Privacy and Consent Policy

Last updated: [10/March/2025]

Personal information refers to information or an opinion that identifies an individual. This may include your name, date of birth, address, email, phone number, correspondence, health records, reports, and other related documentation.

We collect personal information to:

• Provide allied health services to you under the NDIS or privately
• Communicate with you and relevant stakeholders (e.g. support coordinators, case managers, health professionals)
• Meet our legal, regulatory, and compliance obligations
• Conduct administrative and quality assurance activities

We collect personal information through various methods, such as during assessments, phone calls, emails, intake forms, or via referral partners. In some cases, personal information may be received from third parties (e.g., support coordinators, family members, medical professionals) with your consent.

Sensitive information includes data about your health, cultural background, beliefs, criminal history, or union/professional memberships.

We will only collect and use sensitive information:

• With your consent
• When required for the delivery of services
• Where permitted or required by law
• When a permitted health or emergency situation exists (e.g., risk of harm)

Where possible, we collect personal information directly from you. In some situations, we may receive your information from third parties (e.g., doctors, NDIS providers, schools, family members). When this occurs, we take reasonable steps to inform you about the data provided to us.

We may disclose your personal information:

• When you provide written or verbal consent
• To relevant service providers or professionals involved in your care
• In the event of a serious risk to your health or safety, or that of others (e.g., suicide, self-harm, harm to others)
• To meet legal or regulatory obligations under Australian law
• For audit, compliance, or quality assurance purposes 

Your information is only shared with individuals who are bound by confidentiality and privacy obligations, and only when directly related to their role.

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, or disclosure. This includes secure physical and digital storage systems, restricted access, and staff training in privacy compliance.

Your information will be securely stored for a minimum of 7 years (or until a child turns 25 years old, whichever is longer) in accordance with legislative requirements. Once no longer needed, it will be securely destroyed or permanently de-identified.

You have the right to access the personal information we hold about you and to request corrections. To do so, please contact us in writing. We may require verification of your identity before processing your request.

We aim to ensure your personal information is current and accurate. Please notify us if any of your details change or if you believe any information we hold is incorrect. Keeping your information up to date helps us to provide the best possible service.

We aim to ensure your personal information is current and accurate. Please notify us if any of your details change or if you believe any information we hold is incorrect. Keeping your information up to date helps us to provide the best possible service.