How The Right Place Disability Services handles your personal information

The Right Place Disability Services (“we”, “us”, “our”) is committed to protecting the privacy of individuals who interact with our organisation and website. This Privacy Policy explains how we collect, hold, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website at therightplace.com.au or submitting any form, you consent to the handling of your personal information as described in this policy.

1. What personal information we collect

We collect personal information that is reasonably necessary to provide disability support services, respond to enquiries, and assess employment applications. This may include:

• Full name, phone number, email address, and residential suburb
• Details about the nature of your support needs or a participant’s support needs (referrals)
• NDIS plan information provided voluntarily through our referral form
• Employment history, qualifications, and documents uploaded through our careers application form (including CV and supporting documents)
• Any other information you choose to include in a message or form submission

We do not collect sensitive information (such as health records or tax file numbers) except where it is directly provided by you for the purpose of arranging disability support services or assessing a job application, and only with your consent.

2. How we collect personal information

We collect personal information directly from you when you:

• Submit a contact enquiry, referral, or job application through our website
• Contact us by phone or email
• Interact with our team in person during a service engagement

We do not collect personal information from third parties without your knowledge, except where a care coordinator or support planner submits a referral on your behalf with your authorisation.

3. Why we collect and use your information

The primary purposes for which we collect personal information include:

• Responding to general enquiries about our services
• Reviewing and following up on participant referrals
• Assessing job applications and contacting shortlisted candidates
• Providing, managing, and improving our disability support services
• Complying with our legal obligations, including NDIS Practice Standards

We will not use your personal information for any purpose unrelated to the reason it was collected without your consent, except where permitted or required by law.

4. How we store and protect your information

Personal information submitted through our website is stored securely using the following infrastructure:

• Form submissions and enquiry data are stored in a secure, encrypted database hosted within Australia or in a jurisdiction with equivalent privacy protections.
• Uploaded documents (such as CVs and supporting documents) are stored in secure cloud storage with access restricted to authorised staff only. Documents are accessible only through time-limited, signed links.
• Email notifications are sent using a third-party transactional email provider. These transmissions use industry-standard TLS encryption.

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. However, no internet transmission is completely secure and we cannot guarantee absolute security.

Career application documents are automatically deleted after 60 days of submission, unless we are required to retain them for a longer period by law or for an ongoing recruitment process.

5. Disclosure of personal information

We do not sell, rent, or trade your personal information. We may disclose your information to:

• Our staff and authorised representatives who need it to deliver services or assess applications
• Third-party service providers who process data on our behalf (such as email and database providers), under confidentiality obligations
• Government agencies or regulators where required or authorised by law (e.g. NDIS Quality and Safeguards Commission)

We take reasonable steps to ensure any third-party providers comply with the Australian Privacy Principles.

6. Cookies and website analytics

Our website does not currently use tracking cookies or third-party analytics scripts that collect personal information. If this changes, this policy will be updated accordingly.

7. Access and correction

You have the right to request access to personal information we hold about you, and to ask us to correct information that is inaccurate, out of date, incomplete, or misleading. To make a request, contact us using the details below. We will respond within a reasonable timeframe (generally within 30 days).

In some circumstances, we may decline an access or correction request as permitted under the Privacy Act. If we do, we will give you written reasons.

8. Complaints

If you believe we have handled your personal information in a way that does not comply with the Australian Privacy Principles, you may make a complaint by contacting us directly. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available on this page, with the date of last update noted at the top.

10. Contact us

For any privacy-related enquiries, access requests, or complaints, please contact:

The Right Place Disability Services
65 Barmedman Avenue, Gobbagombalin NSW 2650
Phone: 02 5959 0116 / 0493 486 023
Email: info@therightplace.com.au