Privacy Policy

Effective Date: May 27, 2026
Last Updated: May 27, 2026

At Beacon Bliss, we are committed to protecting the privacy, dignity, and confidentiality of our participants, their families, carers, and our staff. As an NDIS provider operating in New South Wales, we manage personal and sensitive information in strict accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Health Records and Information Privacy Act 2002 (NSW), and the requirements of the NDIS Quality and Safeguards Commission.

The Information We Collect

To provide safe, high-quality disability support and services, we must collect relevant personal and sensitive information.

Personal Information

Name, date of birth, gender, and contact details (address, phone number, email).
NDIS Participant Number and details of your current NDIS plan, goals, and budget.
Contact information for your family, carers, nominees, or legal guardians.
Billing and financial information (such as bank details for plan management or invoicing).

Sensitive and Health Information

Because of the nature of NDIS supports, we collect sensitive data only with your explicit consent (or the consent of your authorised representative). This includes:

Details about your disability, medical history, and health conditions.
Assessments, support plans, progress notes, and medication requirements.
Feedback, incident reports, or complaints you or others may lodge.

How We Collect Your Information

We will always try to collect information directly from you wherever practical. This occurs during your intake process, service agreement signing, phone calls, emails, or through forms filled out on our website.

We may also collect information from third parties with your consent, such as:

The National Disability Insurance Agency (NDIA) or the NDIS myplace portal.
Your Support Coordinator, Plan Manager, or Local Area Coordinator (LAC).
Your doctors, therapists, or previous service providers.

How We Use Your Information

Beacon Bliss collects and uses your information primarily to deliver individualized support and meet our legal obligations. This includes:

Assessing your needs and delivering the services outlined in your Service Agreement.
Developing, monitoring, and reviewing your individualized support plans.
Managing billing, processing claims via the NDIS portal, and general administration.
Meeting safety, risk-management, and quality auditing requirements.

When We Disclose Your Information

We do not sell or rent your information. We will only share your personal or sensitive health data with third parties in the following circumstances:

With Your Consent: Sharing details with other members of your care team (e.g., therapists, doctors, or new service providers) as agreed upon by you.
NDIS Compliance: Disclosing information to the NDIA, the NDIS Quality and Safeguards Commission, or approved quality auditors to satisfy regulatory rules.
Emergency or Duty of Care: If we reasonably believe that disclosing the information is necessary to prevent or lessen a serious and imminent threat to your life, health, or safety, or the safety of the public.
Legal Obligation: Where required or authorized by Australian or NSW legislation (e.g., mandatory reporting).

Data Security and Storage

We take data protection very seriously. Your information is stored securely in a combination of secure electronic cloud databases (with restricted role-based access controls) and, where applicable, locked physical filing systems.

All staff are bound by strict confidentiality agreements and receive privacy training.
We retain records for the timeframes legally required by NDIS and NSW health regulations. When information is no longer required, it is destroyed or permanently de-identified securely.

Accessing and Correcting Your Information

You have the right to request access to the personal and health information Beacon Bliss holds about you. You can also ask us to correct or update information that is inaccurate, out of date, or incomplete.

To make a request, please contact our Privacy Officer using the details below. We will respond to your request within a reasonable timeframe (usually within 30 days).

Anonymity and Pseudonymity

Where lawful and practical, you have the option of dealing with us anonymously or using a pseudonym (for example, when making a general enquiry or providing anonymous feedback). However, to enter into a Service Agreement and deliver NDIS services, we must verify your true identity and NDIS details.

Privacy Complaints and Feedback

If you have any questions, concerns, or wish to make a complaint about how we handle your privacy, please contact us directly:

We take privacy breaches very seriously and will investigate your complaint promptly. If you are not satisfied with our response, you can escalate your complaint to:

The Office of the Australian Information Commissioner (OAIC): Visit www.oaic.gov.au or call 1300 363 992.
The NDIS Quality and Safeguards Commission: Visit www.ndiscommission.gov.au or call 1800 035 544.