PrivacyPolicy
Last updated: July 2026
Your privacy matters to us — especially given the nature of the information involved in delivering NDIS supports. This policy explains what we collect, why, and how it's protected.
1. Who we are
Western Sydney Services ("WSS", "we", "us", "our") is a registered NDIS provider delivering disability supports across Western Sydney. This policy explains how we collect, use, store, and protect personal information — including the sensitive health and disability information necessary to deliver NDIS supports — in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information we collect
Depending on how you interact with us, we may collect:
- Contact details — name, phone number, email address, postal address
- Enquiry and referral details — the service you're enquiring about, funding arrangements, and any information you or your referrer provide
- Sensitive information — health information, disability information, NDIS plan details, and support needs, collected only where necessary to assess or deliver supports, and only with your consent or as otherwise permitted by law
- Website usage information — pages visited, general location, and device/browser information via analytics tools
3. How we collect your information
We collect information directly from you — through our website's enquiry and contact forms, over the phone, or in person — and, where relevant, from support coordinators, plan managers, hospitals, allied health professionals, or other parties you've authorised to share information with us on your behalf. We do not collect sensitive information about you from a third party without your consent unless required or authorised by law.
4. Why we collect and use your information
We use personal information to:
- Respond to enquiries and assess suitability for our services
- Plan, coordinate, and deliver NDIS supports to participants
- Meet our obligations as an NDIS registered provider, including reporting to the NDIS Quality and Safeguards Commission and the NDIA
- Improve our services and website
- Communicate with you about services you've enquired about or received
5. Who we may share your information with
We only share personal information where necessary to deliver your supports, where you've consented, or where required by law. This may include:
- Support workers and staff directly involved in delivering your supports
- Your support coordinator, plan manager, or other professionals you've authorised
- The NDIA and the NDIS Quality and Safeguards Commission, as required by our registration obligations
- Emergency services, where necessary to protect health or safety
- IT and service providers who help us operate securely, bound by confidentiality obligations
6. Data storage and security
We store personal information securely, using a combination of physical and electronic safeguards, and restrict access to staff who need it to perform their role. We retain personal information only for as long as necessary to fulfil the purposes it was collected for, or as required by NDIS record-keeping obligations and Australian law.
7. Website data and cookies
Our website uses analytics tools (such as Google Analytics) to understand how visitors use the site, so we can improve it. This collects general, non-identifying information such as pages visited and approximate location — we do not collect sensitive personal information through website cookies.
8. Access and correction
You have the right to request access to the personal information we hold about you, and to request correction if it's inaccurate, out of date, or incomplete. To make a request, contact our Privacy Officer using the details below — we'll respond within a reasonable timeframe.
9. Complaints
If you have a concern about how we've handled your personal information, please contact us first — we take privacy concerns seriously and aim to resolve them promptly. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or with the NDIS Quality and Safeguards Commission at ndiscommission.gov.au.
10. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal obligations. The "last updated" date at the top of this page reflects the most recent revision.
11. Contact us
For any privacy-related questions or requests, contact our Privacy Officer at admin@westernsydneyservices.com.au or 02 8722 0799.