Privacy Policy

Sabah Moon Care Pty Ltd (ABN 87 681 188 303) is a registered NDIS provider operating across Australia. We are committed to protecting the privacy of our participants, families, and support coordinators in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For privacy enquiries, contact: contact@sabahmooncare.com.au

We collect personal information that is reasonably necessary to provide NDIS support services. This includes: • Identity information: Full name, date of birth, gender, cultural background, and preferred language • Contact details: Phone number, email address, and residential address • NDIS information: NDIS number, plan details, funding categories, and support goals • Health and disability information: Relevant medical history, diagnoses, support needs, and care plans • Financial information: NDIS plan management details and billing information • Communication records: Notes from consultations, support sessions, and correspondence We only collect sensitive information (such as health and disability details) with your explicit consent, or where required by law or our NDIS registration obligations.

Your personal information is used to: • Deliver NDIS support services as agreed in your service agreement • Develop and review your support plan • Communicate with you about your services • Coordinate with your support coordinator, LAC, or plan manager (with your consent) • Comply with NDIS Quality and Safeguards Commission requirements • Process billing and invoicing through your NDIS plan • Improve our services and internal processes We will not use your personal information for purposes beyond the above without your consent.

We may disclose your personal information to: • NDIS and government bodies: The NDIA, NDIS Quality and Safeguards Commission, and relevant state authorities as required by law • Health and allied health professionals: With your consent, to coordinate your care • Support coordinators and plan managers: To facilitate your NDIS services • Our staff: Only those directly involved in your support, on a need-to-know basis • Service providers: IT, cloud storage, and administrative service providers who are bound by confidentiality obligations We do not sell, trade, or rent your personal information to third parties.

As an NDIS registered provider, we handle participant information in accordance with the National Disability Insurance Scheme Act 2013 (Cth) and associated rules. This includes specific obligations around: • Protecting the privacy and dignity of all participants • Ensuring participant information is used only for purposes related to service delivery • Providing participants with access to their own records upon request • Notifying participants of any data breaches that may affect them Participants and their nominees have the right to access, correct, and request the deletion of their personal information held by Sabah Moon Care.

We store your personal information securely using industry-standard practices: • Digital records are stored in encrypted, access-controlled systems • Physical records (where applicable) are kept in locked storage • Access is restricted to authorised staff only • We use Supabase (hosted on AWS in Sydney, Australia) for our digital records We retain your records for the period required by law and our NDIS obligations. Records relating to participants are generally kept for 7 years (or until a minor turns 25) in accordance with NDIS requirements.

Under the Australian Privacy Act 1988, you have the right to: • Access the personal information we hold about you • Correct any inaccurate or out-of-date information • Complain about how we have handled your information • Opt out of direct marketing communications at any time To exercise any of these rights, please contact us using the details below. We will respond to access and correction requests within 30 days.

Our website (sabahmooncare.com.au) may use standard web technologies including cookies for analytics and functionality. We do not use tracking cookies for advertising purposes. Website analytics data (such as page views) is used only to improve our website and is not linked to identifiable individuals.

If you believe we have not handled your personal information appropriately, you may: 1. Contact us directly at contact@sabahmooncare.com.au 2. Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au 3. For NDIS-specific privacy concerns, contact the NDIS Quality and Safeguards Commission at 1800 035 544 We take all privacy complaints seriously and will investigate and respond within 30 days.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The current version is always available on our website. For material changes, we will notify participants directly where possible.

Email: contact@sabahmooncare.com.au

Phone: 0404 153 355

ABN: 87 681 188 303