Privacy Policy

Last updated: 28 October 2026

1. Introduction

These Website Terms of Use and Privacy Policy apply to your use of the website, digital content, resources, communications, products and services made available by Homebridge Alliance Pty Ltd, ABN: 37684432139 (“Homebridge Alliance”, “we”, “our” or “us”).

2. Privacy Policy

This Privacy Policy sets out our commitment to protecting personal information provided to us, or otherwise collected by us, offline or online, including through our website, forms, communications, applications, registrations, surveys, consultations, events, programmes, research activities and related services.

3. Personal Information We May Collect

The types of personal information we may collect include:

• your name;
• images, audio or video recordings of you, where consent has been provided or collection is otherwise lawful;
• your contact details, including email address, phone number, mailing address or street address;
• your age, date of birth or age range;
• parent, guardian or emergency contact details;
• demographic information, such as postcode, location or organisation;
• information about your role, employer, school, organisation or professional background;
• payment and billing information, processed through third-party payment providers;
• preferences, opinions, enquiries and communications with us;
• information you provide through surveys, feedback forms, applications, registrations, testimonials or research activities;
• details of programmes, products, services or events you have enquired about, registered for, purchased or participated in;
• health, dietary, accessibility, wellbeing or safety-related information needed to assess suitability, support participation, meet duty-of-care obligations or respond to emergencies;
• information about minors, where provided by a parent or legal guardian;
• browser session data, device and network information, page views, traffic sources, search queries, browsing behaviour and website analytics;
• information about your use of our website, including cookies, communications with the website, browser type, operating system and internet service provider;
• information provided through associated social media platforms, applications or accounts where you permit us to collect it; and
• any other personal information requested by us or provided by you or a third party.

We may collect personal information directly from you or from third parties, including parents, guardians, employers, schools, organisations, facilitators, service providers, referral sources or publicly available sources.

4. Collection and Use of Personal Information

We may collect, hold, use and disclose personal information for the following purposes:

• to enable you to access and use our website, services, forms, applications and associated platforms;
• to contact and communicate with you;
• to respond to enquiries, applications, registrations, bookings and service requests;
• to provide programmes, events, workshops, retreats, consulting services, educational services, resources and related offerings;
• to assess suitability, safety, accessibility and support needs for participation;
• to administer payments, invoices, refunds, bookings and records;
• for internal record keeping and administrative purposes;
• for evaluation, research, quality improvement and service development;
• for analytics, market research and business development, including improving our website, services, communications and offerings;
• to send newsletters, updates, event information and promotional material where permitted;
• to manage media consent, testimonials, feedback and public-facing stories;
• to comply with legal, insurance, safeguarding, health and safety, regulatory and dispute resolution obligations;
• to consider employment, contractor, facilitator or collaboration applications; and
• for any other purpose disclosed to you at the time of collection or authorised by law.

5. Disclosure of Personal Information to Third Parties

We may disclose personal information to:

• third-party service providers who help us operate our business, including IT providers, cloud storage providers, web-hosting providers, email platforms, booking platforms, payment processors, analytics providers, form and survey platforms, marketing providers, professional advisers and administrative support providers;
• employees, directors, contractors, facilitators, instructors, consultants or authorised representatives of Homebridge Alliance;
• parents, guardians, emergency contacts, medical responders or emergency services where reasonably necessary for safety or duty-of-care purposes;
• venues, insurers, professional advisers and operational partners where reasonably required to deliver services;
• existing or potential business partners, sponsors, funders or institutional clients, where relevant and lawful;
• anyone to whom our business or assets, or part of them, may be transferred;
• courts, tribunals, regulators, law enforcement bodies or government agencies where required or authorised by law;
• debt recovery providers or payment providers where necessary to recover unpaid amounts; and
• third parties who collect or process website analytics, advertising or usage data, such as Google Analytics, Meta or similar providers.

Some third parties may be located outside Australia, or may store, transfer or access personal information outside Australia, including in Australia, New Zealand, Singapore, the United Kingdom, the European Union, the United States or other countries where our service providers operate.

Where we disclose personal information overseas, we will take reasonable steps to ensure overseas recipients handle personal information in a way that is consistent with the Australian Privacy Principles, unless an exception applies or you have consented to the disclosure.

Service providers for our survey system

We use these providers to run our survey system. Each one handles only what is needed for its task.

Fly.io hosts the survey system and its database in Sydney, Australia. Database backups are stored with Amazon Web Services (AWS), also in Sydney. Fly.io keeps technical logs in the United States. Our system is built so those logs contain no personal information.

Resend sends our emails. These contain only sign-in and survey links, never health information.

Sinch sends our text messages. These contain only a personal link or a standard support message.

6. Sensitive Information

Sensitive information is a type of personal information that receives a higher level of protection under Australian privacy law.

Sensitive information may include information about your health, racial or ethnic origin, religious beliefs, philosophical beliefs, professional associations, criminal record, biometric information, sexual orientation or other sensitive matters.

Homebridge Alliance may collect sensitive information where it is reasonably necessary for our functions or activities, including health, dietary, accessibility, wellbeing, safety, cultural, participation or support-related information.

We only collect, hold, use and disclose sensitive information for:

• any purpose you consent to;
• the primary purpose for which it was collected;
• directly related secondary purposes reasonably necessary to provide our services;
• safety, safeguarding, emergency, health or duty-of-care purposes;
• research or evaluation purposes where consent has been obtained or information has been de-identified where appropriate;
• legal, insurance or regulatory purposes; or
• any purpose required or authorised by law.

How we link research answers

When you join a Homebridge Alliance programme, we give you a participant code. We keep your name and contact details, your safety form and your research answers in three separate places. The participant code is the only thing that connects them.

