Privacy Policy
This policy explains how GOTLEHS CARE collects, holds, uses and discloses personal information, including the health information we need in order to deliver NDIS supports. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Last updated: September 2026 · GOTLEHS CARE, ABN 15 676 757 387, NDIS Provider Number 405 358 3296
1. Information we collect
We collect the information we need to deliver supports safely and to meet our obligations as a registered NDIS provider. Depending on your relationship with us, that may include:
Name, date of birth, address, phone number and email address.
NDIS participant number, plan details and plan management type.
Health information, including diagnoses, medications, allied health reports and behaviour support plans, where these are relevant to your supports.
Emergency contact, guardian, advocate and nominee details.
Records of the supports we deliver, including progress notes and incident reports.
For job applicants, the contents of your application, including your resume, work history and screening clearances.
2. How we collect it
Most information comes directly from you, in conversation, on our enquiry and referral forms, or in a service agreement.
We also receive information from third parties where you have consented to it or where the law allows: support coordinators, plan managers, family members and nominees, hospitals and treating practitioners, allied health providers, and the NDIA.
Our website collects limited technical information automatically. See our Cookie Policy for detail.
3. Why we use it
We use personal information to assess referrals, plan and deliver supports, roster and match workers, invoice for services, respond to enquiries and complaints, meet our reporting and record-keeping duties under the NDIS Act and the NDIS Practice Standards, and to improve our services.
We do not sell personal information, and we do not use it for marketing without your consent.
4. Who we disclose it to
We disclose personal information only where it is necessary and permitted. That may include your support workers, the NDIA and the NDIS Quality and Safeguards Commission, your plan manager or support coordinator, treating health practitioners, our insurers and professional advisers, and IT and payroll providers who host or process data on our behalf under contract.
We may also disclose information where there is a serious and imminent threat to a person’s life, health or safety, or where we are required to by law.
5. Storage and security
Records are stored electronically with access limited to staff who need them for their role, and in locked storage where physical documents are unavoidable. Workers are trained in privacy obligations and bound by confidentiality terms.
We keep participant records for the periods required by the NDIS Practice Standards and other applicable law, and destroy or de-identify them securely when they are no longer needed.
[NEEDS CLIENT INPUT: name of the client management system used, and whether any data is stored or processed outside Australia.]
6. Accessing and correcting your information
You can ask to see the personal information we hold about you, and ask us to correct anything inaccurate or out of date. Email info@gotlehscare.com.au or call 0425 799 687.
We will respond within 30 days. If we refuse access, we will explain why in writing and set out how to complain about that decision. There is no charge for making a request.
7. Complaints
If you believe we have mishandled your personal information, tell us and we will investigate. You can raise it with us on 0425 799 687 or at info@gotlehscare.com.au.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. Concerns about our conduct as an NDIS provider can also go to the NDIS Quality and Safeguards Commission at ndiscommission.gov.au.
8. Changes to this policy
We review this policy periodically and will publish any updated version on this page with a revised date.
This policy is a plain-English summary prepared for the website. It is not legal advice, and it should be reviewed by a legal adviser before launch.