Privacy Policy

1. The short version

When you send us an enquiry, referral or job application, you're trusting us with real information about real people — often at a vulnerable moment. We take that seriously. This policy explains what we collect, why, and the careful way we handle it.

The even shorter version: we only collect what we need to match the right support, we keep it secure, we never sell it, and we don't share it beyond the people who genuinely need it to do their job. When you enquire, we also add your email to our mailing list — which you can unsubscribe from at any time.

2. Who we are

NND Supports (ABN 89 693 568 811) is an NDIS registered provider (Registration ID 4-LR942N5) based in the NSW Hunter and Central Coast. You can reach us at admin@nndsupports.com or (02) 4003 7505.

3. What we collect

Through our referral and enquiry forms, we collect a fuller picture than a name and a phone number: the participant's name and contact details; NDIS information like their NDIS number, plan dates, funding arrangements and plan manager details; their disability, support needs, interests, goals and communication needs; their living situation and care requirements; and safety and health information, including risk details and any information about behaviours of concern.

We also collect details of the people around them — parents, carers, support coordinators, house managers, other key contacts, and any linked health or allied health professionals involved in their care — along with any documents you upload, like an NDIS plan or a Behaviour Support Plan (BSP), which are stored in private, permission-controlled storage. All of it helps us make a good, safe match.

A lot of this is what privacy law calls 'sensitive information' — health and disability details in particular. We only collect it because you choose to share it, and we use it for one purpose: setting up and delivering safe, well-matched supports.

Through our recruitment forms: your name and contact details, work history and experience, availability, and any paperwork or checks you upload so we can work out whether a role is right for you.

If you just browse the site, we don't collect personal information about you at all.

4. Why we collect it

To respond to your enquiry (we aim for within 2 business hours), to match participants with the right support workers, to set up and deliver supports safely, and to meet our obligations as a registered NDIS provider.

For job applications: to assess your fit for roles, carry out the required screening, and set up your employment if you join us.

5. When we share it

Only where it's needed — and usually with your knowledge. That might mean the matched support worker knowing a participant's support needs, a plan manager receiving the right billing details, or a referee being contacted about your application.

We never sell or trade your information. We only disclose it where we're required to by law — for example, our obligations under the NDIS and Australian privacy law — or where there's a serious safety concern that we're legally or ethically required to act on.

6. How we keep it safe

Your information is stored on secure systems with access limited to the small team that needs it. We use private, permission-controlled storage for anything sensitive, like uploaded plans or screening documents.

No system is perfect, but we treat the protection of participant and worker information as core business — not an IT afterthought. If a data breach ever occurs that's likely to cause serious harm, we'll notify affected people as quickly as we can, as the law requires.

7. How long we keep it

We keep personal information only as long as we have a genuine reason to — while we're supporting a participant, while you work with us, or as long as record-keeping laws require. As a registered NDIS provider and an employer we have legal record-keeping obligations (including around screening, compliance and employment records), and we retain what those obligations require. Once there's no longer a reason to keep something, we securely destroy or de-identify it.

Enquiries are no exception: if you get in touch, we keep a record of your enquiry even if it doesn't turn into anything. It forms part of our business records, lets us pick up where we left off if you come back to us, and is stored and accessed under the same strict controls as everything else.

8. Our mailing list

When you send us an enquiry, referral or job application, we add the email address you gave us to our mailing list, so we can send you occasional updates — service news, team changes and opportunities we think you'll genuinely want to know about.

Every email we send identifies who it's from, includes our contact details, and carries a working unsubscribe link. You can opt out at any time — through that link or just by asking us — and we'll honour your request promptly, and in any event within five business days, as the Spam Act 2003 (Cth) requires. You can also ask us to access, correct or delete the details behind your subscription at any time.

We never pass your email address to third parties for their marketing, and we don't send commercial messages to anyone who hasn't dealt with us or asked to hear from us.

9. Your choices and rights

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it — just email admin@nndsupports.com or call (02) 4003 7505 and a real person will sort it out, usually within a few business days.

You can also ask us to stop using your information for a particular purpose — including unsubscribing you from our mailing list. We'll say yes wherever we practically can.

10. Cookies and analytics

Like most websites, we use basic analytics to understand which pages are helpful and which need work. It's aggregate, anonymous data — not a profile of you. We don't use advertising trackers.

11. Other websites

We sometimes link to other sites — like the NDIS or our sister company, Nourished Not Deprived. This policy applies only to our site; other sites have their own rules, so it's worth a quick look if you're unsure.

12. Changes to this policy

We may update this policy from time to time. The current version always lives on this page with its update date at the top, and significant changes will be flagged on our site.

13. Governing law

This policy is governed by the laws of New South Wales, Australia, and is consistent with the Australian Privacy Principles under the Privacy Act 1988 (Cth).