Effective Date: 23 August 2026
Last Updated: 23 August 2026
The Brain Injury Centre ("we", "us", or "our") is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy outlines how we collect, use, store, disclose, and manage your Personal Information and sensitive Health Information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and applicable state-specific health records legislation (such as the Health Records and Information Privacy Act 2002 (NSW) and the Health Records Act 2001 (Vic)).
By registering an account, completing our self-guided cognitive performance check-ins, or accessing our services, you expressly consent to the collection, storage, use, and disclosure of your personal and health information as described in this Privacy Policy.
1. Important Non-Clinical Disclaimer
The Brain Injury Centre is an automated, self-guided cognitive performance tracking platform developed by software developers and patient advocates.
- We do not provide medical, clinical, or psychological diagnoses, screening, or treatment.
- Our services are not clinically validated medical devices and are not a substitute for professional medical advice, diagnosis, or treatment.
- No registered health practitioners, clinical psychologists, or neuropsychologists are involved in administering, reviewing, or evaluating your cognitive performance check-ins.
- If you suspect you have a concussion, traumatic brain injury (TBI), or any medical condition, you must consult a qualified medical practitioner immediately.
2. Information We Collect
To provide our automated tracking services and generate your structured cognitive performance summaries, we must collect personal and sensitive information. Under Australian law, cognitive performance metrics are classified as "Health Information"—the highest and most heavily protected category of sensitive personal data.
We collect the following categories of data:
A. Personal Information
When you register, create an account, purchase an assessment, or contact our support team, we collect:
- Full Name
- Email Address
- Physical Address, State, Post/ZIP Code, and Country
- Billing and Payment Details (processed securely via PCI-compliant third-party gateways; we do not store raw credit card numbers on our servers)
B. Sensitive Health Information
When you utilize our self-guided cognitive tracking platform, we generate and collect:
- Your interactive responses to cognitive performance check-ins
- Raw performance metrics across six core cognitive domains (Memory, Concentration, Speed & Accuracy, Planning, Problem Solving, and Reasoning)
- Your history of assessment results and comparative trend analysis over time
- Your self-reported lived experiences, symptom notes, or personal history details that you voluntarily enter into our contact or support forms
C. Technical and Usage Data
When you browse our website, our servers automatically log technical metadata. This data is used strictly for statistical and security verification purposes and does not identify you personally:
- Internet Protocol (IP) Address
- Browser type and operating system
- Pages visited and time spent on our site
- Referral sources and search terms used to find our platform
3. How We Collect Your Data
We collect your information directly from you in the following ways:
- Account Registration: When you register a secure login portal to access our tracking tools.
- Assessment Completion: When you actively participate in and complete the cognitive tracking exercises.
- Support and Contact Channels: When you email us, call our hotline (0438 271 522), or submit a form detailing your story.
- Consent Mechanisms: We will always obtain your express, unambiguous consent before collecting or processing any sensitive Health Information. This consent is gathered at the point of account registration and immediately prior to commencing any cognitive check-in.
4. Why We Collect and Use Your Data
We collect and process your Personal and Health Information strictly for the following primary purposes:
- To Deliver our Core Tracking Services: To process your cognitive exercises, evaluate performance metrics, and generate your structured personal performance PDF summaries.
- To Enable Trend Tracking: To store your baseline results so that you can complete comparative evaluations at week 12 to observe and track your cognitive wellness patterns over time.
- To Empower GP Conversations: To provide you with a structured, written record of your personal cognitive experiences to share with your General Practitioner or registered clinical healthcare team.
- Service Administration: To verify your identity, process secure transactions, manage your account, and deliver technical support.
- Legal and Regulatory Compliance: To maintain records required under Australian law and enforce our terms of service.
We do not use your health metrics or personal information for marketing purposes, nor do we sell, rent, or lease your personal or health data to any third-party marketing databases, insurance companies, employers, or credit agencies.
5. Security and Storage of Your Data
We understand that your Health Information is deeply private and sensitive. We take industry-leading physical, technical, and administrative measures to secure your data:
- Australian-Compliant Hosting: All personal and health data collected is stored securely on compliant cloud infrastructure located within Australia (specifically, the AWS Sydney region) to ensure data remains subject to Australian jurisdiction and strict health privacy legislation.
- Data Encryption: All sensitive health data is encrypted both in transit (using secure 256-bit SSL/TLS protocols) and at rest on our secure servers.
- Access Controls: Access to your secure login portal is password-protected. We enforce strict internal security protocols restricting administrative access to personal data to authorized technical support personnel only when required to resolve account or technical issues.
- Data Retention: We retain your cognitive performance results only as long as necessary to provide you with your trend tracking services or as required by law. If you choose to close your account, your data is permanently and securely deleted from our active databases.
6. Disclosure of Your Information
We operate under strict confidentiality protocols. We will only disclose your personal or health information to third parties in the following limited circumstances:
- Primary Service Providers: To trusted, PCI-compliant payment processors to execute your purchase transactions (such as Stripe or PayPal), or secure email delivery systems to email your PDF summaries directly to your inbox. These providers are bound by strict contractual confidentiality agreements and are prohibited from using your data for any other purpose.
- Required by Law: If we are under a statutory obligation to disclose information to comply with a valid legal process, subpoena, warrant, or regulatory directive issued by an Australian court or law enforcement authority.
- Express Directives: If you explicitly direct us to share your records or report with a specific third party (for instance, if you request that we send a report directly to a nominated medical clinic).
Important Reminder: Because this platform is a non-clinically validated, self-guided tracking tool, our reports are not admissible as clinical evidence in court or for formal insurance compensation claims. We do not automatically share your reports with lawyers, insurers, or medical clinics. You remain in complete, exclusive control of your final written summaries.
7. Your Rights Under Australian Privacy Law
Under the Privacy Act 1988 (Cth) and state health records laws, you possess clear, enforceable rights regarding your personal and sensitive health data. You have the right to:
- Access Your Information: Request a copy of the personal and health data we hold about you. You can download your structured PDF reports directly from your secure login portal at any time.
- Correct Your Information: Request that we update, correct, or amend any personal details that are inaccurate, out-of-date, incomplete, or misleading.
- Delete Your Information (The Right to be Forgotten): Request that we permanently delete your account, personal details, and stored cognitive tracking histories from our systems.
- Withdraw Consent: Withdraw your consent to process your sensitive Health Information at any time. Doing so will result in the suspension of tracking services and the secure deletion of your records.
To exercise any of these rights, please contact our Data Privacy Officer using the contact details in Section 9. We will respond to all requests within 30 days, free of charge.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our technology, operational practices, or legal obligations under Australian law. When changes are made, we will update the "Effective Date" at the top of this document. We encourage you to review this policy periodically to stay informed about how we are protecting your sensitive information.
9. Contact Us and Complaints
If you have any questions, concerns, or complaints regarding how we handle your private personal details or sensitive Health Information, or if you believe we have breached the Australian Privacy Principles (APPs), please contact us directly:
Data Privacy Officer: Christian King
Direct Support Hotline: 0438 271 522
Direct Support Email:
Headquarters: Brain Injury Centre, Australia
If you are unsatisfied with our response to a privacy complaint, you have the right to escalate the matter to the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992
