Privacy policy
What we collect, why, who sees it, where it lives, and what you can do about it. Written to be read, not filed.
The short version. We collect what we need to arrange and deliver your support safely, and nothing more. Health information is collected only with your consent. Your record lives on servers in Australia. We never sell it and never use it for marketing. You can see it, correct it, or withdraw a consent at any time.
Who we are
AUVII Pty Ltd (ABN 53 701 402 413), trading as AUVII, a disability support provider in Victoria. We are not a registered NDIS provider; we support people whose plans are self-managed or plan-managed. Privacy questions go to hello@auvii.com.au.
What we collect
- Your name, email address, phone number, address and suburb.
- Your NDIS participant number and how your plan is managed.
- What supports you want, when, and what you are hoping to get out of them.
- Health information you choose to tell us: things a support worker should know to keep you safe on a shift, allergies, your GP, and whether a behaviour support plan exists.
- Names and contact details of the people in your corner: an emergency contact, a support coordinator, a plan manager.
- A record of the permissions you gave, and the electronic signing record: date, time, IP address and device.
- If you enquire through the website without signing up: your name, contact details, and what you asked about.
Health information is sensitive information under the Privacy Act 1988. We collect it only with your consent, only where it is reasonably necessary to deliver your supports safely, and we do not collect more than we need.
Why we collect it
- To arrange your supports and match you with a suitable worker.
- To brief that worker on how you like your support delivered, and on anything that keeps you both safe.
- To invoice your plan manager or you, and to meet our record-keeping and tax obligations.
- To respond if something goes wrong, including in an emergency.
What happens if you don't give it
Your name and an email address are needed; without them we cannot arrange support or send you your agreement. A phone number lets us ring you about your first visit. Everything else is optional. Choosing not to answer something may mean we ask about it on the phone instead, or that we cannot safely deliver a particular support until we know. It will never affect how you are treated.
Who we share it with
- The support workers rostered to work with you, and only the parts they need for the shift.
- Your plan manager, for invoicing: billing details only, never your health information.
- Your support coordinator, if you have one and have agreed to it.
- Emergency services, if you are seriously unwell or injured and it helps them help you.
- The NDIS Quality and Safeguards Commission or the NDIA, where the law requires us to provide information.
- Our insurer or lawyer, if there is a claim or a legal obligation.
We do not sell your information and we do not use it for marketing.
Where it is kept
Your record is stored electronically on servers located in Australia (Sydney), with access limited to the people who need it. Documents you sign are fingerprinted so any later change can be detected, and every time a staff member opens your file it is logged.
Some of the services we use to send email and to protect our website from automated abuse are run by companies with servers outside Australia. They handle messages in transit; your record does not leave Australia.
How long we keep it
Seven years after the last support we deliver to you, which is the period required for NDIS and tax record keeping. Then it is securely destroyed. If you enquire but never become a client, we keep your enquiry only as long as it takes to respond and close it.
Your rights
- Ask to see the information we hold about you, and get a copy.
- Ask us to correct anything that is wrong or out of date.
- Withdraw a consent at any time by telling us. It takes effect from then on.
- Complain to us about how we have handled your information. If you are not satisfied, complain to the Office of the Australian Information Commissioner on 1300 363 992 or at oaic.gov.au.
Cookies and tracking
The website sets no advertising or analytics cookies. If you arrive from a link we have shared, the address may carry a tag telling us which link it was; nothing else is tracked.
Changes
If this policy changes in a way that matters to you, we will tell you before it takes effect. The date below is the date of the current version.