Privacy Policy

How we collect, use, protect, and manage your personal information.

Last updated: July 2026

This Privacy Policy outlines how Little Lives Big Impact (LLBI) collects, uses, discloses, and manages personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, the National Disability Insurance Scheme (NDIS) Rules, and the NDIS Code of Conduct. As a disability support provider, we take the privacy and security of participant information seriously and are committed to transparent practices.

1. Information we collect

We collect personal information that is necessary to provide support services and manage our operations. This may include:

  • Your name, contact details, and date of birth;
  • Health and disability information;
  • Support needs and goals;
  • NDIS plan and participant details;
  • Financial information (for invoicing and payment purposes);
  • Emergency contact details;
  • Communication preferences.

2. How we use your information

We use personal information for the following purposes:

  • Providing and implementing NDIS plans and support services;
  • Coordinating with the NDIS, other service providers, and healthcare professionals;
  • Billing and payment processing;
  • Communicating important updates or changes to services;
  • Compliance with NDIS requirements and regulations;
  • Quality assurance and service improvement.

3. Disclosure of your information

We may disclose your personal information to:

  • The National Disability Insurance Agency (NDIA), as required by the NDIS Rules;
  • Healthcare professionals and medical practitioners involved in your care;
  • Government agencies, as required by law;
  • Your family members or nominated carers (with your consent).

We will not disclose your information to third parties for marketing or other purposes without your express consent, except where required by law.

4. Security & data protection

We take data security seriously to protect participant privacy. Our safeguards include:

Encryption

All digital records are stored in secure, encrypted cloud environments, in transit and at rest.

Access Controls

Only authorised staff directly involved in your care have access to your personal files.

Staff Training

All team members undergo regular training on privacy, confidentiality, and NDIS reporting requirements.

Incident Response

We have a robust Data Breach Response Plan in place to act quickly if any information is compromised.

5. Your rights

You have the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate information;
  • Request deletion of information (where legally permissible);
  • Withdraw consent for certain uses of your information;
  • Update your communication preferences.

To request access to your information or exercise any of these rights, please contact us using the details at the end of this policy.

6. Retention of information

We retain personal information for as long as necessary to provide services and comply with legal obligations. Participant records are generally retained for a minimum of 7 years after the conclusion of services, in accordance with NDIS record-keeping requirements. Information may be retained longer where required by law.

7. Complaints

If you have a concern about how we handle your personal information, please contact us first so we can address it. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

8. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be posted on this page. Your continued use of our services following notification constitutes acceptance of the updated policy.

9. Contact us

To access your information, ask a question, or raise a privacy concern, contact us on 0489 27 LLBI (5524) or hello@llbi.com.au.