Privacy Policy

Privacy Policy for YPYW Pty Ltd

Current as of August 2026

At YPYW Pty Ltd (“YPYW”, “we”, “our” or “us”), we are committed to protecting the privacy, dignity and confidentiality of the people we support, their families, representatives, staff and stakeholders.
We handle personal and health information in accordance with the:

• Privacy Act 1988 (Cth)
• Australian Privacy Principles (APPs)
• Health Records Act 2001 (Vic)
• Privacy and Data Protection Act 2014 (Vic)
• NDIS Practice Standards and Quality Indicators

We recognise that privacy is an important part of choice, control and dignity, and we are committed to ensuring information is collected, stored, used and shared responsibly. This policy is publicly available and applies to all information collected by YPYW, including through our website and service delivery activities.

1. What Information We Collect

To provide our services, we may collect information including:

Personal Information

• Name
• Date of birth
• Address
• Telephone number
• Email address
• Emergency contact details

NDIS Information

• NDIS participant number
• Plan details
• Funding information
• Service agreements
• Support goals and outcomes

Health and Sensitive Information

• Medical information
• Disability-related information
• Risk assessments
• Behaviour support information
• Reports and assessments from health and allied health professionals
• Case notes and service records

Website Information

When you visit our website, we may collect:

• IP address
• Browser type
• Device information
• Website usage information
• Information submitted through contact or referral forms

2. How We Collect Information

We may collect information:

• Directly from you
• From your nominated representative, guardian or nominee
• Through referral forms
• Through service agreements and intake documentation
• Through phone calls, emails and meetings
• From health professionals and other service providers where authorised
• From government departments and agencies where authorised or required
• Through our website and digital tools

Sensitive information is only collected where reasonably necessary to provide supports, where consent has been provided, or where collection is otherwise permitted or required by law.

3. Why We Collect Information

We collect information to:

• Deliver Support Coordination and Specialist Support Coordination services
• Process referrals and service requests
• Develop and review support plans
• Coordinate supports and services
• Communicate with participants and their support networks
• Meet our legal, funding and regulatory obligations
• Improve the quality of our services
• Respond to complaints, incidents or feedback
• Maintain records required under NDIS standards

4. How We Use and Share Information

YPYW respects your privacy and does not sell, rent or trade personal information.

Information will only be shared when:

• You have provided consent
• It is required to deliver supports and services
• It is required by law
• It is necessary to prevent or lessen a serious threat to life, health or safety
• It is required by regulatory, audit or safeguarding processes

Where possible, we will seek your consent before sharing information with:

• Plan Managers
• Support Coordinators
• Specialist Support Coordinators
• Allied Health professionals
• Medical practitioners
• Government agencies
• Other service providers involved in your supports

Consent and information sharing decisions are recorded in accordance with YPYW policies and procedures.

5. Storage and Security

We take reasonable steps to protect information from loss, misuse, unauthorised access, disclosure or alteration.

Information may be stored within secured electronic systems including approved YPYW business systems and Microsoft 365 environments. Access is restricted to authorised workers who require the information to perform their role. Staff are required to comply with privacy, confidentiality and information security obligations. Security measures may include:

• Password protection
• Multi-factor authentication
• Access controls
• Encrypted systems
• Staff confidentiality agreements
• Secure destruction of records when no longer required

6. Your Rights

You have the right to:

• Request access to personal information we hold about you
• Request corrections to inaccurate information
• Withdraw consent where appropriate
• Ask questions about how your information is managed
• Make a privacy complaint

There is no charge for requesting corrections to your personal information.

7. Website Cookies and Analytics

Our website may use cookies and analytics tools to understand how visitors use our website and to improve user experience.

Cookies may be used to:

• Remember information entered into website forms
• Improve website functionality
• Analyse website usage and performance
• Measure the effectiveness of advertising and communication activities

You can configure your internet browser to block or remove cookies; however, some website features may not function correctly if cookies are disabled.

8. Privacy Complaints

If you have concerns about how YPYW has managed your personal information, we encourage you to contact us so we can work towards a resolution.

Privacy Officer
Justine Barragan
Director | YPYW Pty Ltd

Email: enquiries@yourpathsc.com.au
Phone: 1300 110 231

If you are not satisfied with the outcome of your complaint, you may contact:

• Office of the Australian Information Commissioner (OAIC)
• NDIS Quality and Safeguards Commission

9. Changes to this Policy

YPYW may review and update this Privacy Policy from time to time to reflect changes in legislation, technology, services or operational requirements. The most current version will always be available on our website.