Privacy Policy

Debounce Pty Ltd ABN 35 601 184 347 trading as Back Republic

Last updated: February 2026

1. About This Policy

This Privacy Policy explains how we collect, use, disclose, and store your personal information when you use our website at backrepublic.com, participate in any scorecard or assessment tool, or purchase any product or service from us.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Some of the information we collect is sensitive information within the meaning of the Privacy Act, including health information. We treat this information with the highest level of care.

By using our website or purchasing any product or service, you agree to the collection and use of your information as described in this policy.

2. Who We Are

Debounce Pty Ltd ABN 35 601 184 347 trading as Back Republic

[email protected]

backrepublic.com

3. Information We Collect

3.1 Personal information

We collect personal information you provide when using our website, completing a scorecard, or purchasing a product or service, including:

- Name and contact details (email address, phone number)

- Account login credentials

- Payment and billing information

- Communications with us

3.2 Health information

Where you participate in a scorecard, assessment tool, or one-to-one session, we collect sensitive health information including:

- Information about your back pain and related symptoms

- Physical health history relevant to back pain

- Information you share during sessions about your condition and circumstances

- Session notes and observations

- Progress information across sessions

We collect this information only with your consent and only to the extent necessary to deliver our services.

3.3 Session recordings

One-to-one sessions may be recorded with your knowledge. Recordings are audio-visual personal information and are treated as sensitive information under this policy.

3.4 Technical information

When you visit our website we may collect:

- IP address and device information

- Browser type and settings

- Website usage data

- Cookies and similar technologies

You can configure your browser to refuse cookies, though some parts of the website may not function correctly if you do.

4. How We Use Your Information

4.1 Delivering our products and services

We use your personal and health information to:

- Deliver and administer one-to-one sessions

- Personalise sessions based on your history and progress

- Process payments

- Send transactional communications (booking confirmations, reminders, receipts)

- Manage your account

4.2 Quality and service improvement

We use session recordings and notes internally for quality assurance and to improve how we deliver our services. This includes review by our practitioners and, where appropriate, by trusted third-party tools operating under data processing agreements that prohibit retention or secondary use of your information.

4.3 Educational use of recordings

With your separate explicit written consent, we may use edited recordings of your sessions as teaching materials for training future practitioners. Access to such materials is limited to enrolled students or practitioners under appropriate confidentiality obligations. You may withdraw this consent at any time by contacting us at [email protected]. Withdrawal of consent will not affect uses that have already taken place.

4.4 Communications

We use your contact information to send you transactional communications relating to your purchase or account, and occasional updates and insights from Back Republic. You may unsubscribe from non-transactional communications at any time using the unsubscribe link in any such email.

4.5 Legal and compliance purposes

We may use your information to comply with applicable laws, resolve disputes, and enforce our agreements.

5. Disclosure of Your Information

5.1 Service providers

We share your information with third-party service providers who assist us in delivering our products and services. These include:

- Video conferencing providers (session delivery)

- Payment processors (payment collection)

- Customer relationship and scheduling platforms (booking and communications)

- Cloud storage providers (data storage)

- Assessment and scorecard platforms (scorecard delivery)

All service providers are required to handle your information in accordance with applicable privacy laws and are prohibited from using your information for their own purposes.

5.2 Legal requirements

We may disclose your information where required by law, or where necessary to protect our rights, prevent fraud, or ensure the safety of any person.

5.3 Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the privacy implications.

5.4 No other disclosure

We do not sell, rent, or trade your personal information. We do not share session recordings outside Back Republic except as described in sections 5.1 and 4.3.

6. Storage and Security

We store your information in secure platforms with appropriate access controls, encryption in transit and at rest, and regular security reviews. We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, modification, or disclosure.

Where we use third-party platforms to store or process your information, we select providers with appropriate privacy and security controls and data processing agreements in place.

Your information may be stored or processed outside Australia. Where this occurs, we take reasonable steps to ensure it receives a level of protection consistent with the Australian Privacy Principles.

7. Data Retention

We retain your information for as long as necessary to deliver our services and meet our legal obligations:

- Account and contact information: for the duration of your relationship with us plus 2 years

- Health information and session notes: 7 years from the date of last service, consistent with applicable health records obligations

- Session recordings: as agreed with you, or until you request deletion, subject to any separate consent given under section 4.3

- Payment information: as required by our payment processor and applicable tax laws

- Technical and website data: up to 2 years

When information is no longer required, we take reasonable steps to destroy or de-identify it.

8. Your Rights

Under the Privacy Act 1988 (Cth) and Australian Privacy Principles, you have the right to:

- Access the personal information we hold about you

- Request correction of inaccurate, incomplete, or out-of-date information

- Request deletion of your information, subject to our legal obligations to retain it

- Withdraw consent to any use of your information that is based on consent, including consent given under section 4.3

- Lodge a complaint with us about how we have handled your information

- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Complaints

If you have a concern about how we have handled your personal information, please contact us at [email protected] in the first instance. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner:

Office of the Australian Information Commissioner

oaic.gov.au

1300 363 992

10. Changes to This Policy

We may update this policy at any time. The current version will always be available at backrepublic.com/privacy. We will notify you of material changes by email or by notice on our website.