Privacy Policy

This policy explains how we collect, use, store, disclose and protect personal information, including sensitive health information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

• Contact and identity details of participants, families and referrers
• NDIS details, including plan information where relevant
• Sensitive information, including health, disability and behavioural information necessary to deliver support
• Information from support coordinators, families, support workers and other treating professionals

We collect information directly from you wherever possible (through referrals, enquiry calls, assessments and consultations) and, with consent, from people involved in your support such as support coordinators and allied health professionals.

How we use your information

We use your information to assess referrals, conduct assessments, develop and review behaviour support plans, deliver training and support, and meet our professional and regulatory obligations. We only collect information that is reasonably necessary for these purposes.

Sharing your information

We do not sell your information. We may share it, with your consent, with members of your support team (for example support coordinators, families and treating professionals) where this supports your care. We may also disclose information where required or authorised by law, including to the NDIS Quality and Safeguards Commission.

How we store and protect it

Referrals submitted through our website are collected using Microsoft Forms and stored in our Microsoft 365 environment, which is access-controlled and used only by our practice. Microsoft may process this data in accordance with its own privacy and security commitments.

We store personal and health information in secure, access-controlled cloud systems. Information is encrypted in transit and at rest, access is limited to people who need it to provide your support, and we securely destroy or de-identify records when they are no longer required.

Access, correction and questions

You can request access to the personal information we hold about you, ask us to correct it, or raise a privacy concern by contacting info@caritascollective.com.au or 08 9446 9000. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.