Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how daar Care Pty Ltd (ACN 620 363 466), trading as daar ("daar", "we", "us"), collects, holds, uses and discloses personal information. daar is an allied health and wellness provider and a registered NDIS provider supporting children and adults. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy covers our website at daar.com.au and the personal information we handle when you enquire about or receive our services. If you are an NDIS participant, our NDIS Privacy Policy also applies and explains the additional obligations we meet under the National Disability Insurance Scheme Act 2013 (Cth).

1. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not it is true and whether or not it is recorded in a material form. Some personal information — including health information — is "sensitive information" and is given a higher level of protection under the APPs.

2. What we collect

Depending on how you interact with us, we may collect:

• identity and contact details — name, date of birth, phone number, email and address;
• details of the person you are enquiring for and your relationship to them (for example, as a parent, guardian, carer, GP or support coordinator);
• health information — such as referrals, reports, assessments, diagnoses and clinical records relating to the services we provide. This is sensitive information and we collect it only with consent or as otherwise permitted by law;
• NDIS details — such as your NDIS number, plan information and plan management arrangements;
• billing and payment details needed to invoice you, your plan manager or the National Disability Insurance Agency (NDIA); and
• website and communication data — such as form submissions, call and email records, and cookie and analytics data described in section 9.

3. How we collect it

We collect personal information:

• directly from you — through forms and bookings on our website, by phone, email, SMS or in person at our clinics;
• from people involved in your care with your consent — such as GPs, specialists, schools, support coordinators and plan managers;
• through our practice-management, scheduling and customer-relationship systems; and
• automatically when you use our website, through cookies and analytics tools (section 9).

4. Why we collect and use it

We collect, hold and use personal information to:

• respond to enquiries and manage referrals, bookings and waitlists;
• provide allied health services and coordinate care within your treating team;
• invoice and receive payment, including claims to the NDIA or your plan manager;
• meet our legal, professional and NDIS Practice Standards obligations, including quality and safeguarding requirements;
• improve our services and website; and
• send service communications, and marketing communications as described in section 5.

5. Direct marketing

We may send you updates about daar services, programs and resources where you have asked us to or would reasonably expect us to, and you can opt out at any time using the unsubscribe link in the message or by contacting us. We do not use sensitive information (including health information) for marketing, and we do not sell personal information.

6. When we disclose personal information

We disclose personal information only as needed to deliver and administer our services, including to:

• members of your treating team at daar, and external providers involved in your care with your consent;
• the NDIA, your plan manager or support coordinator, where required to deliver or bill NDIS supports;
• trusted service providers who support our operations — such as practice management, scheduling, communications, IT and payment platforms — under obligations of confidentiality; and
• courts, regulators or others where disclosure is required or authorised by law, or necessary to lessen or prevent a serious threat to life, health or safety.

7. Overseas handling of information

Some of daar's administrative and support functions are performed by authorised daar team members located overseas, including in the Philippines. Where personal information is accessed from overseas, access is limited to what each role requires, and our team members are bound by confidentiality obligations and daar's privacy and security controls. Some of the technology platforms we use may also store information on secure servers located outside Australia. In all cases we take reasonable steps, consistent with APP 8, to ensure your information is handled in line with the Australian Privacy Principles.

8. Security and retention

We protect personal information with access controls, user authentication, encryption in transit and staff confidentiality obligations, and we review access regularly. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information from misuse, interference, loss and unauthorised access, modification or disclosure.

We keep health records for as long as the law requires — generally at least 7 years from the last entry and, for clients who were under 18, until they turn 25 — after which records are securely destroyed or de-identified.

9. Cookies and analytics

Our website uses cookies and similar technologies, including analytics and marketing tools such as Google Analytics and HubSpot, to understand how the site is used and to improve it. Cookies generally do not identify you personally. You can manage or disable cookies in your browser settings, and manage optional cookies through the cookie banner on our site.

10. Access and correction

You may request access to the personal information we hold about you, and ask us to correct information that is inaccurate, out of date or incomplete (APPs 12 and 13). Contact us using the details below; we will respond within a reasonable period, usually 30 days. In limited circumstances the law allows us to refuse access, and if so we will tell you why in writing.

11. Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details below. We will acknowledge your complaint, investigate it and respond, usually within 30 days. If you are not satisfied with our response, you can contact:

• the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au, 1300 363 992; or
• for NDIS-related concerns, the NDIS Quality and Safeguards Commission — ndiscommission.gov.au, 1800 035 544.

12. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page with its "last updated" date.

13. Contact us

daar Care Pty Ltd (ACN 620 363 466)
Canterbury Clinic — Shop 1/364 Canterbury Road, Canterbury NSW 2193
Liverpool Clinic — 167 Northumberland Street, Liverpool NSW 2170
Phone: (02) 9133 2500
Email: info@daar.com.au