{"id":355,"date":"2026-07-24T05:30:14","date_gmt":"2026-07-24T05:30:14","guid":{"rendered":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/?page_id=355"},"modified":"2026-07-24T07:40:35","modified_gmt":"2026-07-24T07:40:35","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"355\" class=\"elementor elementor-355\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-0fe7515 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"0fe7515\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-21cebf0\" data-id=\"21cebf0\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-624f885 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"624f885\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-fdad9f9\" data-id=\"fdad9f9\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ca0b17e elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"ca0b17e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInLeft&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-975973c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"975973c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c813e73 elementor-icon-list--layout-inline elementor-align-end elementor-mobile-align-center elementor-list-item-link-full_width elementor-invisible elementor-widget elementor-widget-icon-list\" data-id=\"c813e73\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Home<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-chevron-right\" viewBox=\"0 0 320 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M285.476 272.971L91.132 467.314c-9.373 9.373-24.569 9.373-33.941 0l-22.667-22.667c-9.357-9.357-9.375-24.522-.04-33.901L188.505 256 34.484 101.255c-9.335-9.379-9.317-24.544.04-33.901l22.667-22.667c9.373-9.373 24.569-9.373 33.941 0L285.475 239.03c9.373 9.372 9.373 24.568.001 33.941z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Privacy Policy<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t<div class=\"elementor-element elementor-element-0826116 e-flex e-con-boxed e-con e-parent\" data-id=\"0826116\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1c90602 elementor-widget elementor-widget-text-editor\" data-id=\"1c90602\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h1>Privacy Policy<\/h1><h4>1. Our Commitment to Your Privacy<\/h4><p>Endless PossAbilities Disability &amp; Aged Care Services Pty Ltd is committed to protecting the privacy, dignity and confidentiality of every person who engages with our disability support, NDIS, community care and aged care services.<\/p><p>We understand that NDIS participants, families, carers, nominees, advocates and support networks trust us with sensitive information about their health, disability, personal circumstances and support needs. We take this responsibility seriously and aim to handle all personal information respectfully, securely, transparently and only for legitimate service-related purposes.<\/p><p>This Privacy Policy explains:<\/p><ul><li><p>What personal and sensitive information we collect<\/p><\/li><li><p>Why we collect this information<\/p><\/li><li><p>How we use, store and protect information<\/p><\/li><li><p>When information may be disclosed<\/p><\/li><li><p>How participants can access or correct their records<\/p><\/li><li><p>How to make a privacy enquiry or complaint<\/p><\/li><li><p>How we respond to privacy incidents and data breaches<\/p><\/li><\/ul><p>This policy applies to participants, prospective participants, family members, carers, authorised representatives, nominees, advocates, referrers, employees, contractors, volunteers, website visitors and other people who interact with us.<\/p><h4>2. About Endless PossAbilities<\/h4><p>Endless PossAbilities Disability &amp; Aged Care Services Pty Ltd is a family-operated disability and aged care provider delivering person-centred support services across Sydney.<\/p><p>Our services may include:<\/p><ul><li><p>Assistance with employment and higher education<\/p><\/li><li><p>High-intensity personal care supports<\/p><\/li><li><p>Daily personal care and assistance<\/p><\/li><li><p>Transport and travel assistance<\/p><\/li><li><p>Community nursing care<\/p><\/li><li><p>Innovative community participation<\/p><\/li><li><p>Community-based activities<\/p><\/li><li><p>Children\u2019s school holiday programs<\/p><\/li><li><p>Support planning and service coordination activities<\/p><\/li><li><p>Other disability and community care supports agreed with participants<\/p><\/li><\/ul><p>We collect and use personal information only where it is reasonably necessary to understand a person\u2019s needs, provide safe and suitable supports, meet our legal responsibilities and operate our organisation effectively.