Eluma · Legal

Privacy Policy

ShineMP Group Pty Ltd (trading as Eluma) is committed to protecting your personal information and your right to privacy. We are an NDIS registered provider delivering early childhood intervention services across South East Melbourne.

Last updated: May 2026

1. Introduction

This Privacy Policy explains how we collect, use, store, disclose and protect personal information in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and NDIS privacy and confidentiality requirements.

This policy applies to all personal information collected through our website (eluma.au), over the phone, via email, in person, or through third-party referrals.

2. What Information We Collect

We may collect the following types of personal information:

Contact details: name, phone number, email address, postal address
Child or client information: name, date of birth, and details submitted via enquiry or booking forms
Health and sensitive information: NDIS plan details, diagnoses, therapy goals, medical history, and other information needed to deliver our services
Website usage data: cookies, IP address, browser type, pages visited, and analytics data

We only collect sensitive information (such as health data) when it is directly related to providing our services and with your consent, or as otherwise permitted by law.

3. How We Collect Information

We collect personal information through:

Website forms: contact forms, booking requests, and enrolment forms
Phone calls and email correspondence
In-person meetings, assessments, and therapy sessions
Third parties such as NDIS plan managers, support coordinators, allied health professionals, and referral sources (with your knowledge or consent)

Where reasonable and practical, we collect personal information directly from you or your authorised representative.

4. Why We Collect Information

We collect and use your personal information to:

Provide early childhood intervention and NDIS-funded services
Respond to your enquiries and service requests
Manage and coordinate NDIS supports, including reporting and compliance
Communicate with you about appointments, programs, and relevant updates
Improve our website, services, and overall experience
Send marketing communications (only with your consent, and you can opt out at any time)

5. How We Store and Protect Information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure.

Your information is stored securely using:

Password-protected digital systems, including CRM, email, and cloud-based platforms
Restricted access, so only authorised staff and contractors can access personal information relevant to their role
Secure physical storage for any paper-based records

When personal information is no longer needed for the purposes for which it was collected, and we are not required by law to retain it, we will take reasonable steps to destroy or de-identify it.

6. Disclosure of Information

We may share your personal information with:

Our staff, employees, and contractors involved in delivering your services
The NDIS, plan managers, support coordinators, and allied health providers, where required to deliver or coordinate your supports
Government authorities or regulatory bodies, where required or authorised by law
Professional advisors, such as legal or accounting services, as needed

We do not sell, rent, or trade your personal information to any third party.

We will not disclose your information to overseas recipients unless required by law or with your express consent.

7. Cookies and Website Tracking

Our website uses cookies and third-party analytics tools (such as Google Analytics and Facebook Pixel) to understand how visitors use our site and to improve your experience.

These tools may collect:

Pages you visit and how long you spend on them
Your browser type and device
Your approximate location (city or region level)
How you arrived at our site (search engine, social media, direct link)

This data is collected anonymously and is not linked to your personal identity. You can disable cookies through your browser settings at any time. Please note that disabling cookies may affect some functionality of our website.

8. Access and Correction

You have the right to request access to the personal information we hold about you. You may also request that we correct any information that is inaccurate, incomplete, or out of date.

To make a request, please contact us using the details in the Contact Details section below. We will respond to your request within a reasonable timeframe and in accordance with the Australian Privacy Principles.

In some circumstances, we may not be able to provide access (for example, where it would unreasonably impact the privacy of others, or where we are required by law to refuse). If this happens, we will explain why.

9. Complaints

If you believe we have breached your privacy or mishandled your personal information, you are welcome to make a complaint. We take all concerns seriously and will work with you to resolve the matter.

To lodge a complaint:

Contact us via email at office@eluma.au
We will acknowledge your complaint and investigate it promptly
We aim to respond within 30 days

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992

10. Contact Details

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Email: office@eluma.au
Phone: 1300 131 805
Address: Suite 24, Level 2, 66 Victor Crescent, Narre Warren VIC 3805

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or business operations. Any changes will be published on this page with an updated date.

We encourage you to review this policy periodically. Your continued use of our website and services after any changes constitutes your acceptance of the updated policy.