Privacy Policy
Contact Info
- Email: contact@bspaustralia.org.au
The Behaviour Support Practitioners Australia Limited (BSPA) Privacy Policy
1. Introduction
- This Privacy Policy (Policy) explains how Behaviour Support Practitioners Australia (BSPA, We, or Us) collects and handles your Personal Information when you interact with Us, including via Our website and member-only areas (including ‘Our Community’).
- BSPA is committed to protecting your privacy. Establishing a trusting relationship with our users is central to our work practices.
- Privacy Legislation means, as applicable, the Privacy Act 1988 (Cth) or supplements, Australian state or territory privacy laws, or any legislation that replaces those laws.
- In this Policy, Personal Information and Personal Data have the same meanings as given to them in the Privacy Legislation.
2. Purpose
- In this Policy, Personal Information and Personal Data have the same meanings as given to them in the Privacy Legislation.
- We apply this Policy to all individuals and entities who interact with BSPA. This includes (but is not limited to) agents, contractors, subcontractors, employees, representatives, users of Our Community, and volunteers.
- We may update this Policy from time to time in accordance with legislative or operational changes. If you would like Us to send you a copy or you have comments or questions regarding this Policy, please contact Us using the details provided in clause 13.
3. Types of information We collect
- We may update this Policy from time to time in accordance with legislative or operational changes. If you would like Us to send you a copy or you have comments or questions regarding this Policy, please contact Us using the details provided in clause 13.
- The type of information that We collect and hold depends on the nature of a person’s involvement with Us.
- We only collect your Personal Information where it is reasonably necessary for Us to pursue one or more of Our functions or activities, or where the law requires Us to collect it.
- Depending on the reason for collecting it, the Personal Information We collect may include (but is not limited to):
- your name and contact details;
- copies of identification documentation;
- payment information and banking details if you are purchasing a product through us;
- Personal Information contained in forms or applications;
- Personal Information contained in queries, or feedback about our services;
- usage data (which may include your IP address, the pages you have clicked through on our websites, websites that referred you to our sites, information about the device you are using, and your wider geographic location).
4. How We collect information
- We ask you for Personal Information when it is reasonably necessary for the activities in which you are seeking to be involved.
- We will only collect your Personal Information by lawful and fair means, including by telephone, by letter, by email, through forms on Our websites or through websites We trust.
- Normally, We collect your Personal Information directly from you (or the relevant individual), unless it is unreasonable or impracticable to do so.
- Subject to clause 4.2:
- We may collect Personal Information from agents, contractors, subcontractors, employees, representatives, users of BSPA’s services (including ‘Our Community’), and volunteers.
- On occasion, We may collect Personal Information from a third party. For example, Personal Information may be provided by third party websites (refer to clause 10).
- We collect user data through log files and cookies.
- Some third-party services (such as analytics, embedded video, or event/webinar platforms) may collect information about your interactions with Our website. Where practicable, we will configure these tools to minimise such data collection;
- We use cookies and similar technologies to operate Our website, maintain log-in sessions, remember preferences, understand visitor use of Our website, improve user experience, and maintain security and authentication;
- In some cases you can block or delete cookies and still use Our services, although if you do, you will be asked for your email address and password every time you log into an account you hold with Us.
- We generally obtain consent from the owner of Personal Information to collect their Personal Information. Consent may be provided in writing, or may be provided oral ly, or may be implied through a person’s conduct.
- You are not required to provide the Personal Information and/or Sensitive Information We request. However, if you choose not to provide it, We may not be able to service your needs (see also clause 7).
5. How We deal with unsolicited personal information
- If We receive your Personal Information from you or a third party without having asked for it, and We determine we do not have a need for it, we will destroy or deidentify the information as soon as practicable, so long as it is lawful and reasonable to do so.
6. How We use your personal information
- We use your Personal Information for a range of purposes, including:
- providing you with our services;
- improving our services through quality-improvement activities;
- providing you with information, news, offers and surveys;
- helping you to access the most appropriate information and tools associated with our websites;
- providing you with support if you need technical assistance;
- processing payments, including donations;
- communicating important service-related announcements, changes to Our services or policies, or password notifications;
- providing you with information about your account and newsletters you have signed up to receive;
- answering inquiries and resolving complaints;
- complying with directions from authorities or legislative requirements;
- screening for or preventing potentially fraudulent, illegal or abusive activity;
- storing your data so it is available for your future use of our services.
- We may also collect, hold, use and disclose Personal Information for purposes:
- which we explained at the time of collection; or
- which are required by law; or
- for which you have provided your consent; or
- which are necessary for maintaining the reliability and security of
- infrastructure and services.
- We only use or disclose your Personal Information for the above purposes, or for purposes that you consent to, or for other related purposes that you would reasonably anticipate.
- To the extent you submit content to public areas of our websites (for example, on a public online forum), it will be available to the public and we may reuse or republish it. If you request that such content be removed, we will do our best to promptly remove it.