<\/p><h4>3. Privacy Laws and Standards<\/h4><p>We aim to manage personal and health information in accordance with applicable Australian privacy, disability and health information requirements, including:<\/p><ul><li><p>The Privacy Act 1988 (Cth)<\/p><\/li><li><p>The Australian Privacy Principles<\/p><\/li><li><p>The Notifiable Data Breaches Scheme<\/p><\/li><li><p>The Health Records and Information Privacy Act 2002 (NSW)<\/p><\/li><li><p>The NSW Health Privacy Principles<\/p><\/li><li><p>The National Disability Insurance Scheme Act 2013<\/p><\/li><li><p>The NDIS Code of Conduct<\/p><\/li><li><p>Applicable NDIS Practice Standards and Quality Indicators<\/p><\/li><li><p>Applicable NDIS incident, complaints and record-management requirements<\/p><\/li><li><p>Other Commonwealth or NSW laws that apply to our services<\/p><\/li><\/ul><p>Where different legal requirements apply, we will follow the requirement that provides the appropriate level of privacy protection and regulatory compliance.<\/p><h4>4. What Is Personal Information?<\/h4><p>Personal information is information or an opinion about an identified individual, or a person who can reasonably be identified from that information.<\/p><p>Personal information may include:<\/p><ul><li><p>Full name<\/p><\/li><li><p>Residential or postal address<\/p><\/li><li><p>Email address<\/p><\/li><li><p>Telephone numbers<\/p><\/li><li><p>Date of birth<\/p><\/li><li><p>Gender or preferred pronouns<\/p><\/li><li><p>Emergency contact information<\/p><\/li><li><p>Identification documents<\/p><\/li><li><p>NDIS participant number<\/p><\/li><li><p>Medicare or healthcare details<\/p><\/li><li><p>Employment or education information<\/p><\/li><li><p>Financial, invoicing and payment information<\/p><\/li><li><p>Photographs, video recordings or audio recordings<\/p><\/li><li><p>Information about family members, carers or authorised representatives<\/p><\/li><li><p>Records of communications, enquiries, referrals and complaints<\/p><\/li><\/ul><p>Some information we collect is classified as sensitive information and receives a higher level of protection.<\/p><h4>5. Sensitive and Health Information<\/h4><p>Because we provide disability, personal care and community nursing services, we may need to collect sensitive and health information.<\/p><p>This may include information about:<\/p><ul><li><p>A person\u2019s disability, injury, illness or medical condition<\/p><\/li><li><p>Physical health and mental health<\/p><\/li><li><p>Medical history, diagnoses and treatment<\/p><\/li><li><p>Medications, allergies and healthcare requirements<\/p><\/li><li><p>Mobility, communication or cognitive support needs<\/p><\/li><li><p>Personal care and high-intensity support requirements<\/p><\/li><li><p>Behaviour support needs and behaviour support plans<\/p><\/li><li><p>Risk assessments and safety plans<\/p><\/li><li><p>Hospital admissions or healthcare appointments<\/p><\/li><li><p>Nursing assessments and clinical notes<\/p><\/li><li><p>Incidents, injuries and emergency events<\/p><\/li><li><p>Cultural background<\/p><\/li><li><p>Country of birth<\/p><\/li><li><p>Preferred language<\/p><\/li><li><p>Aboriginal or Torres Strait Islander status<\/p><\/li><li><p>Religious beliefs where relevant to support delivery<\/p><\/li><li><p>Dietary, cultural or personal preferences<\/p><\/li><li><p>Criminal history or worker screening information where legally required<\/p><\/li><li><p>Biometric information, photographs or recordings where authorised<\/p><\/li><li><p>Information about abuse, neglect, exploitation or safeguarding concerns<\/p><\/li><\/ul><p>We will generally collect sensitive information with the individual\u2019s consent or the consent of an authorised decision-maker, unless collection is required or authorised by law or is otherwise permitted in an emergency or serious safety situation.<\/p><h4>6. Information We May Collect<\/h4><p>The information we collect will depend on the person\u2019s relationship with us and the services being requested or delivered.