Get In Touch

Privacy Policy

Last updated: 8/16/2026

Ableza (trading name of Oz Disability Care Pty Ltd, ABN 54 661 022 751, ACN 661 022 751) (“Ableza”, “we”, “us”, “our”) is committed to protecting your privacy and handling your personal information responsibly, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains how we collect, use, store, and disclose personal information, including sensitive and health information, when you interact with us, our website (ableza.com.au), or our services as a registered NDIS provider.

By using our website or engaging our services, you agree to the practices described in this policy.

1. Who This Policy Applies To

This policy applies to:

  • NDIS participants and prospective participants
  • Family members, carers, and advocates
  • Professional referrers (support coordinators, allied health professionals, hospitals, and other providers)
  • Job applicants and expressions of interest
  • Website visitors

2. What Personal Information We Collect

Depending on how you interact with us, we may collect:

General contact information Name, phone number, email address, postal address.

Referral and participant information Date of birth, NDIS participant number (optional), NDIS plan management type (self-managed, plan-managed, NDIA-managed, or not yet determined), supports requested, preferred start timing, and any documents you choose to upload (e.g. NDIS plan excerpts or referral letters).

Health and sensitive information Where relevant to providing safe and appropriate support, we may collect information about disability, health conditions, medical history, or support needs. This is treated as “sensitive information” under the Privacy Act and is handled with additional care, as described below.

Careers and expressions of interest Name, phone, email, area of interest, resume, and any cover letter or message you submit.

Feedback and complaints Details of any feedback, concern, or complaint you raise with us, whether provided verbally, in writing, or anonymously.

Website usage information We use Google Analytics (GA4) to understand how visitors use our website, including pages visited, time on site, and general location (derived from IP address). This information is generally not personally identifiable.

3. How We Collect Personal Information

We collect personal information directly from you when you:

  • Submit an enquiry, referral, feedback, or careers form on our website
  • Call, email, or otherwise contact us
  • Are referred to us by a support coordinator, family member, health professional, or other third party (with appropriate authority to do so)

Where information is collected from a third party (such as a referrer), we take reasonable steps to ensure the individual concerned is aware of this policy, or that appropriate consent has been obtained.

4. Why We Collect and Use Personal Information

We collect and use personal information to:

  • Assess and respond to referrals and enquiries
  • Provide, coordinate, and manage NDIS-funded supports and services
  • Communicate with participants, families, carers, and referrers
  • Maintain accurate records as required under the NDIS Practice Standards and Code of Conduct
  • Process job applications and expressions of interest
  • Handle feedback and complaints
  • Improve our website and services
  • Meet our legal, regulatory, and reporting obligations, including to the NDIS Quality and Safeguards Commission

We will not use your personal information for a purpose unrelated to the above without your consent, unless required or authorised by law.

5. Sensitive and Health Information

Because Ableza provides disability support services, some of the information we collect is classified as “sensitive information” (including health information) under the Privacy Act. We only collect this information where it is reasonably necessary for, or directly related to, providing safe and appropriate support, and we will generally seek your consent before doing so.

Sensitive information is subject to stricter handling requirements than other personal information, and access within our organisation is limited to staff who need it to provide your support.

6. Disclosure of Personal Information

We do not sell personal information. We may disclose personal information to:

  • Support workers, allied health professionals, and other staff directly involved in delivering your support
  • Support coordinators, plan managers, or other providers you have asked us to work with
  • The NDIS Quality and Safeguards Commission, the NDIA, or other regulators, where required by law or the NDIS Practice Standards
  • Interpreting services (such as TIS National) where interpreter support has been requested
  • IT, hosting, and website service providers who help us operate securely (bound by confidentiality obligations)
  • Emergency services or relevant authorities, where necessary to prevent harm to you or another person
  • Any other party where required or authorised by law, or with your consent

Overseas disclosure: Some third-party service providers we use (for example, website hosting or analytics platforms) may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure the information is handled in a manner consistent with the Australian Privacy Principles.

7. Interpreter and Language Access

We provide free interpreting support in your language through TIS National (Translating and Interpreting Service) — just ask. You can request an interpreter via our Contact form, or by calling TIS National directly on 131 450.

8. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including:

  • SSL encryption on our website and all forms
  • Secure storage of form submissions and records
  • Restricted staff access to sensitive and health information, on a need-to-know basis
  • Retention of records in line with our record-keeping obligations under the NDIS Practice Standards and this policy

If we become aware of a data breach that is likely to result in serious harm to any individual, we will act in accordance with the Notifiable Data Breaches (NDB) scheme, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law, including record-keeping obligations under the NDIS Practice Standards. When information is no longer required, we take reasonable steps to securely destroy or de-identify it.

10. Access and Correction

You have the right to request access to the personal information we hold about you, and to request correction if it is inaccurate, out of date, incomplete, or misleading.

To make a request, contact us using the details below. We will respond within a reasonable timeframe. In some circumstances, access may be limited or refused as permitted by law (for example, where it would unreasonably impact the privacy of another person), and we will explain our reasons if this is the case.

11. Feedback, Complaints, and Privacy Concerns

You can raise a concern or complaint about how we’ve handled your personal information at any time — verbally, in writing, or anonymously — and doing so will not affect the supports or services you receive.

We will investigate and respond to your complaint in a timely manner. If you are not satisfied with our response, you may also contact:

Office of the Australian Information Commissioner (OAIC) Phone: 1300 363 992 Website: oaic.gov.au

NDIS Quality and Safeguards Commission Phone: 1800 035 544 Website: ndiscommission.gov.au

12. Cookies and Website Analytics

Our website uses cookies and Google Analytics (GA4) to understand how visitors use our site and to improve user experience. You can disable cookies through your browser settings, though this may affect some website functionality.

13. Third-Party Links

Our website may contain links to third-party websites (for example, the NDIS or TIS National). We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies separately.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The most current version will always be available on our website, with the “last updated” date shown above.

15. Contact Us

If you have questions about this Privacy Policy, or would like to access, correct, or ask about your personal information, please contact us:

Ableza (Oz Disability Care Pty Ltd) 📧 info@ableza.com.au 📞 +61 434 511 100 📍 Lakemba, NSW, 2195

This document is a template drafted for website use and should be reviewed by a qualified solicitor before publishing, particularly given Ableza’s collection of health and sensitive information as an NDIS provider.

Who we are

Suggested text: Our website address is: http://ableza.com.au.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.