Privacy Policy

GuideNest Pty Ltd (ABN 68 691 264 623) · Effective date: [INSERT DATE] · Version 1.0

1. Who we are

This policy applies to GuideNest Pty Ltd (ABN 68 691 264 623) (“GuideNest”, “we”, “us”, “our”). We are an Australian company headquartered in Perth, Western Australia, that provides a digital platform and physical sensory products to families of neurodivergent children.

We are bound by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). We also comply with the Privacy and Other Legislation Amendment Act 2024, the Notifiable Data Breaches scheme, and (when it commences in late 2026) the Children’s Online Privacy Code.

2. What information we collect

When you join the GuideNest waitlist, we collect the information you choose to give us. That’s typically:

• Your name — usually a parent or carer’s first name (and last name if you provide it)
• Your email address — so we can keep you posted on launch
• Your child’s age range — for example, 3–5 or 6–8 years
• A short description of your child’s needs or interests — only what you choose to share, so we can tailor the kit recommendations and content we send you

We may also automatically collect limited technical information when you visit our website, such as your device type, browser, approximate location (city/region) and pages viewed. See Cookies and analytics below.

Sensitive information

Information about a child’s disability, diagnosis or health needs is treated as sensitive information under the Privacy Act. We don’t require this to join the waitlist. If you choose to share it — for example, by writing “my son is autistic and seeking a diagnosis” in the needs field — we treat it with extra care, only use it for the purpose you shared it, and never sell it.

3. Why we collect it & the legal basis

We collect waitlist information to:

• Notify you when GuideNest launches and when our sensory kits become available
• Send you setup guides, content and product updates relevant to the age range and needs you’ve told us about
• Understand demand so we can prepare stock, plan launch regions, and improve our products before release
• Respond to questions you send us

Our legal basis for collection is your consent (you chose to join the waitlist), and the collection is reasonably necessary for our functions as an Australian business, in line with APP 3.

4. Information about children

The GuideNest waitlist is intended for parents, carers, family members, clinicians and educators — not for children themselves. We don’t knowingly collect information directly from children under 18, and we don’t market to children.

When you tell us about your child (their age range, interests or needs), you do so as their parent or legal guardian. We treat that information with extra care:

• We collect the minimum needed — an age range, not a date of birth
• We don’t require the child’s name, address, photograph, NDIS number, school or clinician details to join the waitlist
• We don’t use information about your child for advertising or profiling, and we don’t share it with advertising networks
• You can ask us to delete your child’s information at any time, even if you stay subscribed

When the Children’s Online Privacy Code commences (currently expected in late 2026), we’ll align our practices with its requirements as a matter of course.

5. Who we share it with

We share waitlist information only with the service providers we use to actually run the waitlist and our website. We do not sell your information, and we do not share it with data brokers or advertising networks.

Each of these providers is contractually required to handle your information securely and only on our instructions.

We may also disclose your information if we’re required by Australian law (for example, in response to a valid court order), or to protect the safety of a person where we reasonably believe it’s necessary.

6. Where your data is stored

Some of our service providers may process or store data outside Australia. Where this happens, we take reasonable steps to ensure those providers handle your information consistently with the Australian Privacy Principles, including through their published data processing terms and recognised security certifications (such as SOC 2 and ISO 27001).

By joining the waitlist you acknowledge that your information may be processed overseas. If we change to a provider whose practices are not consistent with the APPs, we’ll update this policy and notify waitlist members.

7. How we keep it secure

We take security seriously. Our measures include:

• Encryption of data in transit (HTTPS/TLS) and at rest in our database
• Role-based access — only specific GuideNest team members can view waitlist data, and only when needed
• Multi-factor authentication on all administrative accounts
• Regular review of who has access, and prompt removal when access is no longer needed
• Reputable, security-certified providers for hosting and storage

No system is perfectly secure, but we work hard to protect your information and we keep our practices under review.

8. How long we keep it

We keep your waitlist information for as long as you remain subscribed, and for up to 12 months afterwards in case you re-join or contact us. After that, we delete or de-identify it, unless we’re required by law to keep it longer (for example, for tax or financial records if you become a customer).

9. Your rights and choices

Under Australian privacy law you have the right to:

• Access the personal information we hold about you
• Correct information that’s inaccurate, out of date or incomplete
• Withdraw consent and unsubscribe from the waitlist at any time — every email we send has an unsubscribe link
• Request deletion of your information (and your child’s, if you’ve shared it)
• Deal with us anonymously or under a pseudonym, where it’s lawful and practical to do so
• Make a complaint if you think we’ve mishandled your information

To exercise any of these rights, email us at admin@guidenest.com.au. We aim to respond within 30 days.

10. Cookies and analytics

Our website uses a small number of cookies to make the site work (essential cookies) and to understand how visitors find and use the site (analytics cookies). We don’t use advertising cookies on the waitlist page, and we don’t use tracking that identifies individuals.

You can control cookies through your browser settings. Disabling cookies won’t stop you from joining the waitlist.

11. Direct marketing

We’ll send you emails about GuideNest because that’s the point of joining the waitlist. We comply with the Spam Act 2003 (Cth): every email identifies us as the sender and includes a working unsubscribe link. If you unsubscribe, we’ll stop sending marketing emails within 5 business days.

We don’t pass your email address to third parties for their own marketing.

12. Data breaches

If a data breach occurs that’s likely to result in serious harm to anyone whose information we hold, we’ll notify the affected people and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

13. How to make a complaint

If you think we’ve breached the Australian Privacy Principles or mishandled your information, please contact us first — we’ll take it seriously and try to resolve it. Email admin@guidenest.com.au with the subject line Privacy Complaint. We’ll acknowledge within 5 business days and aim to respond fully within 30 days.

If you’re not satisfied with our response, you can complain to the OAIC:

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

14. Changes to this policy

We’ll update this policy from time to time. The “Effective date” at the top tells you when the current version came into effect. If we make a material change — for example, collecting new categories of information or using a new overseas provider — we’ll let waitlist members know by email before the change takes effect.

15. Contact us

This policy is provided in good faith and is consistent with the Australian Privacy Principles under the Privacy Act 1988 (Cth). It is not legal advice. We recommend reviewing it with a qualified Australian privacy lawyer before publication.