<\/p><h5>Participant and Referral Information<\/h5><p>We may collect:<\/p><ul><li><p>Participant and referrer contact details<\/p><\/li><li><p>NDIS participant number and plan information<\/p><\/li><li><p>Plan management arrangements<\/p><\/li><li><p>Funding information<\/p><\/li><li><p>Service agreements<\/p><\/li><li><p>Support goals and desired outcomes<\/p><\/li><li><p>Requested services and preferred schedules<\/p><\/li><li><p>Details of current service providers<\/p><\/li><li><p>Support coordinator or plan manager details<\/p><\/li><li><p>Guardian, nominee, advocate or representative details<\/p><\/li><li><p>Communication and accessibility requirements<\/p><\/li><li><p>Interpreter requirements<\/p><\/li><li><p>Cultural and linguistic information<\/p><\/li><li><p>Emergency contacts<\/p><\/li><li><p>Consent forms and participant authorisations<\/p><\/li><\/ul><h5>Support and Care Information<\/h5><p>We may collect:<\/p><ul><li><p>Support plans<\/p><\/li><li><p>Personal care plans<\/p><\/li><li><p>Health management plans<\/p><\/li><li><p>Nursing and clinical records<\/p><\/li><li><p>Medication information<\/p><\/li><li><p>Mealtime management requirements<\/p><\/li><li><p>Manual handling and mobility information<\/p><\/li><li><p>Behaviour support plans<\/p><\/li><li><p>Risk assessments<\/p><\/li><li><p>Incident reports<\/p><\/li><li><p>Progress notes<\/p><\/li><li><p>Daily support records<\/p><\/li><li><p>Participant goals and progress<\/p><\/li><li><p>Community participation records<\/p><\/li><li><p>Transport and travel records<\/p><\/li><li><p>Appointment information<\/p><\/li><li><p>Feedback and complaints<\/p><\/li><li><p>Information supplied by healthcare professionals<\/p><\/li><\/ul><h5>Children and Young People<\/h5><p>For children participating in our school holiday programs or receiving other supports, we may collect:<\/p><ul><li><p>The child\u2019s name and date of birth<\/p><\/li><li><p>Parent or guardian contact details<\/p><\/li><li><p>Medical conditions and allergies<\/p><\/li><li><p>Medication requirements<\/p><\/li><li><p>Disability and support needs<\/p><\/li><li><p>Emergency contacts<\/p><\/li><li><p>Behavioural or communication needs<\/p><\/li><li><p>Dietary requirements<\/p><\/li><li><p>Activity permissions<\/p><\/li><li><p>Collection and drop-off authorisations<\/p><\/li><li><p>Photography or media consent<\/p><\/li><li><p>Information needed to provide safe and inclusive activities<\/p><\/li><\/ul><h5>Employment and Workforce Information<\/h5><p>For employees, applicants, contractors and volunteers, we may collect:<\/p><ul><li><p>Contact and identity information<\/p><\/li><li><p>Employment history<\/p><\/li><li><p>Qualifications and professional registrations<\/p><\/li><li><p>References<\/p><\/li><li><p>Police checks<\/p><\/li><li><p>NDIS Worker Screening Check information<\/p><\/li><li><p>Working with Children Check information<\/p><\/li><li><p>Right-to-work information<\/p><\/li><li><p>Training and competency records<\/p><\/li><li><p>Payroll, superannuation and banking details<\/p><\/li><li><p>Health information relevant to workplace safety<\/p><\/li><li><p>Performance, conduct and incident records<\/p><\/li><\/ul><h5>Website and Digital Information<\/h5><p>When a person visits our website or submits an online form, we may collect:<\/p><ul><li><p>Name<\/p><\/li><li><p>Phone number<\/p><\/li><li><p>Email address<\/p><\/li><li><p>Service required<\/p><\/li><li><p>Referral details<\/p><\/li><li><p>Information included in enquiry messages<\/p><\/li><li><p>IP address<\/p><\/li><li><p>Browser and device type<\/p><\/li><li><p>Website usage information<\/p><\/li><li><p>Pages visited<\/p><\/li><li><p>Date and time of access<\/p><\/li><li><p>Cookie and analytics information<\/p><\/li><\/ul><p>People should only provide information through our website that is reasonably necessary for their enquiry or referral.<\/p><h4>7. How We Collect Personal Information<\/h4><p>Where reasonable and practical, we collect personal information directly from the individual concerned.<\/p><p>We may collect information through:<\/p><ul><li><p>Telephone conversations<\/p><\/li><li><p>Emails<\/p><\/li><li><p>Website enquiry forms<\/p><\/li><li><p>Referral forms<\/p><\/li><li><p>Face-to-face meetings<\/p><\/li><li><p>Participant intake and assessment processes<\/p><\/li><li><p>Service agreements<\/p><\/li><li><p>Consent forms<\/p><\/li><li><p>Support planning meetings<\/p><\/li><li><p>Progress notes and service delivery records<\/p><\/li><li><p>Incident and complaint reports<\/p><\/li><li><p>Surveys and feedback forms<\/p><\/li><li><p>Employment applications<\/p><\/li><li><p>Our website, cookies and analytics systems<\/p><\/li><\/ul><p>We may also receive information from:<\/p><ul><li><p>Parents, family members and carers<\/p><\/li><li><p>Guardians and nominees<\/p><\/li><li><p>Advocates and authorised representatives<\/p><\/li><li><p>Support coordinators<\/p><\/li><li><p>Plan managers<\/p><\/li><li><p>The National Disability Insurance Agency<\/p><\/li><li><p>The NDIS Quality and Safeguards Commission<\/p><\/li><li><p>Healthcare professionals<\/p><\/li><li><p>Hospitals and community health services<\/p><\/li><li><p>Allied health providers<\/p><\/li><li><p>Schools and educational organisations<\/p><\/li><li><p>Government departments<\/p><\/li><li><p>Other service providers<\/p><\/li><li><p>Emergency services<\/p><\/li><li><p>Referring organisations<\/p><\/li><\/ul><p>When information is provided by another person, we will take reasonable steps to confirm that the person is authorised to provide it and that the participant has been informed where required.