Modern Waldorf Pty Ltd

Trading as Sunshine Bridge Education and Modern Waldorf Online

ABN 75 656 097 764

​

Effective from: 18 September 2026

​

​

Modern Waldorf Pty Ltd, trading as Sunshine Bridge Education and Modern Waldorf Online (“we”, “us” or “our”), is committed to protecting personal information and handling it respectfully, securely and transparently.

​

​

This Privacy Policy explains how we collect, use, store, disclose and protect personal information across both Sunshine Bridge Education and Modern Waldorf Online.

​

We handle personal information in accordance with applicable Australian privacy laws and, where applicable, the Australian Privacy Principles contained in the Privacy Act 1988 (Cth).

​

1. Scope of this policy

This Privacy Policy applies to personal information collected through:

• Sunshine Bridge Education;

• Modern Waldorf Online;

• our websites and online stores;

• enrolment, registration and contact forms;

• in-person and online classes;

• Social Club and Holiday Club activities;

• curriculum purchases and downloads;

• email, telephone and social-media communications;

• payment and invoicing systems; and

• other educational services provided by Modern Waldorf Pty Ltd.

​

2. Personal information we collect

The personal information we collect depends on the services being accessed and may include:

• names, addresses and contact details;

• parent, guardian and emergency-contact information;

• a child’s name, age and date of birth;

• enrolment, attendance and booking information;

• educational history, learning information and student work;

• information about a child’s interests, strengths, learning needs and support requirements;

• medical conditions, allergies, medications, disabilities and emergency-care information;

• behavioural, wellbeing or safety information relevant to providing appropriate support;

• home-education, distance-education or school-enrolment information;

• NDIS-related information provided by a family, plan manager or support coordinator;

• billing, payment and transaction information;

• communications, enquiries, complaints and feedback;

• photographs, video or audio recordings where separate consent has been provided;

• website usage, device, browser and online interaction information; and

• any other information voluntarily provided to us.

We seek to collect only information that is reasonably necessary for our activities and educational services.

​

​

3. How we collect information

We may collect personal information:

• directly from parents, guardians, students or customers;

• through enrolment, registration, booking and contact forms;

• through our websites, online store and curriculum platforms;

• during classes, educational activities or communications with families;

• from authorised representatives, including plan managers, support coordinators or other professionals;

• through payment, accounting and invoicing providers;

• through cookies, website analytics and similar technologies; and

• where required or permitted by law.

Where reasonably practicable, we collect personal information directly from the individual concerned or from their parent, guardian or authorised representative.

​

4. Information about children

Because we provide services to children and young people, much of the information we collect relates to students.

Parents and guardians are generally responsible for providing information and consent on behalf of a child. Where appropriate, we may also involve the child in decisions about their information, taking into account their age, maturity and capacity to understand.

We take additional care when collecting, using, storing or sharing information about children. We will not knowingly use a child’s personal information for purposes unrelated to their education, safety, support or participation without appropriate consent or another lawful basis.

 

 

5. Sensitive, medical and NDIS information

Some information provided to us may be considered sensitive information, including information about:

• health and medical conditions;

• disability;

• allergies and medication;

• behavioural or emotional support needs;

• learning difficulties or diagnoses;

• cultural or religious background; and

• NDIS participation or supports.

We collect sensitive information only where it is reasonably necessary for our activities and appropriate consent has been provided, or where collection is otherwise required or permitted by law.

Sensitive information will be used or disclosed for the purpose for which it was collected, for a directly related purpose reasonably expected by the family, with appropriate consent, or where disclosure is otherwise required or permitted by law. This may include circumstances where disclosure is reasonably necessary to protect a person’s health, safety or wellbeing.

Providing relevant information helps us plan appropriate support and respond safely in an emergency. If necessary information is not provided, we may be unable to safely or appropriately provide a particular service.

 

 

6. How we use personal information

We may use personal information to:

• process and administer enrolments, bookings and curriculum purchases;

• provide in-person and online educational services;

• plan learning activities and provide student support;

• understand and respond to individual medical, educational, behavioural and support needs;

• maintain attendance, safety and emergency records;

• communicate with parents, guardians, students and customers;

• manage fees, invoices, payments and accounts;

• administer NDIS-related services and invoicing where applicable;

• deliver digital products and curriculum materials;

• respond to enquiries, feedback and complaints;

• manage consent for photographs, recordings and media;

• improve our educational programs, resources and customer experience;

• maintain the safety and appropriate operation of our services;

• meet insurance, legal, accounting and regulatory obligations; and

• protect the rights, safety and wellbeing of students, families, staff and the wider community.

We do not sell or rent personal information.

 

 

7. Photography, recordings and student work

Photography and media consent is optional and is obtained separately through our enrolment or consent process.

Where consent has been provided, photographs, recordings or examples of student work may be used for approved educational, community or promotional purposes.

Consent may be withdrawn by providing written notice. Withdrawal applies to future use and publication. We will make reasonable efforts to remove identifiable material from digital channels under our control when requested, although we may be unable to retrieve material that has already been lawfully printed, distributed, shared or republished by another person.

We do not publish a child’s surname or other identifying personal information with an image without additional consent.

 

 

8. When information may be disclosed

We may disclose personal information where reasonably necessary to:

• authorised staff members and contractors;

• educators providing services to the student;

• technology, website, communication and cloud-storage providers;

• payment processors, banks, accountants and invoicing providers;

• NDIS plan managers, support coordinators or authorised representatives;

• medical professionals, emergency services or emergency contacts;

• insurers, professional advisers or debt-recovery providers;

• government departments, regulators or law-enforcement bodies;

• service providers assisting us to operate our business; or

• another party authorised by the individual, parent or guardian.

