1. What Personal Information We Collect

We may collect the following types of information:

• Full name, date of birth, gender, and contact details

• NDIS participant number and plan details

• Emergency contact and next of kin information

• Medical history, mental health information, and treatment plans • Cultural identity and language preferences

• Records of services provided, including notes and progress reports • Information from third parties such as healthcare providers, support coordinators, or guardians

2. How We Collect Your Information We collect personal information:

• Directly from you or your authorised representative

• From NDIS plans or referrals • Through service delivery and clinical sessions • From third parties, with your consent (e.g., doctors, allied health professionals, support coordinators) 

3. Why We Collect Your Information We collect and use your personal information to:

• Provide you with safe, appropriate, and person-centred care

• Develop and review individualised support and treatment plans

• Fulfil obligations under the NDIS Quality and Safeguarding Framework

• Communicate with you, your support team, and health professionals

• Monitor service quality, report incidents, and ensure safety

• Meet legal, regulatory, and reporting requirements

4. Disclosure of Information We may disclose your information:

• To your authorised representatives, support coordinators, or healthcare providers involved in your care

• To the NDIS Quality and Safeguards Commission or NDIA when required

• To other third parties where you have given consent or where permitted or required by law We do not sell or rent your personal information to third parties. ⸻

5. Data Storage and Security

We take all reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. Your records are stored securely, either electronically (with password protection and encryption) or in locked physical storage. ⸻

6. Accessing and Correcting Your Information

You have the right to request access to your personal information and to request corrections if it is inaccurate, incomplete, or outdated. Please contact us using the details below. ⸻

7. Making a Privacy Complaint

If you believe we have breached your privacy rights, you can lodge a complaint by contacting us. We take all complaints seriously and will respond within a reasonable timeframe. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au

Phone: 1300 363 992 8.

8. Contact Us

ThriveWell Care

Email: info@thrivewellcare.com.au

Phone: 1 (123) 234 1234

Address: Australia Square, George Street, Sydney NSW, Australia

thrivewellcare.com.au