Privacy.
What we collect, why we collect it, where it is kept, and how to reach us about it.
Who we are
CorePBS is operated by Foundations First Group Pty Ltd (ABN 46 683 194 569). This policy explains how we handle personal information in line with the Australian Privacy Principles. Questions go to amy@corepbs.com.
What we collect
When you create an account: your email address and a password, which is stored in protected form so no one, including us, can read it.
When you buy: your name, email, billing address, and the details of what you bought. Your card details go directly to Stripe and are never seen or stored by CorePBS.
When you learn: your progress, quiz results, and the reflections you write in the programs, saved to your account so you can pick up where you left off.
When you contact us or join a waitlist: whatever you include in the form, such as your name, email, and message.
What we do not want
Please do not enter identifiable information about NDIS participants, clients, or anyone else into the programs, reflections, or forms. The programs use fictional cases. If you write about real practice, de identify it first.
How we use it
To run your account, give you access to what you bought, save your progress, process payments, reply to you, and send service messages such as receipts and password resets.
We only send marketing emails if you have asked for them, and every email has a way to unsubscribe. We do not sell your personal information.
Who helps us
We use a small number of trusted services to run CorePBS: Supabase for accounts and saved progress, Stripe for payments, and Netlify for hosting the website and its forms. These services may store or process information outside Australia, including in the United States. We choose providers with strong security practices and only share what each one needs to do its job.
How we protect it
Your connection to CorePBS is encrypted. Each member can only see their own purchases and progress, and course content is only served to accounts that own it. Access to our systems is limited and protected with strong passwords and two factor login.
Access, correction, and deletion
You can ask us at any time for a copy of the personal information we hold about you, to correct it, or to delete your account. Email amy@corepbs.com from the address on your account. We will respond within 30 days. Some payment records must be kept for tax and legal reasons even after an account is deleted.
Complaints
If you have a concern about how we have handled your information, please email us first and we will work with you to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this policy. The current version is always on this page.
Last updated 3 October 2026.