Privacy & Cookie Policy
Enable Lifecare Pty Ltd
ABN: 86620684586
Website: https://enablelifecare.com.au/
1. Purpose and Regulatory Framework
Enable Lifecare Pty Ltd (“Enable Lifecare”, “we”, “us”, “our”) is committed to protecting personal information and handling it in an open, transparent and secure manner.
This Policy is governed primarily by Australian privacy laws, including:
- Privacy Act 1988 (Cth)
- Australian Privacy Principles (APPs)
- Notifiable Data Breaches (NDB) Scheme
- Spam Act 2003 (Cth)
- Do Not Call Register Act 2006 (Cth)
Where Enable Lifecare engages with individuals located outside Australia, or where overseas data processing occurs, we take reasonable steps to comply with applicable international data protection laws, where those laws are legally applicable , as well as platform-specific requirements imposed by 3rd party vendors such as Apple and Google.
2. Scope
Where personal information handled by Enable Lifecare Pty Ltd constitutes patient information or health information, that information is collected, used, stored, disclosed, and protected in accordance with Enable Lifecare’s Patient Confidentiality Policy.
The Patient Confidentiality Policy sets out additional and more stringent obligations for the handling of patient information. In the event of any inconsistency between this Privacy & Cookie Policy and the Patient Confidentiality Policy, the Patient Confidentiality Policy prevails.
Relationship to Patient Information
This Policy applies to personal information collected through:
- Our website and digital platforms
- The Enable Lifecare proprietary mobile application ("Enable App") made available via the Apple App Store and Google Play Store;
- Our customer relationship management (CRM), enterprise resource planning (ERP), and related business systems; and
- Online forms, registrations, webinars and brochure downloads
- Email, social media and digital communications
- Online advertising and analytics
- CPD training, professional education and events
- Sales, customer and professional engagement activities
- Offline interactions, including meetings, phone calls and paper-based forms
- Our products, services, training, professional engagement, and support activities.
3. Personal Information We Collect
The types of personal information we may collect include:
| Category | Examples |
|---|---|
| Identity information | Name, job title, organisation, professional credentials |
| Contact information | Email address, phone number, physical address |
| Professional information | Role, discipline, registration details (where relevant) |
| Technical data | IP address, browser type, device information |
| Health Information | Medical conditions, disability information, body/physiological measurements/assessment data and client health records |
| Location information | Approximate and precise location data for dealer locator services, analytics, and fraud prevention |
| Usage data | Website interactions, pages visited, Mobile application interaction, feature usage, search queries, audit logs, performance data |
| Device Information | Device type, operating system, unique device identifier |
| Engagement data | Event attendance, CPD participation |
| Communications | Enquiries, feedback, correspondence |
| Preferences | Marketing and communication preferences |
While we do not intentionally collect sensitive information (such as racial or ethnic origin, religious beliefs, or health data), any such information voluntarily submitted will be treated in accordance with applicable privacy laws and handled securely.
4. How We Collect Personal Information
Online
- Website cookies and analytics tools
- Contact, registration and enquiry forms
- Email communications
- Social media interactions
- Online advertising interactions
- Enable mobile application
Offline
- CPD training sessions and professional events
- Conferences and trade events
- In-person meetings and sales interactions
- Telephone conversations
- Paper-based forms
5. Purpose of Collection and Lawful Basis
We collect and process personal information for the following purposes:
| Purpose | Primary Legal Basis |
|---|---|
| Providing products and services | Contract / Legitimate interest |
| Responding to enquiries, comments and service requests | Legitimate interest |
| Delivering training, CPD and events | Contract / Consent |
| Website/Mobile Application analytics and improvement | Legitimate interest / Consent (where required) |
| Marketing communications | Consent or Legitimate interest (as permitted by law) |
| Process transactions and send related information | Legitimate interest |
| Send technical notices, updates, and support messages | Legitimate interest / Consent (where required) |
| Detect, investigate and prevent fraudulent transactions and other illegal activities | Legitimate interest |
| Personalise and improve your experience | Legitimate interest |
| Legal and regulatory compliance | Legal obligation |
Where consent is required, we obtain it via opt-in checkboxes on forms, cookie consent banners, or other clear affirmative actions. Consent may be withdrawn at any time by contacting us or using opt-out links provided in communications.
