Your privacy matters to us.

Elevate Together Pty Ltd ("we", "us") follows the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the NDIS Practice Standards.

What we collect

Depending on the services you use, we may collect:

• Your name, date of birth, contact details and preferred contact method
• NDIS details — your NDIS number, plan dates, how your plan is managed, and your goals
• Health and disability information relevant to your supports and therapy
• Details of the people involved in your care — family, carers, guardians, nominees and other providers
• Notes from our conversations, meetings, sessions and reviews
• Information you give us through our website forms, by phone or by email

Health and disability information is "sensitive information" under Australian law. We only collect it with your consent, or where the law allows us to.

How we collect it

Most of the time, directly from you — through our referral forms, phone calls, meetings and sessions. Sometimes from people you've authorised, like a family member, support coordinator or health practitioner, or from the NDIA with your permission.

Why we collect it

We use your information to:

• Deliver your supports and therapy
• Understand your goals and plan the right services
• Communicate with you and the people you've asked us to work with
• Claim NDIS funding and keep required records
• Prepare reports and evidence for plan reviews
• Handle feedback, complaints and incidents
• Meet our legal and NDIS Quality and Safeguards Commission obligations

We do not sell your information. We do not use it for marketing unless you've said that's okay.

Who we share it with

Only the people and organisations needed to deliver your services and meet our obligations:

• Other providers in your support team, with your consent
• The NDIA and the NDIS Quality and Safeguards Commission, where required
• Your plan manager, for payment of invoices
• Trusted service providers who help us run the business (such as secure client-management and email systems), who must keep it confidential
• Where the law requires it — for example, if someone's safety is at risk

We won't share your information with anyone else without asking you first.

How we keep it safe

Your information is stored in secure, access-controlled systems. Only staff who need it to do their job can access it. Our team is trained in privacy, and we have policies for handling, storing and destroying information safely. Our website forms are sent over an encrypted connection.

Website and forms

When you send us a referral or enquiry through our website, the details go to our secure inbox and client system so we can respond. Our website may use basic cookies and analytics to understand how it's used; this doesn't identify you personally.

Your choices and rights

You can:

• Ask to see the information we hold about you
• Ask us to correct anything that's wrong
• Withdraw consent to share information (some services may not be possible without it)
• Ask us to delete information, where we're not required to keep it
• Make a complaint about how we've handled your privacy

Just ask — call 1300 478 816 or email info@elevatetogether.com.au. We'll respond within 30 days.

If you're not happy with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

How long we keep it

We keep records for as long as the NDIS rules require — generally seven years after we stop providing services — and then destroy them securely.

Changes to this policy

We may update this policy from time to time. The current version is always on this page.