1 Our Commitment to Your Privacy

At Core Disability Support Services, your privacy is our priority.

We are committed to protecting the personal information of our participants, families, staff, and partners in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We collect, store, and use your information only for the purpose of providing safe, effective, and person-centred NDIS supports.

2 Information We Collect

We may collect the following types of personal information:

• Your full name, date of birth, gender and contact details
• NDIS participant number and plan details
• Emergency contact and next of kin information
• Health and medical information (including support needs, medications, allergies, or relevant diagnoses)
• Financial or billing information (for invoicing or service agreements)
• Records of your communication with us, such as emails or feedback
• Information provided by your family, advocate, or guardian (where relevant)

We collect this information directly from you or your authorised representative. Occasionally, we may also receive information from other service providers or government agencies, but only with your consent.

3 How We Use Your Information

Your personal information is used to:

• Deliver NDIS-funded supports and services
• Develop and review your support plan
• Communicate with you, your family, and other stakeholders
• Ensure your health, safety and wellbeing while receiving services
• Maintain accurate records and meet legal or funding requirements
• Improve the quality of our services and client experience

We will only use or disclose your information for the purpose it was collected — unless required or permitted by law.

4 Sharing Your Information

We may share your information with:

• The National Disability Insurance Agency (NDIA)
• Health professionals, allied health providers or specialists (with your consent)
• Family members, carers or guardians (if authorised)
• Government regulators or auditors (when required by law)
• Emergency services in cases where your safety is at risk

We never sell, rent, or trade your personal information.

5 Storing and Securing Your Information

Your privacy is protected through strict security practices.

We store all records in secure systems — both physical and digital — and restrict access only to authorised staff.

Security measures include:

• Password-protected databases and encrypted files
• Secure cloud storage within Australia
• Locked filing cabinets for paper records
• Staff training in confidentiality and privacy management

When your information is no longer required, it is securely deleted or destroyed in accordance with the NDIS Quality and Safeguards Commission requirements.

6 Accessing or Correcting Your Information

You have the right to access and update your personal information.

If you believe the information we hold is inaccurate, incomplete, or outdated, please contact us and we will correct it promptly.

We aim to respond to all access or correction requests within 10 working days.

7 Consent

By engaging with Core Disability Support Services or using our website, you consent to the collection and use of your information as described in this policy.

You may withdraw your consent at any time — however, doing so may affect the supports we can provide under your NDIS plan.

8 Website and Online Privacy

When you visit our website (www.coredisability.com.au):

• We may collect non-identifying information such as browser type, device, and pages visited.
• We use this data to improve website performance and accessibility.
• Cookies may be used to enhance user experience — you can disable these in your browser settings.

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those websites.

9 Complaints About Privacy

If you have a concern or complaint about how your information is handled, please contact us first — we take privacy matters seriously.

We will investigate and respond to your complaint within 30 days.

If you are not satisfied with our response, you can contact:

Office of the Australian Information Commissioner (OAIC)

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect new laws, regulations, or organisational practices.

All updates will be posted on our website with a new “Last Updated” date.