ACCESS ABILITY — PRIVACY POLICY

Last updated: [insert date]

---

1. Purpose

This Privacy Policy explains how Access Ability (“we”, “us”, “our”) collects, uses, stores, and protects your personal and health information when you visit our website, contact us, or receive our services.

We are committed to safeguarding your privacy and complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

---

2. Information We Collect

We may collect the following types of information:

• Personal details: name, address, email, phone number
• Health information: medical history, injury details, exercise goals, referral notes
• NDIS information: participant number, plan details, funding status
• Payment information: billing details, invoices, transaction records
• Website data: cookies, analytics, and form submissions


All health and personal information is collected directly from you or your authorised representative.

---

3. How We Use Your Information

Your information is used to:

• Deliver exercise physiology and physiotherapy services
• Conduct assessments and develop personalised programs
• Communicate with you and manage bookings
• Process payments and NDIS claims
• Comply with legal and professional obligations
• Improve our website and service quality


We do not sell, rent, or trade your information.

---

4. Storage & Security

We store information securely using encrypted systems and password‑protected databases.
Access is restricted to authorised staff only.

If information is stored electronically, it is protected by secure servers located in Australia.
Paper records are kept in locked facilities.

---

5. Disclosure to Third Parties

We may share information only when necessary to deliver services or comply with law, including:

• NDIS plan managers or support coordinators
• Referring clinicians (GPs, specialists, allied health providers)
• Payment processors or accounting systems
• Regulatory authorities when required by law


All third parties are required to handle your information in accordance with privacy standards.

---

6. Access & Correction

You may request access to your personal or health information at any time.
If you believe information is inaccurate or incomplete, you may request correction.

Requests can be made via email to info@accessability.com.au.
We will respond within 30 days.

---

7. Data Retention

We retain records for the period required by law and professional standards (typically 7 years).
After that, data is securely destroyed or anonymised.

---

8. Cookies & Website Analytics

Our website may use cookies and analytics tools to improve user experience.
You can disable cookies in your browser settings.
No personally identifiable information is collected for marketing without consent.

---

9. International Disclosure

We do not routinely disclose information overseas.
If required (e.g., cloud storage), we ensure providers comply with Australian privacy standards.

---

10. Complaints

If you believe your privacy has been breached, contact us at admin@accessability.com.au.
We will investigate and respond promptly.
If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).

---

11. Updates to This Policy

We may update this Privacy Policy periodically.
The latest version will always be available on our website.

---

12. Contact

Access Ability
Email: admin@accessability.com.au