Privacy Policy

1. Introduction Tree of Goals ("we," "our," "us") is committed to safeguarding the privacy, dignity, and rights of participants, their families, and staff by handling all personal information with the utmost care and confidentiality. This policy outlines how we collect, store, use, and protect personal information in compliance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the NDIS Code of Conduct.

2. Collection of Personal Information We collect personal information from potential NDIS participants and future staff members for the purpose of providing services, recruitment, and business operations. This includes:

• Personal and contact details

• Health and support needs

• Employment and qualification details

• Any other information required to deliver our services effectively

  
  

3. Use of Personal Information Your information will be used for the following purposes:

• Assessing eligibility for NDIS services

• Contacting potential participants regarding our services

• Processing job applications and recruitment

• Compliance with NDIS regulations and requirements

• Ensuring participant safety and wellbeing

• Improving our services and website experience

4. Consent and Access to Information

• We obtain written consent from participants, their guardians, or representatives before collecting and using personal information.

• Participants are informed of how their information is stored, used, and when and how they can access, correct, or withdraw their information.

• Participants can withdraw their consent at any time, except where disclosure is required by law.

5. Storage and Security We take reasonable steps to protect personal information by:

• Storing electronic records in a secure, password-protected database with restricted access.

• Keeping physical records in locked filing cabinets accessible only to authorised personnel.

• Regularly reviewing and updating security measures to prevent data breaches.

6. Disclosure of Personal Information

• We obtain participant consent before sharing information with third parties, except when legally required.

• Participants are informed in advance when their information is disclosed.

• Disclosure is limited to necessary information only.

7. Confidentiality Obligations for Staff

• All staff receive training on privacy laws, policies, and best practices.

• Staff are prohibited from sharing participant information without proper authorisation.

8. Handling Data Breaches and Complaints

• Any privacy breaches must be reported to management immediately.

• Affected participants and the NDIS Commission are notified within 24 hours of a breach.

• Privacy complaints are investigated promptly, and resolutions are provided to participants.

9. Use of Images and Recordings

• We seek participant consent before taking or using photographs or videos.

• Images are used appropriately and with cultural sensitivity.

• Recorded materials are securely stored and managed in accordance with privacy standards.

10. Participant Rights Participants have the right to:

• Access their personal information upon request.

• Correct inaccurate or outdated information.

• Withdraw consent for data collection and sharing.

• Lodge complaints regarding data privacy concerns.

11. Monitoring and Review

• We provide ongoing training to staff on privacy and confidentiality responsibilities.

• Participants are regularly reminded of their privacy rights and available options for managing personal information.

• This policy is reviewed periodically to ensure compliance with regulations.

12. Contact Information If you have any questions about this Privacy Policy or wish to access, correct, or withdraw your information, please contact us at:

Admin@treeofgoals.com.au or visit us shop 22, 14 Brooks Street Macquaire Fields