<\/p><h4>8. Why We Collect Personal Information<\/h4><p>We may collect, hold, use and disclose information to:<\/p><ul><li><p>Respond to enquiries and referrals<\/p><\/li><li><p>Confirm a person\u2019s identity<\/p><\/li><li><p>Assess support needs and service suitability<\/p><\/li><li><p>Develop individual support plans<\/p><\/li><li><p>Prepare and manage service agreements<\/p><\/li><li><p>Deliver safe, appropriate and person-centred supports<\/p><\/li><li><p>Provide personal care and community nursing<\/p><\/li><li><p>Support participant choice, control and independence<\/p><\/li><li><p>Communicate with participants and their representatives<\/p><\/li><li><p>Coordinate services with healthcare and allied health providers<\/p><\/li><li><p>Manage appointments, transport and community activities<\/p><\/li><li><p>Monitor participant progress and outcomes<\/p><\/li><li><p>Manage medications, health risks and emergency requirements<\/p><\/li><li><p>Prevent or respond to abuse, neglect, exploitation or harm<\/p><\/li><li><p>Manage incidents and reportable incidents<\/p><\/li><li><p>Process NDIS claims, invoices and payments<\/p><\/li><li><p>Communicate with plan managers and the NDIA<\/p><\/li><li><p>Manage complaints, feedback and service improvements<\/p><\/li><li><p>Conduct quality assurance, audits and compliance reviews<\/p><\/li><li><p>Meet NDIS registration or regulatory requirements<\/p><\/li><li><p>Train, supervise and manage workers<\/p><\/li><li><p>Maintain appropriate business and financial records<\/p><\/li><li><p>Meet insurance, legal and contractual obligations<\/p><\/li><li><p>Protect the rights, safety and wellbeing of participants and workers<\/p><\/li><li><p>Improve our services and internal systems<\/p><\/li><li><p>Manage recruitment and employment<\/p><\/li><li><p>Operate and improve our website<\/p><\/li><\/ul><p>We will not use personal information for an unrelated purpose unless the person has consented or the use is required or authorised by law.<\/p><h4>9. Consent, Choice and Control<\/h4><p>We support the right of participants to understand and control how their information is collected and used.<\/p><p>Before collecting sensitive information, we will take reasonable steps to explain:<\/p><ul><li><p>What information is being requested<\/p><\/li><li><p>Why the information is needed<\/p><\/li><li><p>How it will be used<\/p><\/li><li><p>Who it may be shared with<\/p><\/li><li><p>Whether collection is required by law<\/p><\/li><li><p>What may happen if the information is not provided<\/p><\/li><li><p>How consent may be changed or withdrawn<\/p><\/li><\/ul><p>Consent may be written, verbal or otherwise clearly communicated, depending on the circumstances and legal requirements.<\/p><p>Participants may withdraw or change their consent by contacting us. Withdrawal will not affect actions already taken with valid consent, and some information may still need to be retained or used where required by law.<\/p><p>Where withdrawing consent means we cannot safely or lawfully deliver a service, we will explain the consequences and discuss available options.<\/p><h4>10. Participants with Communication or Decision-Making Support Needs<\/h4><p>We aim to provide privacy information in a language, format and communication method that the participant is most likely to understand.<\/p><p>This may include:<\/p><ul><li><p>Easy Read information<\/p><\/li><li><p>Plain English explanations<\/p><\/li><li><p>Interpreters<\/p><\/li><li><p>Visual or picture-based information<\/p><\/li><li><p>Additional time to consider decisions<\/p><\/li><li><p>Communication devices<\/p><\/li><li><p>Assistance from an advocate<\/p><\/li><li><p>Involvement of a guardian, nominee or authorised representative<\/p><\/li><\/ul><p>We will involve the participant in privacy and consent decisions to the greatest extent possible, even where another person has legal authority to make decisions on their behalf.