Last updated: 9 June 2025

1. About The Tasmanian Rise Project

“The Tasmanian Rise Project” (TRP, “we”, “our”, “us”) is an NDIS-registered disability-support provider based in Launceston, Tasmania. We deliver person-centred, culturally sensitive services and take privacy seriously. This policy explains how we collect, use, disclose and protect personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What personal information we collect & where it comes from

We only request information that is reasonably necessary for the functions set out in Section 3.

3. Why we collect, hold and use your information

We use your information to:

1. Arrange & deliver supports – build service agreements, care plans and rosters tailored to your goals.

2. Communicate – confirm bookings, send shift updates, respond to enquiries.

3. Invoice & claim funding – submit invoices to the NDIA or your plan manager and record payments.

4. Meet legal obligations – incident reporting, safeguarding, worker screening, tax and audit requirements.

5. Quality improvement – review service outcomes, train staff, monitor satisfaction, enhance our website and resources.

We will not use your personal information for direct marketing unless you have opted-in and can opt-out at any time.

4. Who we share information with

We never sell or rent data. We may disclose information to:

• Authorised representatives (family, guardian, advocate)

• Medical or allied-health professionals involved in your care

• The NDIA, NDIS Quality & Safeguards Commission, or other regulators

• Cloud-hosting, email, CRM or IT-security providers under strict confidentiality agreements

• Professional advisers (auditors, insurers, lawyers)

• Emergency services if there is a risk of harm

Where practical, we use de-identified data for training and reporting.

5. Overseas disclosure

Primary servers are in Australia. Limited data (e.g., email backups) may reside in servers located in Singapore or the United States. Providers must meet contractual privacy safeguards comparable to the APPs.

6. How we keep information safe

• Secure cloud platforms with Australian data centres

• SSL encryption on all web forms

• Least-privilege, role-based access controls

• Multi-factor authentication for staff systems

• Regular penetration testing & patch management

• Locked filing cabinets for any paper records
  If a data breach is likely to cause serious harm, we will follow the Notifiable Data Breaches scheme and contact you and the OAIC within 30 days.

7. Cookies & website analytics

TRP uses cookies to remember preferences and compile visit statistics via Google Analytics. You can disable cookies in your browser; core content will remain accessible, but some features (e.g., pre-filled forms) may be limited.

8. Access & correction

You may request access to, or correction of, your personal information by emailing us (see Section 10). We aim to respond within 30 days. If we refuse access under an APP exception, we will give written reasons and information on how to complain.

9. Complaints

Please contact us first so we can resolve any privacy concern quickly. If you feel we have not handled your complaint satisfactorily, you may escalate to:

• Office of the Australian Information Commissioner – oaic.gov.au | 1300 363 992

• NDIS Quality & Safeguards Commission – ndiscommission.gov.au | 1800 035 544

10. How to contact us

If you need this policy in an alternate format (large print, easy-read), just let us know.

© 2025 The Tasmanian Rise Project. All rights reserved.