Privacy Policy — how we protect your information

This policy applies to everyone we work with: NDIS participants and their families and carers, people who make enquiries or referrals, support coordinators, job applicants, staff and contractors, and visitors to this website.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Health information and NDIS-related records are also handled in line with the NDIS (Practice Standards) rules and the NDIS Code of Conduct.

Depending on your relationship with us, we may collect:

• Contact details — your name, phone number, email and address.
• Support information — your NDIS number, plan details, goals, support needs, and the services you receive from us.
• Health information — assessments, diagnoses, medications and therapy notes, where these are needed to deliver safe supports.
• Referral information — details sent to us by support coordinators, health professionals or family members, including any documents you choose to attach.
• Worker information — for staff and applicants: screening checks, qualifications, and employment records.
• Website information — basic technical data such as pages visited, used to keep the site working well. We do not use advertising trackers.

• To plan, deliver and review your supports safely.
• To communicate with you, your family or your coordinator (with your consent).
• To claim payments from the NDIA and meet reporting obligations.
• To meet legal requirements, including incident reporting to the NDIS Quality and Safeguards Commission.
• To respond to feedback, complaints and enquiries.
• To recruit, roster and support our workers.

We will not use your information for marketing unless you have told us we can.

We only share your information where it is needed, and only what is needed, with:

• The NDIA and the NDIS Quality and Safeguards Commission, where the law requires it.
• Your support coordinator, plan manager or other providers — with your consent.
• Health professionals involved in your care, where it supports your safety.
• Government or emergency services, where there is a serious risk to you or someone else.
• Service providers who help us run our systems (for example secure record-keeping software), under confidentiality obligations.

We never sell your personal information.

Records are stored securely in Australia with access limited to staff who need it for their role. Staff are trained in privacy and confidentiality, and referrals submitted through this website are stored in access-controlled systems. We keep records only for as long as the law requires, then destroy or de-identify them.

If a data breach is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

You can, at any time:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is wrong or out of date.
• Withdraw consent to share information (this may affect what supports we can deliver — we will talk it through with you).
• Make a complaint about how your information has been handled.

You can ask a family member, advocate or guardian to do this on your behalf. We will always check with you first where we can.

To access, correct or complain about your information, contact our Privacy Officer:

• Phone: 1300 040 681
• Email: info@ametz.com.au
• Post: Level 1, 457–459 Elizabeth Street, Surry Hills NSW 2010

We will acknowledge your complaint within 2 business days and aim to resolve it within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or, for NDIS service matters, the NDIS Quality and Safeguards Commission (1800 035 544).