<\/p><p>We will verify the authority of guardians, nominees and representatives before disclosing personal information to them.<\/p><h4>11. Children and Young People<\/h4><p>We take additional care when handling information about children and young people.<\/p><p>Depending on the child\u2019s age, understanding and circumstances, consent may be obtained from:<\/p><ul><li><p>The child or young person<\/p><\/li><li><p>A parent<\/p><\/li><li><p>A legal guardian<\/p><\/li><li><p>Another legally authorised representative<\/p><\/li><\/ul><p>We will consider the child\u2019s maturity, capacity, best interests, safety and right to participate in decisions affecting them.<\/p><p>Information about a child will only be shared with authorised people, service providers or authorities where necessary for safe service delivery, where consent has been provided or where disclosure is required or permitted by law.<\/p><h4>12. When We May Share Information<\/h4><p>We may disclose personal information where reasonably necessary to provide services, protect a person\u2019s safety, meet legal requirements or operate our organisation.<\/p><p>Information may be disclosed to:<\/p><ul><li><p>The participant\u2019s authorised family members or carers<\/p><\/li><li><p>Guardians, nominees and advocates<\/p><\/li><li><p>Employees and support workers involved in service delivery<\/p><\/li><li><p>Community nurses and healthcare professionals<\/p><\/li><li><p>Allied health professionals<\/p><\/li><li><p>Support coordinators<\/p><\/li><li><p>Plan managers<\/p><\/li><li><p>The National Disability Insurance Agency<\/p><\/li><li><p>The NDIS Quality and Safeguards Commission<\/p><\/li><li><p>Hospitals and emergency services<\/p><\/li><li><p>Government departments and regulators<\/p><\/li><li><p>Schools or activity providers, where authorised<\/p><\/li><li><p>Auditors and quality assessors<\/p><\/li><li><p>Insurers<\/p><\/li><li><p>Lawyers and professional advisers<\/p><\/li><li><p>Financial and accounting providers<\/p><\/li><li><p>Information technology and cloud-service providers<\/p><\/li><li><p>Records-management and document-storage providers<\/p><\/li><li><p>Contractors who assist us in delivering services<\/p><\/li><\/ul><p>We seek to limit disclosures to the minimum information reasonably necessary for the relevant purpose.<\/p><p>Our employees, contractors and service providers are expected to protect confidential information and only access information required for their authorised duties.<\/p><h4>13. Disclosure Required by Law or for Safety<\/h4><p>We may use or disclose information without consent where permitted or required by law, including where:<\/p><ul><li><p>There is a serious threat to a person\u2019s life, health or safety<\/p><\/li><li><p>Emergency medical assistance is required<\/p><\/li><li><p>We reasonably suspect abuse, neglect, exploitation or unlawful conduct<\/p><\/li><li><p>Mandatory reporting obligations apply<\/p><\/li><li><p>A reportable incident must be notified<\/p><\/li><li><p>A court, tribunal or law-enforcement authority lawfully requires information<\/p><\/li><li><p>Disclosure is necessary for an investigation<\/p><\/li><li><p>Disclosure is necessary to establish or defend a legal claim<\/p><\/li><li><p>The disclosure is otherwise authorised under applicable privacy or health information laws<\/p><\/li><\/ul><p>Where possible and lawful, we will inform the affected person about the disclosure.<\/p><h4>14. Photographs, Videos and Audio Recordings<\/h4><p>We will generally obtain consent before taking or using identifiable photographs, video recordings or audio recordings.<\/p><p>Consent will describe the intended purpose, which may include:<\/p><ul><li><p>Participant records<\/p><\/li><li><p>Support planning<\/p><\/li><li><p>Progress monitoring<\/p><\/li><li><p>Incident investigation<\/p><\/li><li><p>Training<\/p><\/li><li><p>Program activities<\/p><\/li><li><p>Website or social media marketing<\/p><\/li><\/ul><p>A participant\u2019s decision not to consent to marketing photography will not affect their access to services.<\/p><p>Marketing images or testimonials will not be published without appropriate consent. A person may withdraw consent for future use by contacting us, although it may not always be possible to remove material that has already been lawfully printed, distributed or shared by third parties.<\/p><h4>15. Anonymity and Pseudonyms<\/h4><p>People may contact us anonymously or use a pseudonym when making a general enquiry, where practical.