organisation. Our information website does not collect card details.
We use Stripe to prepare invoices and process payments, refunds and disputes. We provide the payer's necessary contact and billing details, the agreed charge and a booking reference. Please do not put a child's name, health information or support records in payment descriptions. Payment details are entered on Stripe's hosted page; please do not email card details to us. We receive payment status and transaction information for bookkeeping and support.
Stripe also processes device and transaction information to operate its services, prevent fraud and meet legal obligations. It works with banks and service providers internationally, including in the United States and India. Its Privacy Policy explains its handling and your choices. If you choose Link, Stripe's separate saved-payment service also applies. Our one-off invoices do not save payment methods for future use by Their Path.
Keeping and managing information
For general enquiries that do not become bookings, we review the information after 12 months without further meaningful contact and delete or de-identify it when there is no continuing need to keep it. We may review it sooner if it is no longer needed. Complaints, safety matters, financial records and records needed for a claim, investigation or legal obligation follow separate retention requirements. You can ask about the information we hold and the applicable retention arrangements.
Access is limited to people who need the information for an authorised purpose. Please do not send sensitive participant records through the initial enquiry route. Before asking for participant information, we will provide a separate collection notice explaining the information, purposes, recipients and return method for that service.
Access, corrections and concerns
Contact Their Path Youth Services if you would like access to your information, want to correct it or think it has been handled incorrectly. We may need to confirm your identity and authority before releasing information, particularly where a child's information or another person's privacy is involved. We will explain any information we cannot provide and the reason.
We aim to acknowledge privacy requests and concerns within three business days. If a matter needs more time, we will explain the next step and when you can expect an update. Our Feedback and complaints page explains other ways to raise a concern, including concerns about the facilitator, business owner or person handling the complaint. You do not need our permission to seek advice from an appropriate external authority.
Website and email links
Website analytics
We do not use Google Analytics or optional analytics cookies on this website. No analytics consent popup is shown. Cloudflare hosting and technical processing are described above.
The Email us link opens your own email app; it does not submit a website form. Your email provider also processes the message you send. We do not offer a marketing mailing-list signup or use enquiry details to create advertising audiences. Hosting and security-related technical processing are explained above. Any additional website measurement or collection will be described here before it is introduced.