Effective date: 4 September 2026
OCD Clinic Pty Ltd operates the OCD Training Institute. In this policy, “we”, “us” and “our” refer to OCD Clinic Pty Ltd in its operation of the OCD Training Institute website, online learning programs, professional resources and related services.
We respect privacy and handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable Australian laws.
This policy explains how we collect, hold, use and disclose personal information when a person:
• visits ocdtraininginstitute.com.au or interacts with its forms, cookies or linked services;
• joins a waitlist, mailing list or event list;
• requests or downloads a clinical resource;
• enquires about training, supervision, consultation or organisational services;
• registers for, purchases or participates in DEFINE or another program;
• completes module assessments, receives a certificate or seeks support; or
• communicates or otherwise deals with the OCD Training Institute.
This policy concerns the OCD Training Institute. Clinical services delivered by The OCD Clinic Brisbane may involve additional privacy notices and health-record obligations.
The information collected depends on how a person interacts with us and may include:
• identity and contact information, including name, email address, telephone number and postal address;
• professional and study information, including profession, registration status, workplace, role, university course or postgraduate student status;
• account information, login details, preferences and communication settings;
• purchase and transaction information, including products purchased, amounts, dates, invoices and payment status;
• course information, including enrolment, progress, module activity, assessment responses, completion status and certificate records;
• enquiry, support, survey and feedback information;
• marketing consent and unsubscribe records; and
• technical information, including IP address, browser and device information, approximate location, pages viewed, referral source, cookies and similar identifiers.
Payment card details are generally collected and processed directly by the payment provider and are not intended to be stored by us in full.
The Institute’s training and resource forms are not intended for the submission of client records, identifiable clinical material or personal health information. Users should not enter client names, clinical notes or other identifying information into website forms, course assessments, community areas or support requests.
If sensitive information is voluntarily provided, we will only collect and handle it where permitted by law, which will generally require consent and the information to be reasonably necessary for our functions or activities. We may delete, de-identify or securely restrict information that should not have been submitted.
We may collect personal information:
• directly from the individual through website forms, course registration, checkout, email, telephone, surveys, assessments and support communications;
• automatically through the website, learning platform, cookies, analytics and security tools;
• from a person’s employer, university or organisation where it purchases or administers training for that person;
• from payment, email, learning-platform and other service providers; and
• from publicly available professional sources where lawful and appropriate.
Where practicable, individuals may interact with us anonymously or using a pseudonym. This may not be possible where identity is needed to provide course access, process payment, issue a certificate, respond to an enquiry or meet legal obligations.
We may collect, hold and use personal information to:
• provide requested downloads, resources, courses and related services;
• manage waitlists, enrolments, accounts, course access, assessments and completion certificates;
• process payments, refunds, invoices and transaction records;
• verify eligibility or professional/student status where relevant;
• provide technical, administrative and customer support;
• communicate essential information about a purchase, account, course or resource request;
• send clinical resources, news and promotional material where consent exists or the law otherwise permits;
• administer optional supervision, masterclasses and professional-development opportunities;
• conduct surveys, evaluate and improve our programs, website and communications;
• detect misuse, protect intellectual property, maintain security and prevent fraud; and
• comply with legal, taxation, accounting, insurance and record-keeping obligations.
We will not use personal information for an unrelated purpose unless the individual consents or the use is otherwise permitted or required by law.
We may send marketing emails about DEFINE, other training, clinical resources, supervision, masterclasses or related services where the recipient has consented or where sending is otherwise permitted by law.
Every commercial electronic message will identify the sender and provide a functional unsubscribe method. A person may unsubscribe at any time using the link in an email or by contacting us. We will action unsubscribe requests within the period required by law. Unsubscribing from marketing does not prevent essential account, payment, resource-delivery or course-access communications.
Requesting a resource, making an enquiry or purchasing a course will not automatically subscribe a person to unrelated marketing where separate consent is required.
We may disclose personal information where reasonably necessary to:
• website hosting, learning-management, email-delivery and marketing providers;
• payment processors, banks and accounting providers;
• customer-management, form, analytics, security, file-storage and backup providers;
• contractors and professional advisers who support our operations and are required to protect confidentiality;
• an employer, university or purchasing organisation where it has arranged or paid for the training and the disclosure is expected, authorised or otherwise lawful;
• regulators, courts, law-enforcement bodies or government agencies where required or authorised by law; and
• a successor or prospective purchaser in connection with a restructure, merger or sale, subject to appropriate confidentiality and legal safeguards.
We do not sell personal information.
Some technology and service providers may store, process or allow authorised support access to personal information outside Australia. The countries involved depend on the providers and configurations used by our website, learning platform, email, payment, analytics, file-storage and support services.
Where APP 8 applies, we will take reasonable steps in the circumstances to ensure overseas recipients handle personal information consistently with the APPs, unless an exception applies.
Our website may use necessary cookies for security, authentication, preferences, forms and course functionality. With consent where required, it may also use analytics or advertising cookies to understand website use, improve services and measure communications.
Users can manage cookies through the website cookie controls and browser settings. Disabling some cookies may affect website or course functionality. Before publication, the developer must provide and verify the complete cookie and tracking inventory so the cookie notice and consent controls accurately reflect the technology in use.
Our website may link to third-party websites. Their privacy practices are governed by their own policies, and users should review those policies before providing personal information.
We take reasonable steps to keep personal
information accurate, complete and current and to protect it from misuse,
interference, loss and unauthorised access, modification or disclosure. Safeguards
may include role-based access, authentication controls, secure providers,
encryption where appropriate, staff confidentiality obligations, backups,
monitoring and incident-response procedures.
No online system is completely secure. If
an eligible data breach occurs, we will comply with the Notifiable Data
Breaches scheme, including notifying affected individuals and the Office of the
Australian Information Commissioner where required.
We retain personal information only for as long as reasonably necessary for the purposes described in this policy or as required by law. Different retention periods may apply to transaction and taxation records, course completion and CPD records, account information, support communications, consent records and technical logs.
When information is no longer required, we will take reasonable steps to destroy it or de-identify it, unless retention is required or authorised by law. Backup copies may remain for a limited period until they are securely overwritten or deleted under normal system processes.
An individual may request access to personal information we hold about them or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Requests should be sent using the contact details below.
We may need to verify identity before responding. We will respond within a reasonable period and, if access or correction is refused, provide written reasons and available complaint mechanisms where required by law. We generally do not charge for making a request, although a reasonable charge may apply to providing access where permitted.
A person who believes we have mishandled their personal information may contact us using the details below and provide sufficient information for us to investigate. We will acknowledge the complaint, investigate it and respond within a reasonable period.
If the person is not satisfied with our response, they may contact the Office of the Australian Information Commissioner at oaic.gov.au.
We may update this policy when our services, technology or legal obligations change. The current version will be published on our website with its effective date. Material changes may also be communicated directly where appropriate.
Privacy Officer
OCD Clinic Pty Ltd trading as OCD Training Institute
1352 Creek Road, Carina Heights QLD 4152
Email: admin@ocdtraininginstitute.com.au
Telephone: (07) 3395 5335