We may also disclose information where required or permitted by law or where reasonably necessary to prevent or respond to a serious threat to a person’s health, safety or wellbeing.

Service providers are only given the information reasonably necessary for them to perform their functions.

 

 

9. Third-party platforms and overseas processing

We use reputable third-party platforms to operate our educational services and business. These may include services such as:

• Wix;

• Google Workspace and Google Classroom;

• Zoom;

• Mailchimp;

• Stripe;

• accounting and invoicing platforms;

• cloud-storage providers; and

• other educational or communication platforms.

Some providers may store or process information on servers located outside Australia. The countries involved may vary according to the provider’s infrastructure and policies.

Where reasonably practicable, we select established providers with appropriate privacy and security practices. However, third-party platforms also operate under their own terms and privacy policies, and we encourage families to review those policies where appropriate.

 

 

10. Payments and financial information

Payments may be processed through third-party payment providers. We generally do not directly store complete credit or debit card details.

Payment providers may collect and process financial information according to their own privacy policies and security requirements.

We may retain transaction, invoice and account information as reasonably necessary for administration, taxation, accounting, dispute resolution and legal compliance.

 

 

11. Newsletters and direct marketing

We may use contact details to send:

• information requested by the individual;

• service-related communications;

• enrolment and class updates;

• curriculum information;

• newsletters;

• special offers; and

• information about relevant programs or events.

Marketing communications will only be sent where consent has been provided or where otherwise permitted by law.

You may unsubscribe from marketing communications at any time by using the unsubscribe link provided or contacting us directly. Unsubscribing from marketing does not prevent us from sending necessary communications about an enrolment, purchase, payment, safety matter or existing service.

 

 

12. Cookies and website analytics

Our websites may use cookies, analytics and similar technologies to:

• enable website functions;

• remember preferences;

• process online purchases;

• understand how visitors use our websites;

• improve website performance and content; and

• support relevant advertising or communications where permitted.

These technologies may collect information such as:

• IP address;

• browser and device type;

• pages visited;

• approximate location;

• referring website;

• time spent on the website; and

• interactions with website content.

This information may not directly identify a visitor by name, but it may still constitute personal information or an online identifier.

You can manage or disable cookies through your browser settings. Some website functions may not operate correctly if cookies are disabled.

 

 

13. Storage and security

Personal information may be stored electronically or, where necessary, in physical records.

We take reasonable steps to protect personal information from:

• misuse;

• interference;

• loss;

• unauthorised access;

• unauthorised modification; and

• unauthorised disclosure.

These steps may include:

• limiting access to authorised personnel;

• using passwords and access controls;

• using reputable cloud and technology providers;

• maintaining secure payment systems;

• training staff in confidentiality and appropriate information handling;

• securely storing physical records; and

• reviewing access when staff or contractors leave.

No electronic or physical storage system can be guaranteed to be completely secure. However, we take privacy and information security seriously and respond appropriately when concerns arise.

 

 

14. Retention and destruction

We retain personal information only for as long as reasonably necessary to:

• provide services;

• manage our relationship with a family or customer;

• respond to enquiries, complaints or disputes;

• maintain appropriate educational, safety and financial records; and

• meet legal, insurance, taxation and regulatory obligations.

When information is no longer reasonably required, we take reasonable steps to securely delete, destroy or de-identify it, unless we are required or permitted by law to retain it.

 

 

15. Data breaches

If we become aware of a suspected loss, unauthorised access or unauthorised disclosure of personal information, we will take reasonable steps to contain and assess the incident.

Where a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner where required by the Notifiable Data Breaches scheme.

We may also notify affected individuals in other circumstances where we consider notification appropriate for their protection.

 

 

16. Accessing and correcting personal information

You may request access to personal information we hold about you or your child. You may also ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

We may need to verify your identity and authority before providing access or making a correction.

In limited circumstances, access may be refused where permitted by law, including where providing access would unreasonably affect another person’s privacy or create a serious safety concern. If we refuse a request, we will generally explain the reason where it is lawful and reasonable to do so.

We aim to respond to access and correction requests within a reasonable period.

 

 

17. Privacy complaints

If you have a question or concern about how we have handled personal information, please contact our Privacy Officer using the details below.

To help us investigate, please provide:

• your name and contact details;

• a description of the concern;

• relevant dates or communications; and

• the outcome you are seeking.

We will treat privacy complaints seriously and aim to acknowledge them within five business days. We will investigate the circumstances and provide a response within a reasonable period.

If you are not satisfied with our response and the Privacy Act 1988 (Cth) applies to the matter, you may be entitled to contact the Office of the Australian Information Commissioner.

Information about making a privacy complaint is available at www.oaic.gov.au.

 

 

18. External websites and services

Our websites and educational materials may contain links to external websites, applications or resources.

We are not responsible for the privacy practices or content of external providers. Families should review the privacy policies and terms of external services before providing personal information.

 

 

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our services;

• the platforms we use;

• our information-handling practices; or

• legal and regulatory requirements.

The current version will be published on our websites. Where a material change may reasonably affect enrolled families or customers, we will take reasonable steps to provide notice.

 

 

20. Contact us

Questions, access or correction requests, and privacy complaints may be directed to:

Hayley Clearihan
Director – Modern Waldorf Pty Ltd
Trading as Sunshine Bridge Education and Modern Waldorf Online
Email: Hayley@sunshinebridgeed.com 

Business address:
1–3/46 Price Street
Nerang QLD 4211

We aim to acknowledge privacy enquiries and complaints within five business days.

Last updated: September 2026