Duck and Turtle Pty Ltd
Privacy Policy
Last updated: 3 July 2026
1. Overview
Duck and Turtle Pty Ltd (“we”, “us”, “our”) is committed to protecting the privacy of individuals in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how we collect, use, disclose and store personal information, and how you may access and correct your information.
“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable.
2. Collection of personal information
We may collect personal information necessary to provide our programs, services and communications.
The types of personal information we may collect include:
name
contact details (email, phone, address)
emergency contact details (where relevant to participation)
payment or billing information (where applicable)
program attendance or participation details
feedback or correspondence you provide
We generally collect personal information directly from you, including when you:
register for programs or services
communicate with us
complete forms or registrations
interact with our website or digital platforms
We may also collect information from third parties where reasonably necessary to provide our services.
3. Purpose of collection and use
We collect, hold, use and disclose personal information to:
deliver our sport, fitness and education programs
communicate with participants, parents or carers
manage bookings and administration
ensure participant safety and wellbeing
comply with legal and regulatory obligations
improve our services and program delivery
manage payments and invoicing
We will not use personal information for purposes unrelated to our services without consent, unless permitted or required by law.
4. Disclosure of personal information
We may disclose personal information to:
employees, contractors and facilitators (on a need-to-know basis)
schools or partner organisations where programs are delivered
insurers, legal or professional advisers
service providers assisting with business operations (e.g. IT, payment systems)
government or regulatory authorities where required by law
We may disclose personal information overseas where necessary to use secure service providers (such as cloud storage or digital systems). Where this occurs, we take reasonable steps to ensure those providers handle information in accordance with Australian privacy standards.
5. Overseas disclosure
Some service providers used by Duck and Turtle Pty Ltd may store or process data outside Australia, including in countries where cloud-based services operate.
Where this occurs, we take reasonable steps to ensure such providers handle personal information securely and consistently with the Australian Privacy Principles.
6. Security of personal information
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.
These steps may include:
secure digital storage systems
restricted access to personal information
password protection and encryption where appropriate
physical security measures for records
While we take reasonable steps to protect information, no method of transmission or storage is completely secure.
7. Access and correction
You may request access to personal information we hold about you and request corrections if you believe it is inaccurate, out of date, incomplete or misleading.
To request access or correction, please contact us at:
We may require verification of identity before providing access.
We will respond to requests within a reasonable period in accordance with the Australian Privacy Principles.
8. Complaints
If you have a complaint about how we handle your personal information, please contact us at:
We will:
acknowledge your complaint
investigate it promptly
respond within a reasonable timeframe
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
9. Data quality and retention
We take reasonable steps to ensure personal information is accurate, complete and up to date.
We retain personal information only for as long as it is reasonably necessary for our business or as required by law.
10. Website and analytics
When you visit our website, we may collect information such as:
browser type
operating system
pages visited
time spent on pages
referring website
This information is used in aggregated form to improve our services and website performance.
11. Cookies
Our website may use cookies to improve user experience and analyse website traffic.
Cookies are small files stored on your device. You may disable cookies through your browser settings, however some website functionality may be affected.
We may use third-party services (such as analytics or advertising platforms) which may also use cookies.
12. Third-party links
Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage users to review their privacy policies.
13. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be published on our website and will take effect from the date of publication.
14. Contact us
For privacy enquiries, access requests or complaints:
Duck and Turtle Pty Ltd
Email: nick_mezzino@hotmail.com
Child Data Privacy & School Services Addendum
1. Purpose of this Addendum
This Addendum applies where Duck and Turtle Pty Ltd (“we”, “us”, “our”) provides services involving children within schools, school holiday programs, or school-based activities.
It supplements our Privacy Policy and outlines how we collect, use, disclose, store, and protect children’s personal information in a school context.
Where there is any inconsistency, this Addendum prevails in relation to child-related data collected through school programs.
2. Commitment to Child Information Protection
Duck and Turtle Pty Ltd is committed to protecting the privacy, safety, and wellbeing of children.
