Privacy Policy

Our commitment to your privacy

4titude (ABN: to be confirmed) is committed to protecting the privacy of all participants, families, and website visitors. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We treat your personal information with respect and only collect what we genuinely need to deliver our services.

What information we collect

Depending on how you interact with us, we may collect:

• Contact information (name, email address, phone number, postal address)
• NDIS plan information (for service delivery and billing purposes)
• Health information where relevant to the supports we provide, always collected with your knowledge and, where required, your explicit consent
• Website usage data collected via analytics tools (see ‘Cookies and analytics’ below)

We do not collect sensitive information (including health information) unless it is reasonably necessary for our functions and activities, or you have consented.

How we use your information

Your information is used to: deliver NDIS supports and services; respond to your enquiries; send you relevant communications where you have given consent; process NDIS claims and invoicing; comply with our legal obligations including NDIS reporting requirements to the NDIS Quality and Safeguards Commission; and improve how we run our services and programs.

How we protect your information

Personal information is stored securely in encrypted databases. Access is limited to authorised staff who need it to do their jobs. We use Supabase (with data stored in Australian data centres) as our primary data store for participant information. We apply industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. We do not sell, rent, or trade your personal information to third parties.

Sharing your information

We may share your personal information with:

• The NDIS Quality and Safeguards Commission, as required by law
• Allied health professionals and other support providers involved in your care, only with your consent
• Monday.com, our CRM platform, bound by a data processing agreement and used only for managing participant and enquiry records
• Resend, our email delivery provider, used only to send you communications you've requested or consented to

We do not share your information with any party outside these listed purposes without your consent or a legal obligation to do so.

Your rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate, out-of-date, or incomplete information
• Request deletion of your personal information where legally permissible (some information may need to be retained for legal or regulatory reasons)
• Withdraw consent for marketing communications at any time using the unsubscribe link in any email we send

To exercise any of these rights, contact us at email us.

Cookies and analytics

We use Google Analytics 4, Vercel Analytics, and Microsoft Clarity to understand how visitors use our website. These tools may collect data including your IP address, browser type, pages visited, and time spent on the site. You can opt out of analytics tracking via your browser settings or through the cookie consent banner shown on your first visit. No analytics data is linked to your NDIS plan or personal service records.

Contact us

For privacy enquiries, contact us at email us or write to: 4titude, 8 Ben Bow Place, Stanhope Gardens NSW 2768.

Complaints

If you believe we have breached the Australian Privacy Principles, please contact us first so we can try to resolve the matter. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.