Privacy Policy

1. Introduction

Universal Ability Pty Ltd ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us as an NDIS service provider.

By using our services or providing us with your personal information, you consent to the collection, use, and disclosure of your information in accordance with this Privacy Policy and the Australian Privacy Principles under the Privacy Act 1988 (Cth).

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact details (name, address, phone number, email address)
• Date of birth and age
• NDIS participant number and plan details
• Medical and health information relevant to service provision
• Disability-related information
• Emergency contact information
• Financial information for billing purposes
• Photos and videos (with consent) for documentation or promotional purposes
• Feedback and complaint information

2.2 Sensitive Information

We may collect sensitive information including health information, disability information, and other personal information that is considered sensitive under the Privacy Act. We only collect this information with your explicit consent and when it is necessary for providing our services.

2.3 Website Information

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Referring website information
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing NDIS support services and care
• Developing and implementing support plans
• Communicating with you about our services
• Billing and payment processing
• Compliance with NDIS requirements and reporting
• Quality improvement and service evaluation
• Staff training and development
• Emergency situations and safety purposes
• Legal compliance and regulatory requirements
• Marketing and promotional activities (with consent)

4. Information Sharing and Disclosure

4.1 When We Share Information

We may share your personal information with:

• NDIS Quality and Safeguards Commission
• Other healthcare providers involved in your care
• Family members or guardians (with your consent)
• Emergency services when necessary
• Legal authorities when required by law
• Service providers and contractors who assist us in delivering services
• Auditors and quality assessors

4.2 Consent

We will only share your information with your explicit consent, except where disclosure is required or permitted by law, or in emergency situations where your safety or the safety of others is at risk.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure storage of physical and electronic records
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on privacy and security practices
• Encryption of sensitive data during transmission
• Secure disposal of records when no longer needed

6. Your Rights

Under the Privacy Act 1988, you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Make a complaint about our handling of your information
• Request information about how we collect, use, and disclose your information
• Withdraw consent for certain uses of your information
• Request restriction of processing in certain circumstances

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and meet NDIS record-keeping requirements. Generally, we retain client records for a minimum of 7 years after the last service provision, or longer if required by law.

8. Cookies and Website Analytics

Our website uses cookies and similar technologies to improve your browsing experience and analyze website usage. You can control cookie settings through your browser preferences, though this may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to read their privacy policies.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the effective date.

11. Contact Us

If you have any questions about this Privacy Policy, wish to access or correct your personal information, or make a complaint, please contact us:

If you are not satisfied with our response to your complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or phone 1300 363 992.