We recognise that children’s personal information is sensitive and will be handled with a higher level of care in accordance with:
the Privacy Act 1988 (Cth)
the Australian Privacy Principles (APPs)
applicable South Australian child safety laws and standards
relevant school policies and procedures
3. Types of Child Information Collected
Where necessary for program delivery, we may collect and hold the following information:
child’s name
age or year level
school attended
attendance records
emergency contact details (provided by parent/guardian or school)
relevant medical or health information (e.g. allergies, asthma, injuries)
behavioural or support needs relevant to safe participation
incident or injury records
program participation notes (e.g. safety, supervision or inclusion requirements)
We only collect information that is reasonably necessary for the delivery of safe and effective programs.
4. Source of Information
Child personal information is generally collected from:
parents or legal guardians
schools (where programs are school-based)
authorised school staff
emergency contacts provided at registration
We do not knowingly collect personal information directly from children unless it is necessary for the safe delivery of activities (e.g. name check-in).
5. Purpose of Use
Child personal information is used only for purposes directly related to program delivery, including:
ensuring participant safety and supervision
managing attendance and roll marking
responding to medical or emergency situations
delivering age-appropriate activities
communicating with schools regarding program delivery
communicating with parents or guardians where required
complying with legal and child safety obligations
We do not use children’s personal information for unrelated marketing purposes.
6. Disclosure of Child Information
We may disclose child personal information only where reasonably necessary to deliver services or comply with legal obligations, including to:
authorised school staff
program facilitators employed or contracted by Duck and Turtle Pty Ltd
emergency services (where required in an emergency)
medical personnel (where required for treatment)
insurers (where required for incident reporting or claims management)
government or regulatory authorities if required by law
We do not sell, rent, or trade personal information.
7. School-Based Information Handling
When delivering programs in schools, Duck and Turtle Pty Ltd will:
comply with all relevant school privacy, child safety and ICT policies
use school-approved systems where required
restrict access to student information to authorised personnel only
ensure information is used solely for the purpose of program delivery
not remove or retain school records without authorisation
Where schools provide student data, it remains subject to school ownership and governance unless otherwise agreed in writing.
8. Storage and Security of Child Information
We take reasonable steps to protect child personal information from misuse, loss, unauthorised access, modification, or disclosure.
Security measures include:
secure digital storage systems with restricted access
password protection and access controls
confidentiality obligations for all staff and contractors
secure handling of paper-based records where used
deletion or return of data when no longer required
We will retain child information only for as long as necessary for program delivery, legal obligations, or incident management requirements.
9. Access and Correction
Parents or legal guardians may request access to personal information we hold about their child, or request corrections if the information is inaccurate or incomplete.
Requests should be directed to: nick_mezzino@hotmail.com
We may require verification of identity and legal guardianship before releasing information.
10. Data Breaches
In the event of an eligible data breach likely to result in serious harm, Duck and Turtle Pty Ltd will:
take immediate steps to contain the breach
assess the risk and impact
notify affected individuals where required
comply with obligations under the Notifiable Data Breaches scheme (Privacy Act 1988 Cth)
cooperate with relevant authorities and schools
11. Photography and Media in School Programs
Photographs or video recordings of children will only be taken where:
authorised by the school and/or parent/guardian consent has been obtained
the purpose is clearly related to program delivery, reporting, or approved marketing
images are captured by authorised personnel using approved devices
We will not:
publish identifiable images without appropriate consent
use images in a way that is misleading or inappropriate
share images on personal social media accounts
12. Cross-Border Data Handling
Where third-party digital service providers are used (such as cloud storage or booking systems), child-related information may be stored or processed outside Australia.
In such cases, Duck and Turtle Pty Ltd will take reasonable steps to ensure those providers handle information in accordance with Australian privacy standards.
13. Child Safety and Mandatory Reporting
All Duck and Turtle Pty Ltd personnel and contractors:
hold a valid Working With Children Check (SA)
comply with South Australian mandatory reporting obligations
follow child-safe codes of conduct
immediately report any suspected harm or risk to a child in accordance with legal requirements and school procedures
Child safety obligations override confidentiality obligations where required by law.
14. Complaints
Complaints relating to child personal information may be directed to:
Duck and Turtle Pty Ltd
Email: nick_mezzino@hotmail.com
We will respond in a timely and respectful manner and may involve the relevant school where appropriate.
If a complaint cannot be resolved, individuals may refer the matter to the Office of the Australian Information Commissioner (OAIC).
15. Review and Updates
This Addendum may be updated from time to time to reflect changes in legislation, school requirements, or operational practices. The most recent version will be made available on request or via our website.