We respect your privacy. This policy explains how we collect, use, store and share your personal information, including health and disability information, when you use our services or our website. We follow the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Health Records and Information Privacy Act 2002 (NSW), and the NDIS Code of Conduct and Practice Standards.
What we collect
- Contact details: name, address, phone, email, date of birth.
- NDIS details: NDIS number, plan dates, plan type and funded supports.
- Health and disability information relevant to your supports, including reports from other professionals.
- Details of family members, guardians, nominees and other providers involved in your supports.
- Notes and reports from our sessions and coordination work.
- Information you send through our website forms or by email.
How we collect it
We collect information directly from you or your nominee wherever possible. With your consent, we may also receive information from referrers, your NDIS planner or Local Area Coordinator, plan managers, schools, health professionals and other providers.
Why we use it
- To provide, plan and review the supports you ask us for.
- To coordinate with other providers and the NDIA on your behalf.
- To claim payment for our services.
- To meet our legal obligations, including NDIS reporting and incident management.
- To respond to enquiries, feedback and complaints.
We do not sell your information or use it for unrelated marketing.
Who we share it with
We only share your information with your consent, or where the law requires or allows it. This may include the NDIA, the NDIS Quality and Safeguards Commission, your plan manager, other providers you choose to work with, and your nominee or guardian. We may share information without consent where there is a serious risk to someone’s life, health or safety, or where we are legally required to (for example, reportable incidents).
Storage and security
We store information securely in password-protected systems and limit access to staff who need it. Some of the services we use, such as cloud email and backup services, may store data on servers outside Australia; we choose reputable providers and take reasonable steps to protect your information. We keep records for at least 7 years, as required for NDIS providers, and then destroy them securely.
Our website
When you submit a form on our website, your details are sent to us by email and may be stored securely on our website and in our backups. We do not use advertising trackers.
Accessing or correcting your information
You can ask to see or correct the information we hold about you at any time by contacting us. We will respond within 30 days. We may refuse access only where the law allows, and we will explain why.
Questions and complaints
If you have a question or concern about privacy, please contact us first:
Phone: 0435 893 846
Email: info@capablelife.com.au
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or the NSW Information and Privacy Commission (ipc.nsw.gov.au). You can also raise concerns with the NDIS Quality and Safeguards Commission (ndiscommission.gov.au).
