Legal
Privacy Policy
What personal information we collect, why we collect it, who we share it with and how you can access or correct it.
Last updated 1 September 2026
BrightPath Supports collects personal information in order to provide disability support services. This policy explains what we collect, why, who we share it with and what you can do about it. It is written to be read rather than to be defensible, so if anything here is unclear, please ask.
We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the NDIS Practice Standards.
What we collect
The information we collect depends on your relationship with us.
| If you are | We typically collect | Why |
|---|---|---|
| A participant | Name, contact details, date of birth, NDIS number, plan details, health and support needs, emergency contacts | To deliver and bill for your supports safely |
| A family member or guardian | Name, contact details, relationship and decision-making authority | To communicate with you lawfully about a participant |
| A referrer | Name, organisation, contact details | To process and acknowledge a referral |
| A job applicant | Name, contact details, work history, qualifications, screening check results | To assess your application and meet our legal obligations |
| A website visitor | Anything you type into a form | To respond to your enquiry |
Sensitive information
Health information and disability-related information are "sensitive information" under the Privacy Act and carry stronger protections. We collect them only where necessary to deliver your supports safely, and only with your consent or where the law requires it.
How we use your information
- To deliver the supports set out in your service agreement
- To roster and match workers appropriately
- To claim payment through the NDIS or from your plan manager
- To meet our reporting obligations to the NDIS Commission
- To investigate incidents, complaints and feedback
- To improve our services, using de-identified information
We do not sell personal information, and we do not use it for marketing without your express consent.
Who we share it with
We share personal information only where it is necessary, and only the minimum required:
- Support workers — the information they need to support you safely
- The NDIA and plan managers — for claiming and plan administration
- Health professionals — where you have consented, or in an emergency
- The NDIS Quality and Safeguards Commission — where reporting is required by law
- Our service providers — rostering, accounting and IT systems, under written agreements
We do not disclose personal information overseas. Our systems and data are hosted in Australia.
Keeping information secure
Records are held in access-controlled systems with multi-factor authentication. Access is limited to staff whose role requires it. Paper records, where they exist, are stored in locked cabinets at our Parramatta office. Staff complete privacy training during induction and annually thereafter.
How long we keep it
Participant records are retained for seven years after supports end, or until a participant who was a child turns 25, whichever is later, as required by NDIS record-keeping rules. Unsuccessful job applications are destroyed after twelve months. Website enquiries that do not proceed are deleted after two years.
Accessing and correcting your information
You can ask to see any personal information we hold about you, and ask us to correct it if it is wrong. Email hello@brightpathsupports.com.au or ring 1300 555 018.
We will respond within 30 days. There is no charge for making a request. In rare cases we may need to refuse access — for example where it would unreasonably affect another person's privacy — and if so we will explain why in writing.
Cookies and analytics
This prototype does not set cookies, run analytics or use tracking pixels. A live deployment would require its own cookie notice, and any non-essential cookies would be off by default until you chose otherwise.
Complaints
If you think we have mishandled your personal information, tell us first — email hello@brightpathsupports.com.au and we will acknowledge within two business days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. You are entitled to go to them directly and we will not discourage it.
Demo content
This policy is illustrative content written to demonstrate the theme's long-form typography. It is not legal advice and should not be used as a real privacy policy without review by a qualified adviser.
Ready to talk about your support?
Tell us a little about what you need and we will call you back within one business day. No obligation, no pressure, and nothing locked in until you are ready.