Privacy policy

Last updated: 21 October 2026

We take care with the information you share with us. This policy explains, in plain terms, what we collect, why, where it is kept and what you can ask us to do with it.

Who we are

TKEX (The Knowledge Exchange) is a trading name of The Biomechanics Exercise Rehabilitation Pty Ltd as trustee for The Biomechanics ER Unit Trust, ABN 59 803 836 271. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

The short version

• We collect what we need to run our courses, reply to you and send you emails about our work.
• We do not sell your information.
• We use a number of established online services to run the site and courses. Most of them store data in the United States.
• You can ask to see, correct or delete your information.

What we collect and how

When you visit our website. Our website host (Webflow) sees your IP address and browser details, as every website host does. If you click Accept on the cookie banner, Google Analytics and the Meta (Facebook) pixel load. They record how the site is used, such as pages viewed, and they tell Meta when you click to buy a course or submit a form, so Google and Meta can measure and tailor our advertising. If you click Decline, they do not load. Some embedded course videos are played by Vimeo, which may set its own cookies. When you submit a form, our spam check (Cloudflare Turnstile) sees your IP address and basic device details.

When you fill in a form. We collect what you enter. Depending on the form, that is your name, email, profession, organisation or workplace, role, phone number, country or state, and your message or goals.

• Contact, organisation, mentorship and journal club forms are stored by Webflow and emailed to our team inbox (Google Workspace).
• Mailing list and waitlist forms go to Mailchimp, our email service. Webflow also keeps a copy of The Encounter waitlist.

When you buy or take a course. Courses are sold and delivered through Teachable, which holds your name, email, purchases and course progress. Card payments are handled by Teachable's payment provider (Stripe), and we never see your full card details. So we can see which of our advertising works, Teachable tells Meta and Google when a purchase is made. This happens on Teachable's checkout, outside our website's cookie banner. When you join a course we also add your name and email to our mailing list, unless you have opted out. You can unsubscribe at any time.

When you use The Encounter. The Encounter is our course with simulated patients.

• What you type or say to the simulated patient is sent through our server to Anthropic, the company that makes the AI model (Claude). It writes the patient's replies and the feedback on your encounter. Under Anthropic's standard terms, this is deleted within 30 days and is not used to train their models.
• The patient's replies are turned into speech by ElevenLabs. Only the patient's words are sent to ElevenLabs, not yours.
• If you use the microphone, your web browser's own speech service turns your voice into text (for example Google in Chrome, Microsoft in Edge, Apple in Safari). We do not receive or keep your audio.
• We keep a participant number for you, and with it: which encounters you completed, your scores, the time taken, your profession, your self-ratings, your answers to course questions, any feedback you give us, any technical problems, and your certificate number. We do not keep your name or email with these results.
• The written feedback on each encounter can quote short lines of what you said, so it is specific to you. It is shown to you and then deleted from our server, unless you have ticked the research box, in which case your conversations and feedback are kept with your participant number for research.
• To link your results to your course account, we match your participant number to your Teachable account number.
• Your certificate shows the name on your Teachable account.
• Your progress, your consent choice and your full transcript are kept in your own browser. The transcript is shown to you at the end of an encounter to download, and is cleared when you close that screen.

At a live workshop. Workshop feedback is anonymous: we record your profession, ratings, comments and the workshop date, with no name, email or IP address. If you want a certificate, we collect your name, email and profession to make it and email it to you, and keep a record of the certificate. We only add you to our mailing list if you tick the box. These records are kept in Cloudflare and in Google Workspace (Sheets, Drive and Gmail).

From other sources. We receive your name and email from Teachable when you enrol, as described above.

Why we use it

• To deliver courses, certificates and the services you ask for.
• To reply to your enquiries and arrange calls or mentorship.
• To send you emails about our courses, events and resources. Every email has an unsubscribe link. Mailchimp tells us whether emails are opened and which links are clicked.
• To improve our courses, including The Encounter, using results and feedback that are not linked to your name.
• For research into clinical communication and education. We may use your Encounter scores and answers for research once they have been de-identified (your participant number and any link to your account removed). We only keep your Encounter conversations and the written feedback on them for research if you tick the research box, and you can change that choice at any time before your data is de-identified. Where a project needs ethics approval, we get it before the data is used.
• To understand how the site is used and to measure and tailor our advertising, if you have agreed to cookies.

We do not use your information for unrelated purposes without asking you first, unless the law requires it.

Automated feedback

In The Encounter, an AI model reviews and scores your encounters and gives you feedback on them. This is there to help you learn. It does not decide whether you complete the course or receive a certificate, and we do not use computer programs to make decisions that significantly affect you.

Who we share it with

We share your information with the services that run TKEX for us, and where the law requires it.

Most of these providers hold recognised security certifications such as SOC 2 or ISO 27001, and we use them under their published privacy and security terms. Because they are based overseas, your information is likely to be stored or processed outside Australia, mainly in the United States, and in other countries through Cloudflare's and Anthropic's global networks.

We do not sell, rent or trade your personal information.

How we protect it

• Information sent through our website, forms and course tools travels encrypted (HTTPS).
• Our providers apply their own security controls, including encryption of stored data where they offer it.
• Access is limited to the TKEX team and the services listed above.
• If a data breach is likely to cause someone serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the law requires.

How long we keep it

• Mailing list details: until you ask us to delete them. Unsubscribing stops our emails.
• Enquiries: as long as we need to deal with your enquiry.
• Encounter results: we aim to delete them two years after your course access ends. Research data is de-identified, after which it is no longer linked to you, and is kept as the research requires.
• Course and purchase records: while you have an account, and purchase records for as long as tax law requires.
• Analytics cookies, if you accepted them: up to two years in your browser, unless you clear them.

Seeing, correcting or deleting your information

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it, except for records the law requires us to keep. Email matt@tkex.org and we will respond within 30 days. We may need to confirm who you are first. If we can't do what you ask, we will explain why.

You can unsubscribe from our emails using the link in each email. You can change your cookie choice using "Cookie choices" in the website footer. To remove cookies already set, clear them in your browser settings.

Questions and complaints

If you have a question or concern about how we have handled your information, email matt@tkex.org. We will acknowledge your message within 7 days, look into it, and reply in writing within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We will update this policy when the way we handle information changes, and change the date at the top.

Contact

matt@tkex.org, TKEX, Level 2, 109-111 Nicholson St, Footscray VIC 3011