NDIS Privacy Policy

Last updated: 19 October 2026

daar Care Pty Ltd (ACN 620 363 466), trading as daar ("daar", "we", "us"), is an allied health and wellness provider and a registered NDIS provider supporting children and adults. This NDIS Privacy Policy explains the additional obligations we meet when we handle the personal information of NDIS participants and their families, carers, guardians and nominees.

This policy supplements our main Privacy Policy, which describes how we collect, hold, use and disclose personal information generally, including through our website. Please read the two together — where something here is more specific to your NDIS supports, this policy applies.

1. The laws that protect NDIS participants

In handling participant information we comply with:

• the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), which govern how personal and health information is collected, used, disclosed and stored;
• the National Disability Insurance Scheme Act 2013 (Cth), whose confidentiality provisions limit how information connected with the NDIS may be collected and used, and when and to whom it may be disclosed;
• the NDIS Code of Conduct, which requires us to respect the privacy of people with disability; and
• the NDIS Practice Standards, including the Privacy and Dignity standard, which require us to explain these protections to each participant and seek consent before collecting their information.

2. Participant information we collect

We collect only the information reasonably necessary to deliver your supports and meet our obligations as an NDIS provider. Depending on the services you receive, this may include:

• identity and contact details — your name, date of birth, address, phone number and email;
• your NDIS participant number, your NDIS plan (including goals, funded supports and budgets) and your plan management arrangements;
• health and disability information — referrals, reports, assessments, diagnoses and the clinical records we create while providing your supports;
• details of your support network — family members, carers, guardians, nominees, GPs, specialists, schools, support coordinators and plan managers, and their contact details; and
• billing information needed to claim from the National Disability Insurance Agency (NDIA), your plan manager or you.

Health and disability information is sensitive information under the Privacy Act, and we collect it only with consent or as otherwise permitted by law.

3. Consent

Before we collect participant information, we explain what we collect, why we need it and who we may share it with, and we ask for written consent — usually as part of your service agreement and intake forms. Where a participant is a child, or an adult with a guardian or nominee, we seek consent from the person legally able to give it, and we still involve the participant in decisions about their information as much as possible.

You may withdraw or limit your consent at any time by contacting us. If that affects the supports we can safely deliver, we will explain how before anything changes.

4. How we use and disclose participant information

We use and disclose participant information to:

• deliver your supports and coordinate your care within your treating team at daar;
• communicate, with your consent, with the other people involved in your supports — such as your family, carers, GP, school, support coordinator or plan manager;
• make payment claims to the NDIA, your plan manager or you;
• meet our registration obligations, including notifying the NDIS Quality and Safeguards Commission of reportable incidents and cooperating with its inquiries, audits and quality reviews; and
• meet other legal obligations, such as mandatory reporting and responding to courts or regulators where disclosure is required or authorised by law.

We may also use or disclose information without consent where this is necessary to lessen or prevent a serious threat to a person's life, health or safety. We do not sell participant information, and we do not use health or disability information for marketing.

5. Overseas handling of information

As explained in our main Privacy Policy, some of daar's administrative and support functions are performed by authorised daar team members located overseas, including in the Philippines. Where participant information is accessed from overseas, access is limited to what each role requires, our team members are bound by confidentiality obligations and daar's privacy and security controls, and we take reasonable steps, consistent with APP 8, to ensure the information is handled in line with the Australian Privacy Principles. Your supports are delivered, and clinical decisions are made, by your treating team in Australia.

6. Security and retention

We protect participant records with access controls, user authentication, encryption in transit and staff confidentiality obligations, and access is limited to team members who need the information for their role. We keep health records for as long as the law requires — generally at least 7 years from the last entry and, for clients who were under 18, until they turn 25 — after which records are securely destroyed or de-identified.

7. Access and correction

You may ask for access to the information we hold about you, and ask us to correct anything that is inaccurate, out of date or incomplete (APPs 12 and 13). Contact us using the details below; we will respond within a reasonable period, usually 30 days. If the law requires us to refuse access, we will tell you why in writing and how you can complain about that decision.

8. Complaints, feedback and advocates

If you have a concern about how we have handled your information, please contact us first using the details below. We will acknowledge your complaint, investigate it and respond, usually within 30 days. You are welcome to involve a family member, friend or independent advocate at any stage, and raising a concern will not affect your access to our services.

If you are not satisfied with our response, you can contact:

• the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au, 1300 363 992; or
• the NDIS Quality and Safeguards Commission — ndiscommission.gov.au, 1800 035 544.

9. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page with its "last updated" date.

10. Contact us

daar Care Pty Ltd (ACN 620 363 466)
Canterbury Clinic — Shop 1/364 Canterbury Road, Canterbury NSW 2193
Liverpool Clinic — 167 Northumberland Street, Liverpool NSW 2170
Phone: (02) 9133 2500
Email: info@daar.com.au