About This Policy
This Privacy Policy explains how KOMplete Disability Support Services Pty Ltd (ABN 58 653 934 108) ("Komplete Disability", "we", "our", "us") collects, holds, uses, and discloses personal information.
This policy applies to all personal information we handle about:
- NDIS participants and their families or representatives
- Referrers and support coordinators
- Job applicants, employees, and contractors
- Visitors to our website and offices
- Other individuals who interact with our organisation
Who We Are
Komplete Disability is a registered NDIS provider delivering disability support and allied health services across South Australia. Our services include support coordination, specialist behaviour support, community nursing, personal care, and a range of allied health and therapeutic supports.
What Information We Collect
We collect personal information that is reasonably necessary for us to provide our services. The types of information we may collect include:
- Full name and preferred name
- Date of birth
- Gender identity
- Cultural background and language
- NDIS participant number
- Residential and postal address
- Phone number(s)
- Email address
- Emergency contact details
- Guardian / nominee contact details
- Disability type and diagnosis
- Medical history relevant to support
- Behaviour support plans
- Risk assessments
- Medication and health needs
- NDIS plan details and goals
- Support coordination information
- Service agreements
- Progress notes and incident reports
- Funding and budget information
- Résumé and qualifications
- NDIS Worker Screening Check
- Working With Children Check
- Tax file number (as required)
- Employment history and references
- IP address and browser type
- Pages visited and time spent
- Form submission data
- Referral source
- Cookie and session data
How We Collect Information
We collect personal information in a number of ways, including:
- Directly from you — when you make a referral, submit a form, contact us by phone or email, attend our offices, or apply for employment
- From third parties — including the NDIS, support coordinators, plan managers, GPs, allied health professionals, hospitals, and other service providers with your consent
- Automatically — when you visit our website, certain technical information may be collected via cookies and server logs
- From your representative — with authority from a guardian, nominee, or support coordinator acting on your behalf
Why We Collect Information (Purpose)
We use personal information only for the purposes for which it was collected, or for directly related purposes that you would reasonably expect. These include:
Sensitive Information
We handle sensitive information as defined under the Privacy Act 1988, including:
- Health and medical information
- Disability information
- Racial or ethnic origin
- Religious or philosophical beliefs
- Sexual orientation or sex life (where relevant to culturally safe support)
- Criminal record (for worker screening purposes)
Sensitive information receives a higher level of protection. We do not use or disclose it for any purpose other than those described in this policy without your consent, except as required by law.
Disclosure of Information
We may disclose your personal information to third parties only where necessary and in accordance with the APPs. Disclosures may include:
Overseas Disclosure
Some of our technology service providers (such as cloud storage or email platforms) may store data on servers located outside Australia. Where this occurs, we take reasonable steps to ensure that overseas recipients handle personal information in accordance with the Australian Privacy Principles or comparable privacy standards.
By using our services and providing your information, you acknowledge that your information may be stored or processed overseas under these arrangements.
Security of Information
We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification, or disclosure. Our security measures include:
Retention of Records
We retain personal information for as long as it is necessary to fulfil the purposes described in this policy, and as required by law. Minimum retention periods that apply to our records include:
When records are no longer required, they are securely destroyed in accordance with our records management policy.
Access & Correction of Your Information
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Request corrections if the information is inaccurate, incomplete, or out of date
- Request deletion of information we are no longer required to hold
To make a request, please contact our Privacy Officer using the details in Section 16. We will respond within 30 days. In some circumstances we may be unable to provide access (e.g. where it would unreasonably impact the privacy of another person, or where we are legally required to retain the information), and we will explain any such refusal in writing.
Anonymity & Pseudonymity
Where lawful and practicable, you may interact with us anonymously or using a pseudonym. For example, you may submit general feedback or enquiries without identifying yourself.
However, due to the nature of NDIS-funded support services, we generally need to identify you in order to safely deliver services, meet NDIS obligations, and maintain required records. We are unable to deliver support services without collecting personal information.
Website & Cookies
Our website may collect non-identifiable data about how you use the site, including pages visited, time spent on pages, and browser type. This is used to improve the website experience.
We may use cookies (small text files stored on your device) to:
- Remember your accessibility preferences (text size, contrast mode)
- Maintain your session during form submissions
- Understand how visitors use our website
You can disable cookies in your browser settings. Doing so may affect the functionality of some features on our website.
Our website does not contain third-party advertising or tracking cookies.
NDIS-Specific Privacy Obligations
As a registered NDIS provider, we have specific obligations under the:
- National Disability Insurance Scheme Act 2013 (Cth)
- NDIS (Provider Registration and Practice Standards) Rules 2018
- NDIS Practice Standards (Core Module and relevant supplementary modules)
- NDIS Code of Conduct
Privacy Complaints
If you believe we have handled your personal information inappropriately, or you wish to make a privacy complaint, please follow these steps:
Contact Us — Privacy Officer
For all privacy-related enquiries, access and correction requests, or complaints, please contact our Privacy Officer:
