Privacy Policy

CuraOne Group Pty Ltd is an Australian company that provides non-clinical home and community support services for older people, people living with disability, families and carers. We operate as a private-pay provider and accept enquiries from NDIS self-managed and plan-managed participants.

Our Privacy Officer can be contacted at:

We may collect the following types of personal information:

Contact and identity information

• Full name
• Phone number and email address
• Residential or service address
• Preferred contact method and times

Service and support information

• Details about your support needs, goals and preferences
• NDIS plan details (plan type, funding category) where relevant
• Aged care or Support at Home program details where relevant
• Information about your living situation relevant to service delivery
• Emergency contact details

Sensitive information

We may collect sensitive information — including health information and disability-related information — only where it is reasonably necessary to assess your support needs or deliver agreed services, and only with your consent or as otherwise permitted by law. We handle all sensitive information with additional care and in accordance with APP 3.

Website and technical information

• IP address and browser type (collected automatically when you visit our website)
• Pages visited and time spent on our website
• Referring website or search terms used to find us

We collect personal information in the following ways:

• Directly from you when you contact us by phone, email, WhatsApp or through our website contact or intake forms.
• From your representative, carer, family member or support coordinator where you have authorised them to act on your behalf.
• From your NDIS plan manager or Support at Home approved provider where relevant to arranging services.
• Automatically through our website using cookies and similar technologies (see Section 9).
• From publicly available sources where permitted by law.

We will only collect personal information by lawful and fair means, and not in an unreasonably intrusive way.

We use your personal information for the following purposes:

Primary purposes

• To respond to your enquiry and assess whether our services are suitable for your needs.
• To prepare and provide a written quote and Service Agreement.
• To arrange, schedule and deliver agreed support services.
• To communicate with you about your services, including scheduling, changes and updates.
• To process payments and maintain financial records.
• To meet our legal, regulatory and insurance obligations.

Secondary purposes

• To improve our services and website based on feedback and usage patterns.
• To send you service-related communications (not marketing) where you have engaged our services.
• To respond to complaints or enquiries.

We will not use your personal information for direct marketing without your express consent. If you consent to receiving marketing communications, you may withdraw that consent at any time by contacting us.

We do not sell, rent or trade your personal information. We may disclose your personal information to the following parties only to the extent necessary:

• Support workers, contractors or service suppliers engaged to deliver your agreed services.
• Your NDIS plan manager or Support at Home approved provider, where relevant to funding or service coordination.
• Your nominated emergency contact or authorised representative.
• Our professional advisers, including accountants, lawyers and insurers, under obligations of confidentiality.
• Government agencies or regulators where required or authorised by law (e.g. NDIS Quality and Safeguards Commission, Aged Care Quality and Safety Commission, or law enforcement).
• Third-party service providers who assist us in operating our website or business systems (e.g. cloud storage, email platforms), under data processing agreements that require them to protect your information.

We will not disclose your personal information to overseas recipients unless we have your consent or are required to do so by law. Where disclosure to an overseas recipient is necessary, we will take reasonable steps to ensure the recipient handles your information in accordance with the Australian Privacy Principles.

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Our security measures include:

• Secure, password-protected systems and devices.
• Restricted access to personal information on a need-to-know basis.
• Encrypted transmission of data where technically feasible.
• Regular review of our security practices.

No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

When personal information is no longer needed for the purpose for which it was collected, and we are not required by law to retain it, we will take reasonable steps to destroy or de-identify it securely.

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.
• Make a complaint about how we have handled your personal information.

To make an access or correction request, please contact our Privacy Officer in writing at [email protected]. We will respond to your request within a reasonable time (generally within 30 days) and at no charge, unless the request is complex or requires significant resources, in which case we will notify you of any applicable fee before proceeding.

We may decline an access or correction request in limited circumstances permitted by law, and will provide written reasons if we do so.

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact our Privacy Officer first so we can attempt to resolve your concern:

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

Our website may use cookies and similar tracking technologies to improve your browsing experience and understand how visitors use our site. Cookies are small text files stored on your device.

We may use:

• Essential cookies — required for the website to function correctly.
• Analytics cookies — to understand how visitors interact with our website (e.g. pages visited, time on site). These are used in aggregate and do not identify you personally.

You can control or disable cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website. We do not use cookies to serve targeted advertising.

Our website may contain links to third-party websites, including government agencies, funding bodies and community organisations. This Privacy Policy applies only to CuraOne's website and services. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies before providing any personal information.

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from children without the consent of a parent or legal guardian. If you believe we have inadvertently collected personal information from a child, please contact us immediately and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations or business operations. The effective date at the top of this page will be updated when changes are made. We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.

For significant changes that affect how we handle your personal information, we will take reasonable steps to notify you directly where we hold your contact details.

This Privacy Policy is governed by the laws of the State of New South Wales, Australia, and the Privacy Act 1988 (Cth). Any disputes relating to this policy are subject to the non-exclusive jurisdiction of the courts of New South Wales and the Federal Court of Australia.