Privacy Policy

We collect personal and sensitive health information necessary to provide tailored NDIS support services, including your name, contact details, emergency contacts, NDIS participant number, plan goals, support needs, and relevant health records.

Information is collected directly from you, your authorised representative, nominee, or support coordinator with your explicit consent.

We only collect information that is reasonably necessary for our core functions and compliance activities as a registered NDIS provider.

Collection methods include website intake forms, support consultations, service agreements, and routine service delivery documentation.

Personal information is used to assess support needs, roster qualified support workers, and deliver personalised disability services.

We use records for service coordination, progress tracking, quality improvement, and required billing through the NDIS portal or Plan Managers.

Information may be used for required administrative reporting to the NDIS Quality and Safeguards Commission and NDIA.

We do not sell, rent, or trade your personal information to third parties for marketing purposes under any circumstances.

We do not disclose your personal information to external organisations without your prior written or verbal consent, except where required or permitted by Australian law.

Information may be shared with your authorised support coordinator, plan manager, healthcare practitioners, or emergency services where necessary for your safety.

Third-party software providers (such as encrypted CRM, rostering, and accounting systems) operate under binding confidentiality and Australian Privacy Principle agreements.

We implement robust technical, physical, and procedural security measures to protect your data from misuse, interference, loss, unauthorized access, and disclosure.

All digital client records are stored on encrypted Australian servers with strict role-based access permissions and multi-factor authentication.

Physical records are retained in secure, locked office facilities at our Truganina operations base with restricted staff access.

Regular security audits and staff training in privacy compliance are conducted throughout the year.

You have the legal right to access the personal and health information Bridgeway Care holds about you, subject to limited exceptions outlined in the Privacy Act.

If you believe any information we hold is inaccurate, outdated, or incomplete, you may request an immediate correction at no cost.

We respond to all access and correction requests in writing within 30 days.

Requests should be directed to our Privacy Officer via email at contact@bridgewaycare.com.au.

In accordance with NDIS Quality and Safeguards Commission guidelines, support and incident records are retained for a minimum of 7 years from creation (or longer if relating to a minor).

When personal records reach the end of their mandatory retention schedule, they are securely destroyed or permanently de-identified.

Backup archives are purged in accordance with our secure data disposal policy.