Privacy Policy

Last updated: July 18, 2026

1. About This Policy

Blue Choice Support (“we”, “us”, “our”) is committed to protecting the privacy of everyone we deal with participants, families, referrers, staff, and website visitors. This Policy explains what personal information we collect, why, how we use and protect it, and your rights regarding it.

This Policy is written to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth), and with our obligations as an NDIS provider under the NDIS Act 2013 (Cth), the NDIS Code of Conduct, and the NDIS Practice Standards.

2. Who We Are

Business name: Blue Choice Support
ABN: 45164816791
NDIS Registered Provider Number: ID 4-HDRRW5T
Privacy contact: Email: [email protected], Phone: 0485 021 986

Business name: Blue Choice Support
ABN: 45164816791
NDIS Registered Provider Number: ID 4-HDRRW5T
Privacy contact: Email: [email protected], Phone: 0485 021 986

3. What Personal Information We Collect

Depending on our relationship with you, we may collect:

  • Contact and identity details: Name, date of birth, address, phone number, and email address.
  • NDIS-related information: Your NDIS number, plan details, funding categories, goals, plan management arrangement, and details of your Support Coordinator or LAC.
  • Health and disability information: This is classified as sensitive information under the Privacy Act and includes details about your disability, support needs, medical history, behaviour support plans, and information from allied health or medical professionals, where relevant to the supports we provide.
  • Emergency contact and nominee/guardian details, where applicable.
  • Financial information: Limited to what’s needed for invoicing, such as bank details for payment or plan manager details.
  • Website usage information: Pages visited, general location (country/region), device and browser type, and similar analytics data, typically collected via cookies (see Section 11).
  • Enquiry and referral information: Anything you provide via our contact forms, phone calls, or referrals from third parties (e.g. LACs, support coordinators, hospitals).

We only collect sensitive information (like health information) with your consent, or as otherwise permitted or required by law — for example, where necessary to provide you with disability supports safely, or to meet our obligations under the NDIS Practice Standards.

4. How We Collect Your Information

We generally collect information directly from you — through service agreements, intake forms, phone calls, emails, or this Website. We may also collect information from:

  • Your NDIS Support Coordinator, LAC, or plan manager, with your consent;
  • The NDIA, where relevant to your plan and supports;
  • Other health professionals involved in your care, with your consent; or
  • Referral sources, such as hospitals, other providers, or family members making an enquiry on your behalf.

5. Why We Collect, Use, and Disclose Your Information

We use your information to:

  • Assess your support needs and prepare a Service Agreement;
  • Plan, deliver, and review the supports we provide to you;
  • Meet reporting, incident management, and record-keeping obligations under the NDIS Practice Standards and the NDIS Quality and Safeguards Commission;
  • Process invoices and payments, including through the NDIA’s payment systems or your plan manager;
  • Respond to enquiries, complaints, and feedback;
  • Maintain the safety and quality of our services, including managing incidents and complying with worker screening and reportable incident obligations; and
  • Send you service-related communications and, only with your consent, marketing or newsletter content (which you can opt out of at any time).

6. Who We Share Your Information With

We may disclose your personal information to:

  • The NDIA and NDIS Quality and Safeguards Commission, where required for plan management, quality reporting, or incident notification;
  • Your plan manager or Support Coordinator, consistent with your consent and plan arrangements;
  • Other health or allied health professionals involved in your care, with your consent;
  • Contracted service providers, such as IT hosting, software, or bookkeeping providers, who are bound by confidentiality obligations and only use your information to provide services to us;
  • Government agencies or regulators, where required or authorised by law; and
  • Emergency services, where necessary to protect your health or safety, or that of others.

We do not sell your personal information to third parties.

7. Overseas Disclosure

Some of the technology platforms and hosting services we use (for example, cloud-based practice management or website hosting tools) may store or process data on servers located outside Australia. Where this occurs, we take reasonable steps to ensure any overseas recipient handles your information consistently with the Australian Privacy Principles.

8. How We Store and Protect Your Information

We store personal information securely, using a combination of physical and electronic safeguards, including restricted access, secure systems, and staff training on confidentiality obligations under the NDIS Code of Conduct.

We retain records for as long as required to provide your supports and to meet our legal obligations, including NDIS record-keeping requirements (generally at least seven years, though some records for example, those involving a minor may need to be kept longer). After that, information is securely destroyed or de-identified.

If we experience a data breach that’s likely to result in serious harm, we’ll assess and respond in line with the Notifiable Data Breaches scheme, including notifying the Office of the Australian Information Commissioner (OAIC) and affected individuals as required, generally within 30 days of becoming aware of an eligible breach.

9. Accessing and Correcting Your Information

You have the right to request access to the personal information we hold about you, and to ask us to correct it if it’s inaccurate, out of date, or incomplete. To make a request, contact us at [email protected]. We’ll respond within a reasonable timeframe and won’t charge you for making a request (though reasonable costs may apply for providing access in some circumstances).

If we refuse a request for access or correction, we’ll explain why and let you know how you can complain about that decision.

10. Automated Decision-Making

We do not currently use automated decision-making that significantly affects you (for example, a computer program making decisions about your eligibility for supports without human involvement). If this changes, we’ll update this section to explain what personal information is used, the types of decisions involved, and how they’re made, consistent with obligations under the Privacy Act commencing 10 December 2026.

11. Cookies and Website Analytics

Our Website may use cookies and similar technologies to understand how visitors use the site and improve its performance. You can adjust your browser settings to refuse cookies, though some parts of the Website may not function properly as a result. We do not use cookies to collect sensitive information about you.

12. Children, Nominees, and Supported Decision-Making

Where a participant is a child, or has a nominee, guardian, or supporter involved in decision-making, we collect and handle information consistently with their legal authority to act on the participant’s behalf, and we support the participant’s own decision-making wherever possible, in line with the NDIS’s supported decision-making principles.

13. How to Make a Privacy Complaint

If you’re concerned about how we’ve handled your personal information, please contact us first:

Email: [email protected]
Phone: 0485 021 986

We’ll acknowledge your complaint and aim to resolve it within a reasonable time.

If you’re not satisfied with our response, you can also complain to:

Office of the Australian Information Commissioner (OAIC)
Phone: 1300 363 992 | Website: oaic.gov.au

NDIS Quality and Safeguards Commission (for complaints relating to NDIS supports)
Phone: 1800 035 544 (free call) | Website: ndiscommission.gov.au

You should also be aware that, since June 2025, Australian law includes a statutory tort allowing individuals to personally sue for a serious invasion of privacy, separate from making a complaint to the OAIC.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or legal obligations. The version published on this page is the current one, and we encourage you to review it periodically.

15. Contact Us

Blue Choice Support
Address: Shop 1, 301 Gardeners Rd, Rosebery 2018 NSW
Email: [email protected]
Phone: 0485 021 986
ABN: 45164816791