- If you have any concerns about us using your Personal Information in any of these ways, please notify us immediately.
7. How We store and handle your data
- We hold Personal Information in a number of ways, including in electronic databases, email contact lists, and in paper files held in secure offices.
- We take reasonable steps to:
- make sure that the Personal Information is accurate, up to date and complete, and (in the case of use and disclosure) relevant;
- protect the Personal Information from misuse, interference, loss, unauthorised access, destruction, modification or disclosure;
- destroy or permanently de-identify Personal Information that is no longer needed. (However, We will keep information for a longer period where necessary to comply with contractual, regulatory or legal requirements.)
- Any Personal Information we provide to you through your online account(s) with BSPA is password protected.
- You must not reveal or share your password with anyone.
- We will never ask for your password, either verbally or through phone or email contact (whether initiated by you or Us)
8. Accessing and correcting your Personal Information
- If you would like:
- confirmation that We hold your Personal Information;
- to access your Personal Information; or
- to correct your Personal Information,
- We will respond to your request within a reasonable period and within any timeframe specified by the Privacy Legislation. You may make an urgent request to access or correct your Personal Information, which should include the reasons for the urgency.
- Prior to allowing access to your Personal Information, We may ask you to take steps to verify your identity.
- We will allow you to access your Personal Information unless there is a sound reason not to, including where:
- giving access would have an unreasonable impact on the privacy of others; or
- we reasonably consider that your request for access is frivolous or vexatious; or
- it is not permitted under the applicable Privacy Legislation.
- If We refuse to give you access to your information, We will give you a notice setting out our reasons.
- If you believe that information We hold about you is incorrect or out of date, you must contact Us and We will take all reasonable steps to amend the information in line with your request.
- If the information has been collected on behalf of others (refer to clause 5), We may direct you to contact the relevant party to initiate your request.
9. Third party service providers
- BSPA uses some third party service providers (sub-processors) in order to support Our websites and operations. These third-party service providers can include foreign entities that operate in an overseas jurisdiction, and:
- We select reputable third-party service providers (for example: website hosting, membership platforms, email distribution, payment processing, analytics, and IT support). We take reasonable steps to ensure that our third-party services providers handle Personal Information appropriately and only for authorised purposes.
- Some of our third-party service providers may store or process Personal Information outside of Australia. Where we disclose Personal Information to such recipients, We take reasonable steps to ensure the recipient handles the information in a way that is consistent with this Policy and applicable Privacy Legislation, unless exceptions apply. Where practicable for Us to do so, we will identify the countries in which overseas recipients are likely to be located.
- By using Our services and interacting with Our Community, you acknowledge that third-party service providers that are foreign entities may not be required to protect your Personal Information in a way that provides comparable safeguards as those provided in the Privacy Legislation.
- Any questions related to Our use of third-party service providers can be directed to Us via the contact details in clause 13.
10. Direct Marketing
- We only use your Personal Information to let you know about our products or services where:
- We have your consent, or where we are otherwise permitted by law to do so. We may contact you for these purposes in a variety of ways, including by mail, email, SMS or telephone.
- even if you opt out of marketing, We send you service-related communications that are necessary to administer your membership/account or deliver the services you have requested (for example: membership renewal reminders, receipts, password resets, and essential or important notices about changes to Our services).
- We do not sell your Personal Information to any third party for the purposes of direct marketing.
- Where you have consented to receiving marketing communications from Us, your consent remains current until You advise us otherwise. You can opt out at any time, by:
- contacting us as set out in clause 13;
- advising Us if you receive a marketing call that you no longer wish to receive; or
- using the unsubscribe facility that We include in Our electronic messages (such as emails and SMS).
- We do not use your Sensitive Information (refer to clause 3.4) for the purposes of direct marketing.
11. Notification of a Data Breach
- If We become aware of unauthorised access to or loss of your Personal Information, we will assess the incident and take steps to contain and remediate it. Where required by law, We will notify affected individuals and the relevant regulators.
- Unauthorised access to or unauthorised disclosure of personal information, or a loss of personal information, are handled in accordance with the relevant authority as follows: oaic.gov.au/privacy/notifiable-data-breaches.
12. Complaints
- If you have a complaint about how we collect or handle your Personal Information, please contact us using the contact details in clause 13. We treat any claims of privacy breaches seriously and will do our best to respond to your complaint within seven days of receiving it.
- If you are unhappy with our response, you can refer your complaint to the Office of the Australian Information Commissioner (OAIC) in Australia or the Office of the Privacy Commissioner in New Zealand.
13. How you can contact us
- Please contact Us if you have any queries about the Personal Information that We hold about you or the way We handle it.Our contact details are set out below: Email: administration@bspaustralia.org.au
Version History
| Version | Date | Summary of Changes |
|---|---|---|
| 1.0 | 17 November 2025 | Initial policy |
| 2.0 | 17 July 2026 | Privacy Policy recreated from first principles and issued as a complete replacement of Version 1. |