<\/p><p>However, we will generally need accurate identifying information to:<\/p><ul><li><p>Complete participant intake<\/p><\/li><li><p>Verify NDIS funding<\/p><\/li><li><p>Provide disability or nursing supports<\/p><\/li><li><p>Manage health and safety risks<\/p><\/li><li><p>Respond to emergencies<\/p><\/li><li><p>Maintain service records<\/p><\/li><li><p>Process payments<\/p><\/li><li><p>Meet legal and regulatory requirements<\/p><\/li><\/ul><p>We will explain when identifying information is required.<\/p><h4>16. Direct Marketing<\/h4><p>We may use contact information to provide service updates, program information or other communications where:<\/p><ul><li><p>The person has consented<\/p><\/li><li><p>The person would reasonably expect the communication<\/p><\/li><li><p>The communication is otherwise permitted by law<\/p><\/li><\/ul><p>People may opt out of marketing communications at any time by using the unsubscribe option or contacting us directly.<\/p><p>We will not sell participant contact information to third-party marketing organisations.<\/p><h4>17. Website Cookies and Analytics<\/h4><p>Our website may use cookies and similar technologies to support website functionality and understand how visitors interact with the website.<\/p><p>This information may include:<\/p><ul><li><p>IP address<\/p><\/li><li><p>Browser type<\/p><\/li><li><p>Device information<\/p><\/li><li><p>Pages viewed<\/p><\/li><li><p>Time spent on the website<\/p><\/li><li><p>Referral source<\/p><\/li><li><p>General location information<\/p><\/li><\/ul><p>Website analytics are generally used to improve website performance, accessibility and user experience.<\/p><p>Users may be able to control cookies through their browser settings. Disabling some cookies may affect website functionality.<\/p><p>Our website may contain links to external websites. We are not responsible for the privacy practices or content of external websites, and users should review the privacy policies of those organisations.<\/p><h4>18. Overseas Storage and Disclosure<\/h4><p>Some technology, email, data-hosting, software or cloud-service providers may store or process information using systems located outside Australia.<\/p><p>Before using third-party systems, we aim to consider their privacy, confidentiality and security arrangements.<\/p><p>Where personal information may be disclosed or accessed overseas, we will take reasonable steps required under applicable privacy laws to ensure that the information is handled appropriately.<\/p><p>Further information about relevant technology providers or overseas data arrangements may be requested from our Privacy Officer.<\/p><h4>19. How We Protect Personal Information<\/h4><p>We take reasonable administrative, physical and technical measures to protect personal information from:<\/p><ul><li><p>Misuse<\/p><\/li><li><p>Interference<\/p><\/li><li><p>Loss<\/p><\/li><li><p>Unauthorised access<\/p><\/li><li><p>Unauthorised modification<\/p><\/li><li><p>Unauthorised disclosure<\/p><\/li><li><p>Cybersecurity threats<\/p><\/li><\/ul><p>Our safeguards may include:<\/p><ul><li><p>Password-protected systems<\/p><\/li><li><p>Access controls based on worker roles<\/p><\/li><li><p>Secure cloud storage<\/p><\/li><li><p>Multi-factor authentication where available<\/p><\/li><li><p>Secure email and communication practices<\/p><\/li><li><p>Locked storage for paper records<\/p><\/li><li><p>Confidentiality agreements<\/p><\/li><li><p>Worker privacy and information-security training<\/p><\/li><li><p>Secure disposal processes<\/p><\/li><li><p>System backups<\/p><\/li><li><p>Software and security updates<\/p><\/li><li><p>Incident and data-breach response procedures<\/p><\/li><li><p>Regular review of access permissions<\/p><\/li><li><p>Monitoring and auditing of information-management practices<\/p><\/li><\/ul><p>Only workers who require information to perform their duties should be permitted to access participant records.<\/p><p>Participants should understand that no method of electronic transmission or storage can be guaranteed to be completely secure. We will nevertheless take reasonable steps to reduce privacy and cybersecurity risks.<\/p><h4>20. Data Breaches<\/h4><p>A data breach may occur when personal information is lost, accessed, disclosed or altered without authorisation.<\/p><p>If we become aware of a suspected privacy or data-security incident, we will take reasonable steps to:<\/p><ol><li><p>Contain the incident and prevent further unauthorised access.<\/p><\/li><li><p>Investigate what information and individuals may be affected.