Legal
Privacy Policy
What we hold about you, why we hold it, who sees it and how to get it corrected.
Last updated 13 September 2026
Avion Care (ABN 00 000 000 000) handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Because we deliver disability supports, most of what we hold about participants is sensitive information, which carries a higher standard of protection.
What we collect
- Identity and contact details — name, date of birth, address, phone, email, and those of your nominated contacts.
- NDIS information — your participant number, plan dates, goals and funded supports.
- Health and support information — diagnoses, medications, risks, allied health reports and behaviour support plans, to the extent we need them to support you safely.
- Service records — shift notes, progress against goals, incidents and complaints.
- Financial information — invoices, claims and payment records.
- Website data — what you send us through the enquiry form, plus basic server logs.
Why we collect it
To deliver your supports, roster suitable workers, keep you and our staff safe, claim payment for services provided, and meet our obligations to the NDIS Commission and the NDIA. We do not use your information for marketing without your express consent, and we never sell it.
Who we share it with
- Support workers and coordinators assigned to you — only what they need for their role.
- Other providers, family or advocates you have authorised in writing.
- The NDIA and plan managers, for claiming and reporting.
- The NDIS Quality and Safeguards Commission, where we are required to report.
- Our service suppliers — rostering, records and email systems, bound by confidentiality.
- Where required or authorised by law, or where there is a serious and imminent threat to someone’s life, health or safety.
Where it is stored
Records are held in access-controlled systems hosted in Australia. Access is limited by role and reviewed regularly. Where a supplier stores data outside Australia we take reasonable steps to ensure comparable protection, and we will tell you if that applies to your records.
How long we keep it
Participant records are retained for at least seven years after our service ends, or until a young participant turns 25, whichever is later. Some records must be kept longer under NDIS or state law. After that they are securely destroyed or de-identified.
Your rights
- Access. You can ask for a copy of what we hold about you. We respond within 30 days and do not charge for a straightforward request.
- Correction. If something is wrong, tell us and we will fix it. If we disagree, you can have a statement of your view attached to the record.
- Complaint. Contact us first if you can. If you are not satisfied, the Office of the Australian Information Commissioner can investigate — oaic.gov.au or 1300 363 992.
- Withdraw consent. Where we rely on your consent, you can withdraw it at any time. That may affect what support we can safely deliver, and we will explain how before you decide.
This website
Our enquiry form is delivered by a third-party form service; what you submit passes through their systems before reaching our inbox. We do not run advertising or analytics trackers on this site, and we do not set cookies for tracking. Fonts are served by Google Fonts, which receives your IP address as part of that request.
Data breaches
If a breach is likely to cause you serious harm, we will notify you and the Information Commissioner as required by the Notifiable Data Breaches scheme.
Contact
Privacy enquiries: hello@avioncare.com.au or 1300 000 000.
This policy is a template prepared for the Avion Care website and should be reviewed by the organisation’s own legal adviser before go-live.