Supporting Communities Australia Pty Ltd (SCA) is a registered NDIS provider working with young people aged 12 to 20 across Western and South West Sydney. Your privacy matters to us. This policy explains, in plain language, what personal information we collect, why we collect it, how we look after it, and the rights you have over it.

Everything we do is aligned with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and our obligations as a registered provider under the NDIS Quality and Safeguards Commission.

What we collect

We only collect information we actually need. Depending on how you interact with us, that may include:

Contact details: name, phone, email, suburb
Referral information about a young person, their family, and their supports
NDIS plan details and funding categories where relevant
Health, disability, cultural, and language information needed to deliver services safely
Session notes, progress updates, and goal tracking during service delivery
Referrer or professional context (support coordinators, DCJ caseworkers, schools)
Basic technical data from our website (see the Cookies section below)

Why we collect it

We use personal information to:

Respond to enquiries and referrals through our contact and referral forms
Deliver mentoring, behaviour support, and capacity building to the young person
Communicate with the young person, their family, and their care team
Meet our NDIS reporting, safeguarding, and record keeping obligations
Improve how our services work over time
Send our emails and free resources, only if you ask for them

We never sell personal information. We do not use it for third-party marketing.

Our emails

If you request a free resource, subscribe to our emails, or tick the optional box on our contact or referral form, we add your name, email address, mobile number, and role (for example parent or support coordinator) to our email list, so we can send you relevant information. We use MailerLite to send these emails, so these details are stored on MailerLite's servers, which may be outside Australia. Referral details, information about a young person, and anything else you write in our forms are never added to our email list. Every email has an unsubscribe link, and you can also ask us to remove you at any time.

How we store it

Client records are held in secure, access-controlled systems hosted in Australia. Forms you send through this website (referrals and enquiries) are first received by our website host, Netlify, whose servers may be outside Australia, and are then moved into our client records. Files are encrypted in transit and at rest. Only staff with a direct role in a young person's service or in running the organisation have access, and access is logged. Any paper records are kept in locked premises. We retain records for the period required by NDIS Practice Standards and Australian law, generally a minimum of seven years after the end of service.

Who we share it with

We only share information outside SCA when we have your consent, or when we are required to. In practice, that means:

Members of the young person's care team, with consent (support coordinators, LACs, OTs, schools, DCJ where relevant)
Contractors and mentors bound by written confidentiality agreements
The NDIS Quality and Safeguards Commission, where required by law or under a notifiable incident
Authorities where we have a legal obligation to report, including NSW mandatory reporting for child safety

Your rights

Under the Australian Privacy Principles you can:

Ask us what personal information we hold about you
Request a copy of that information
Ask us to correct anything that is wrong or out of date
Withdraw consent for us to share your information, subject to any legal limits
Make a privacy complaint to us, or to the Office of the Australian Information Commissioner at oaic.gov.au

Cookies and website analytics

Our website uses a small number of essential settings stored in your browser to keep the site working and to remember your accessibility and cookie choices. Analytics, advertising and CRM tools (Google Analytics, Metricool, the Meta Pixel and HubSpot) only load if you choose "Accept" in our cookie banner. You can change your choice at any time through the "Cookie settings" link in the footer.

If you accept, Google Analytics and Metricool help us understand which pages are useful, and the Meta Pixel helps us measure whether our Facebook and Instagram ads lead to enquiries. They record things like the pages visited and whether a form was sent. They never receive what you type into our forms, and we do not use them to build advertising profiles of young people or their families.

HubSpot is the system we use to keep track of our professional contacts and enquiries. If you accept, it records which pages you visit so that, if you later contact us, we can see what information you were looking at. HubSpot stores data on servers that may be outside Australia. It does not receive the details you type into our referral or contact forms.

If you accept, your browser also remembers how you first found us (for example a Google search or a link from another website) and the first page you landed on, for up to 90 days. This stays in your browser and is only shared with us if you send a referral or contact form. It is never sent to Google, Meta or our email list. Choosing "Decline" deletes it.

Contact us about privacy

If you want to access or correct your information, ask us a question, or raise a privacy concern, please get in touch. We treat every privacy enquiry seriously and confidentially.

Email: info@supportingcommunitiesaustralia.com
Phone: 0480 800 521
Post: Supporting Communities Australia Pty Ltd, Western Sydney NSW

If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner, or lodge a complaint about our practice through the Complaints and Feedback process.

This policy is reviewed each year and whenever our practices change.

Privacy Policy