<\/p><\/li><li><p>Assess the likely risk of harm.<\/p><\/li><li><p>Take remedial action where possible.<\/p><\/li><li><p>Notify affected individuals and relevant regulators where required.<\/p><\/li><li><p>Review the incident and improve our systems.<\/p><\/li><\/ol><p>Where the Notifiable Data Breaches Scheme applies, we will assess whether the incident is likely to result in serious harm and notify affected individuals and the Office of the Australian Information Commissioner when legally required.<\/p><p>We may also notify the NDIS Quality and Safeguards Commission, the NDIA, law-enforcement authorities, insurers or other regulators where required or appropriate.<\/p><h4>21. Accuracy and Correction of Information<\/h4><p>We take reasonable steps to ensure that personal information is accurate, complete, relevant and up to date.<\/p><p>Participants and representatives should tell us when information changes, including:<\/p><ul><li><p>Contact details<\/p><\/li><li><p>Emergency contacts<\/p><\/li><li><p>Medical conditions<\/p><\/li><li><p>Medications<\/p><\/li><li><p>Allergies<\/p><\/li><li><p>Support needs<\/p><\/li><li><p>Guardianship or nominee arrangements<\/p><\/li><li><p>NDIS plan or funding information<\/p><\/li><\/ul><p>A person may request correction of information they believe is inaccurate, incomplete, out of date, irrelevant or misleading.<\/p><p>We may need to verify the person\u2019s identity before making a correction. Where we do not agree to a requested correction, we will explain the reason where required and may attach a statement to the record noting the person\u2019s requested correction.<\/p><h4>22. Accessing Personal Information<\/h4><p>Individuals may request access to personal information we hold about them.<\/p><p>A request can be made by contacting our Privacy Officer using the contact details below.<\/p><p>We may ask for:<\/p><ul><li><p>Proof of identity<\/p><\/li><li><p>Details of the information being requested<\/p><\/li><li><p>Evidence that a representative is authorised to act for the participant<\/p><\/li><\/ul><p>Access may be provided through:<\/p><ul><li><p>A copy of the relevant documents<\/p><\/li><li><p>Inspection of records<\/p><\/li><li><p>A written summary<\/p><\/li><li><p>An explanation of the information<\/p><\/li><li><p>Access through an agreed healthcare professional where appropriate<\/p><\/li><\/ul><p>We will respond within applicable legal timeframes.<\/p><p>Access may be refused or limited where permitted by law, including where access would:<\/p><ul><li><p>Create a serious threat to a person\u2019s life, health or safety<\/p><\/li><li><p>Unreasonably affect another person\u2019s privacy<\/p><\/li><li><p>Reveal confidential commercial information<\/p><\/li><li><p>Prejudice an investigation<\/p><\/li><li><p>Be unlawful<\/p><\/li><li><p>Relate to legal proceedings or anticipated legal proceedings<\/p><\/li><li><p>Be otherwise restricted under applicable privacy or health records legislation<\/p><\/li><\/ul><p>Where access is refused, we will generally provide written reasons and information about available complaint options, unless it would be unlawful or inappropriate to do so.<\/p><p>A reasonable administrative fee may apply where permitted by law, but we will not charge for making an access request.<\/p><h4>23. Retention and Disposal of Records<\/h4><p>We retain participant information for as long as it is needed for service delivery, legal compliance, quality assurance, insurance, auditing and legitimate business purposes.<\/p><p>Where NSW health-record retention requirements apply, health information collected while a person was an adult will generally be retained for at least seven years from the last occasion on which a health service was provided.<\/p><p>Health information collected while a person was under 18 will generally be retained until the person reaches 25 years of age.<\/p><p>Some records may need to be retained for a longer period because of NDIS, taxation, employment, insurance, incident-management, safeguarding, contractual or legal requirements.<\/p><p>When information is no longer required and there is no legal requirement to retain it, we will take reasonable steps to securely destroy or permanently de-identify it.<\/p><p>Secure disposal may include:<\/p><ul><li><p>Shredding paper records<\/p><\/li><li><p>Securely deleting electronic records<\/p><\/li><li><p>Destroying storage devices<\/p><\/li><li><p>Using approved confidential-waste services<\/p><\/li><\/ul><p>We will maintain required records relating to the disposal or transfer of health information.