Your research answers do not include your name, email address or phone number. They are stored under your participant code.

If you agree to take part in our evaluation, we use your participant code to link your answers across the questionnaires you complete, from before the retreat to twelve months after it starts. This is how we see what changes over time. With your separate permission, we may also link records of the Serpent Path sessions you attend to your evaluation answers. You can say no to this and still take part.

We do not link your safety form to your research answers. Your safety form is used only to keep you safe on the programme.

While the link between your code and your name exists, your research answers are confidential rather than anonymous. Only the Homebridge Alliance staff who run the programme can see that link.

People who analyse the research receive a de-identified file. It has no names and no participant codes. Each person has a separate research number that cannot be traced back without a key we hold. Dates are shown by month only, and any group of fewer than five people is hidden. Written answers are left out unless they are needed, and then only after a person has checked them for anything that could identify someone. This de-identified file is the only information we ever use with AI tools. Your safety form and contact details never are.

Our reports show results for groups. We only quote you directly with your permission for that specific quotation. Small groups can still be recognisable from context, and we take care when reporting them.

About twelve months after the end of the programme, we delete your name, contact details and safety form. After that, your participant code no longer leads back to you and your research answers are de-identified. HBA takes reasonable steps to destroy or de-identify personal information when it is no longer needed for its disclosed purpose, unless a legal retention obligation or another specified exception applies.

You can withdraw from the evaluation at any point. Once your answers have been de-identified, we can no longer find and remove them.

7. Your Rights and Control Over Personal Information

Choice and consent

You do not have to provide personal information to us. However, if you do not provide information we reasonably need, we may be unable to respond to your enquiry, process your registration, provide services, assess suitability, support participation, meet safety obligations or communicate with you.

By providing personal information to us, you understand that we will collect, hold, use and disclose it in accordance with this Privacy Policy.

Information from third parties

If we receive personal information about you from a third party, we will protect it in accordance with this Privacy Policy.

If you provide personal information about another person, including a child, participant, emergency contact, employee or colleague, you confirm that you have authority or consent to provide that information.

Restrict

You may ask us to restrict the collection or use of your personal information.

If you have agreed to receive marketing communications, you may change your mind at any time by contacting us or using the unsubscribe function in our communications.

Access

You may request access to personal information we hold about you.

In some circumstances, we may refuse access as permitted by the Privacy Act 1988 (Cth), including where access would affect another person’s privacy, pose a serious threat to safety, prejudice legal proceedings or be otherwise unlawful.

Correction

If you believe information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us.

We will take reasonable steps to correct information where appropriate.

Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us using the details below and provide details of your concern.

We will investigate and respond in writing within a reasonable time, setting out the outcome and any steps we will take.

Unsubscribe

You may unsubscribe from marketing emails at any time by using the unsubscribe link or contacting us.

8. Storage and Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

These steps may include secure platforms, access controls, password protection, administrative safeguards, staff or contractor confidentiality requirements, secure storage, limited access to sensitive information and appropriate destruction or de-identification when information is no longer required.

We cannot guarantee the security of information transmitted over the internet. Transmission of information is at your own risk.

If we become aware of an eligible data breach, we will respond in accordance with our obligations under Australian privacy law.

Retention

We keep other personal information only for as long as we reasonably need it for the purpose it was collected for, or for as long as the law requires (for example, financial and tax records), and then destroy or de-identify it.

9. Cookies and Web Beacons

We may use cookies on our website from time to time.

Cookies are small text files placed in your browser to help the website function, remember preferences, understand website use and improve user experience.

Cookies may collect information about your device, browser, pages visited, time spent on pages, referring websites, search queries and browsing behaviour.

We may also use cookies or similar technologies for analytics, advertising, remarketing or social media integration. Third parties such as Google, Meta or similar providers may use cookies to show relevant content or advertising on other websites or platforms.

We may use web beacons from time to time. Web beacons are small pieces of code used to monitor website behaviour, count visitors, understand engagement or deliver cookies.

You can adjust your browser settings to refuse or delete cookies, although some website features may not function properly.

10. Children and Young People

Our website may be accessed by both adults and young people.Where a programme, purchase, registration, consent process or other activity requires legal authorisation, a parent or legal guardian must provide consent on behalf of anyone under 18 years of age unless otherwise permitted by law.

Parents and guardians are responsible for ensuring information provided on behalf of a minor is accurate and authorised.

11. Links to Other Websites

Our website may contain links to other websites.

We do not control those websites and are not responsible for their content, privacy practices, security or terms.

Those websites are not governed by this Privacy Policy.

12. User Contributions, Feedback and Testimonials

You may provide enquiries, applications, comments, feedback, testimonials, stories, photographs, recordings, survey responses or other materials to us.

You retain ownership of material you provide.

By submitting material, you allow us to use it for the purpose for which it was provided, including responding to you, assessing applications, delivering services, improving our programmes, conducting evaluation or maintaining records.

We will not publish identifiable testimonials, names, images, recordings or personal stories without consent where consent is required.

13. Payments and Third-Party Providers

Payments may be processed through third-party payment providers.

We do not intentionally store full credit card details unless expressly stated. Payment providers may collect, process and store payment information under their own terms and privacy policies.

Bookings, refunds, cancellations, programme participation and consulting services may also be subject to separate terms.

14. Amendments

We may vary these Website Terms of Use and Privacy Policy by publishing an updated version on our website.

We recommend checking this page regularly to ensure you are aware of the current version.

Your continued use of the website after changes are published means you accept the updated Terms.

15. Contact Us

For questions, notices, access requests, correction requests, complaints or privacy enquiries, please contact:

Homebridge Alliance Pty Ltd

ABN: 37684432139

Email: ina@homebridge-alliance.com