Rightpath VA commits to protecting the privacy of NDIS participants, clients, and visitors to our website in compliance with the Privacy Act 1988 (Cth), Australian Privacy Principles (APPs), NDIS Act 2013, and NDIS Practice Standards.
We collect personal information reasonably necessary for providing virtual assistance services in the NDIS sector, such as names, contact details, NDIS plan information, health or disability details, support needs, and service records. Sensitive information like health data is only gathered with informed consent and where required for service delivery. Website usage may also track non-personal data like IP addresses or browser types via cookies for functionality and analytics.
Collection occurs directly from you via forms, emails, or service agreements, or indirectly from NDIS portals and third-party tools with your permission. We use this data to deliver tailored VA supports, manage plans, process payments, communicate updates, and improve services while ensuring accuracy and relevance. No information is collected unnecessarily, and we notify you at collection about purposes, potential sharing, and your rights.
Your data protection is our absolute priority. We employ bank-level encryption and multiple layers of security controls to safeguard your information. Our systems undergo continuous monitoring and regular independent audits to ensure your data remains completely protected from unauthorized access or breaches. We handle your information with the utmost care throughout its lifecycle. Your data is kept only for as long as necessary to deliver our services or meet legal requirements, after which it is permanently and securely destroyed. Should any security incident occur, we are committed to full transparency immediately notifying you and relevant authorities in accordance with Australian privacy law.
Information may be shared with NDIS authorities, support workers, allied health providers, or payment processors only with consent or as legally required. We do not disclose to overseas recipients without safeguards and notification. Third-party links on our site have separate policies; we bear no responsibility for them.
Access, correct, or delete your information by contacting us at info@rightpathva.com, requests are handled within 30 days. Complaints about privacy handling go to our Privacy Officer first, then the Office of the Australian Information Commissioner (OAIC) if unresolved. This policy updates periodically; continued site use implies acceptance.