<\/p><h4>24. De-Identified Information<\/h4><p>We may remove information that identifies an individual and use the remaining de-identified information for:<\/p><ul><li><p>Service evaluation<\/p><\/li><li><p>Quality improvement<\/p><\/li><li><p>Staff training<\/p><\/li><li><p>Statistical reporting<\/p><\/li><li><p>Funding or regulatory reporting<\/p><\/li><li><p>Organisational planning<\/p><\/li><li><p>Research where legally permitted<\/p><\/li><\/ul><p>We will take reasonable steps to reduce the risk that de-identified information could be linked back to an individual.<\/p><h4>25. Privacy Complaints<\/h4><p>People have the right to raise concerns about how their personal information has been handled.<\/p><p>Privacy complaints may relate to:<\/p><ul><li><p>Unauthorised access or disclosure<\/p><\/li><li><p>Inaccurate records<\/p><\/li><li><p>Failure to provide access<\/p><\/li><li><p>Inappropriate collection<\/p><\/li><li><p>Information being used for an unexpected purpose<\/p><\/li><li><p>Lost documents<\/p><\/li><li><p>Email or cybersecurity incidents<\/p><\/li><li><p>Photography or recording concerns<\/p><\/li><li><p>Failure to respect consent preferences<\/p><\/li><\/ul><p>A complaint should include:<\/p><ul><li><p>The person\u2019s name and contact details<\/p><\/li><li><p>A description of what happened<\/p><\/li><li><p>Relevant dates<\/p><\/li><li><p>The information affected<\/p><\/li><li><p>The outcome being requested<\/p><\/li><li><p>Copies of relevant documents, where available<\/p><\/li><\/ul><p>We will treat complaints respectfully and confidentially. Making a complaint will not negatively affect a participant\u2019s access to services.<\/p><p>We will acknowledge the complaint, investigate the circumstances and aim to provide a response within 30 days. More complex matters may require additional time, and we will keep the complainant informed.<\/p><p>If a person is not satisfied with our response, they may contact:<\/p><ul><li><p>The Office of the Australian Information Commissioner<\/p><\/li><li><p>The Information and Privacy Commission NSW<\/p><\/li><li><p>The NDIS Quality and Safeguards Commission, where the concern relates to NDIS services<\/p><\/li><li><p>Another relevant regulator or complaints body<\/p><\/li><\/ul><h4>26. Contact Our Privacy Officer<\/h4><p>For privacy enquiries, access requests, correction requests, consent changes or complaints, please contact:<\/p><p><strong>Privacy Officer<\/strong><br \/><strong>Endless PossAbilities Disability &amp; Aged Care Services Pty Ltd<\/strong><\/p><p><strong>Address:<\/strong> 13A Mort Street, Blacktown NSW 2148<br \/><strong>Phone:<\/strong> 0415 055 651<br \/><strong>Email:<\/strong> <a href=\"mailto:peter.tawdrous@hotmail.com\">peter.tawdrous@hotmail.com<\/a><br \/><strong>ABN:<\/strong> 24 690 139 783<\/p><p>Please write <strong>\u201cPrivacy Enquiry\u201d<\/strong> or <strong>\u201cPrivacy Complaint\u201d<\/strong> in the email subject line so your request can be directed appropriately.<\/p><h4>27. Changes to This Privacy Policy<\/h4><p>We may update this Privacy Policy when our services, information-management systems, legal obligations or regulatory requirements change.<\/p><p>The current version will be published on our website with the date of the latest update.<\/p><p>We encourage participants, families, representatives, employees and website visitors to review this policy periodically.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Home Privacy Policy 1. Our Commitment to Your Privacy Endless PossAbilities Disability &amp; Aged Care Services Pty Ltd is committed to protecting the privacy, dignity and confidentiality of every person who engages with our disability support, NDIS, community care and aged care services. We understand that NDIS participants, families, carers, nominees, advocates and support networks [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-355","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/wp-json\/wp\/v2\/pages\/355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/wp-json\/wp\/v2\/comments?post=355"}],"version-history":[{"count":19,"href":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/wp-json\/wp\/v2\/pages\/355\/revisions"}],"predecessor-version":[{"id":443,"href":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/wp-json\/wp\/v2\/pages\/355\/revisions\/443"}],"wp:attachment":[{"href":"https:\/\/robotrnics.com\/Peter-endless-edgar-13may\/wp-json\/wp\/v2\/media?parent=355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}