Privacy at ARA.

Information we may collect

Depending on how you interact with ARA, we may collect your name, contact details, suburb or postcode, information about the support being sought, availability or preferences, referral information, communications with ARA, and other information reasonably required to respond to an enquiry or provide support.

In some circumstances, ARA may need to handle health or other sensitive information in connection with arranging or providing support. The public website is intended to begin a conversation, not to collect detailed health information.

Information not to include in an initial enquiry

Please do not provide unnecessary medical records, NDIS plan documents, detailed medical history, identity documents or other sensitive documents when first contacting ARA through the website. Relevant information can be discussed directly with ARA when it is appropriate and reasonably required.

How we collect information

ARA may collect information directly from you through the Find Support and Refer a Participant forms, by telephone, email or other communications.

We may receive information from family members, carers, Support Coordinators, referral partners or other authorised representatives. If you provide information about another person, you should be authorised to do so. This does not, by itself, establish that the person has consented in every relevant context.

Why we collect and use information

We may collect and use personal information to:

• respond to enquiries and discuss support options;
• assess referrals;
• arrange and provide support;
• communicate with participants and relevant support networks;
• operate ARA; and
• meet applicable legal and regulatory obligations.

Sensitive information

ARA may sometimes need information relating to health, disability or support needs when it is reasonably necessary for arranging or providing support. We aim to collect only the information reasonably required for the relevant purpose and handle sensitive information in accordance with applicable privacy requirements.

How information may be shared

Personal information may be shared within ARA where it is needed for the relevant purpose, with service providers that help ARA operate, or with other people or organisations where authorised or where required or permitted by law. Website form submissions use Cloudflare Turnstile for abuse prevention and Resend for transactional email delivery to ARA’s business mailbox.

Technology providers and overseas processing

ARA uses Cloudflare services to host and protect the website, and Resend to deliver website form notifications. These providers may process or store information outside Australia. Provider arrangements and processing locations may change over time.

Security

ARA takes reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. No method of transmission or storage is completely secure, so please avoid sending unnecessary sensitive information in an initial enquiry.

Retention

Personal information is retained only for as long as reasonably required for the purpose for which it was collected and any applicable legal or operational requirements. When information is no longer required, appropriate steps may be taken to delete or de-identify it, subject to applicable obligations.

Access and correction

You may contact ARA to request access to, or correction of, personal information we hold about you, subject to applicable requirements and exceptions.

Privacy questions and complaints

If you have a privacy question or concern, contact ARA and explain the issue. We will review it and respond as appropriate.

Updates to this policy

We may update this policy as ARA’s services, technology or privacy practices change. The date at the top of this page shows when it was last updated.