6. Cookies and Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device when you visit our website. They help ensure website functionality, analyse usage and support marketing activities.
6.2 Types of Cookies We Use
| Cookie Category | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Core functionality, security, accessibility | No |
| Performance & Analytics | Website and mobile application usage analysis | Yes (where required) |
| Functional | Remember preferences | Yes |
| Marketing & Advertising | Advertising and remarketing | Yes |
6.3 Managing Cookies
When you first visit our website, a cookie banner or consent tool may allow you to manage preferences. Cookies can also be controlled via browser settings. Disabling cookies may affect website functionality.
7. Disclosure of Personal Information
We may disclose personal information in the following situations:
- With your consent or at your direction
- With service providers who perform services on our behalf
- To comply with legal or regulatory obligations or respond to lawful requests
- To protect our rights, privacy, safety, or property
- In connection with a merger, sale, or acquisition of all or a portion of our company
- With aggregated or anonymised information that cannot identify you
We take reasonable steps to ensure third parties handle personal information securely and only for authorised purposes.
Third-Party Services We Use (non-exhaustive):
- Microsoft Clarity: We use Clarity for analytics and session recording to understand how users interact with our app. Clarity may collect device information, location data, app interactions, crash logs, and performance data. Learn more at clarity.microsoft.com/terms
- Firebase Cloud Messaging (Google): We use Firebase for push notification delivery. Firebase collects device tokens to deliver notifications. Learn more at firebase.google.com/terms
- Daily.co: We use Daily.co for video conferencing during live webinars. Daily.co processes video and audio streams during live sessions. Learn more at daily.co/privacy We do not sell, trade, or rent your personal information to third parties.
8. Overseas Data Transfers
Some service providers may store or process personal information outside Australia. Where this occurs, we implement reasonable safeguards such as contractual protections and due diligence to ensure personal information is handled in accordance with applicable privacy laws.
9. Data Security and Governance
We implement enterprise-grade and healthcare-aligned safeguards, including:
- Role-based access controls
- Secure systems and encryption
- Vendor due diligence and contractual risk management
- Staff privacy and data protection training
- Monitoring, audit and incident response procedures
10. Data Retention
Personal information is retained only for as long as necessary to meet business, legal and regulatory requirements. When no longer required, information is securely deleted or de-identified.
11. Data Security:
We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication mechanisms
- Employee training on data protection
- Incident response procedures However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
12. Data Breach Response
Enable Lifecare maintains a Data Breach Response Plan.
In the event of a suspected or confirmed data breach, we will:
- Contain and assess the incident
- Determine whether serious harm is likely
- Notify affected individuals and the Office of the Australian Information Commissioner (OAIC) where required under the NDB Scheme
- Notify relevant overseas regulators within 72 hours where international laws apply
- Document and remediate the incident
12. Individual Rights
Subject to applicable law, individuals may request to:
- Access personal information we hold
- Correct inaccurate or outdated information
- Withdraw consent
- Request deletion or restriction of processing
- Object to certain processing activities
- Request data portability (where applicable)
Requests may be made using the contact details below in Section 14.
13. Marketing Communications
Marketing communications are conducted in accordance with the Spam Act 2003 (Cth). All marketing messages include an opt-out mechanism, and preferences are respected.
14. Complaints and Contact
Privacy Officer
Enable Lifecare Pty Ltd
Email: support@enablelifecare.com
Phone: 1300 370 370
We will respond to privacy enquiries and complaints within a reasonable timeframe. If unresolved, individuals may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
15. Policy Updates
This Policy may be updated periodically to reflect legal, regulatory or operational changes. The most current version will be published on our website.