Privacy Policy
Last Updated: September 2026
Bara Care Pty Ltd is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the NDIS Act 2013, and NDIS Practice Standards.
Information We Collect & Why
• Personal Information: Name, contact details, date of birth, and emergency contacts.
• Sensitive Information: Health/medical history, disability support needs, behaviour support plans, NDIS plan details, and incident records.
• How We Collect It: Directly from you, authorised representatives, health professionals, the NDIA, or through our website. You may use a pseudonym for general enquiries.
• Why We Collect It: To safely deliver NDIS supports (e.g., Supported Independent Living), manage risk, process billing, and meet strict NDIS compliance and incident reporting obligations.
• Consent: We obtain consent to collect, use, retain and disclose participant information where required. You may withdraw or amend your consent at any time, subject to legal and service requirements. An Easy Read summary is available on request.
Website, Cookies & Marketing
• Analytics & Advertising: We use cookies to improve our website and measure advertising (e.g., Google Analytics).
• Sensitive Data Protection: We strictly configure our website to prevent sensitive enquiry form data from being scraped by analytics or advertising platforms.
• Direct Marketing: We only send marketing with your consent (which you can opt out of anytime) and never use sensitive health data to target you.
Data Sharing & Storage
• How We Hold Information: We hold information in approved electronic and cloud-based systems and, where required, in securely stored physical records, with access limited to authorised personnel.
• Who We Share With: We never sell your data. We only disclose it to the NDIA, NDIS Commission, your authorised reps/allied health team (with consent), emergency services, and secure software providers.
• Overseas Storage: Some approved cloud/software services may store data securely outside Australia (e.g., the United States).
• Security & Retention: Data is protected via role-based access, encryption, and multi-factor authentication. We retain NDIS records for legally required periods (typically 7 years) before secure destruction.
• Data Breaches: If a data breach threatens serious harm, we will notify you and the OAIC in accordance with the Notifiable Data Breaches (NDB) scheme.
Use of Artificial Intelligence (AI) & Software
• Privacy First: We rigorously assess all software and AI tools for data security, retention, and training model policies before use.
• No Public AI: Staff are strictly prohibited from entering identifiable or sensitive participant data into public generative AI services without explicit approval and lawful basis.
• No Automated Decisions: We do not use AI to make automated decisions that significantly affect a participant's rights or interests.
• Human Oversight: AI-generated information (e.g., administrative summaries) is always human-reviewed before impacting participant care, safety, or service decisions.
Access, Correction & Complaints
You can access or correct your personal information at no charge. If you have a privacy complaint, we will investigate and aim to respond within 30 days. Unresolved complaints can be escalated to:
• NDIS Quality and Safeguards Commission: 1800 035 544
• Office of the Australian Information Commissioner (OAIC): 1300 363 992
Contact Us
Bara Care Pty Ltd
Northlakes QLD
Phone: 1300 207 184
Email: admin@baracare.com.au
