Privacy policy

What this policy covers

This policy covers personal information collected through waymakerpathways.com. Information collected once someone becomes a participant is covered by our service agreement and participant-facing policies.

What we collect, and why

• Independence Scorecard: a first name, an email address, twelve answers about the level of support usually needed, the areas selected as important, and the question you are trying to answer. We collect this to send the results you asked for and to have a useful conversation if you contact us.
• Enquiries: name, email, optional phone, what you describe yourself as, your reason for contact, preferred contact method and anything you write in the message box.
• Referrals: referrer name, organisation, role and contact details; and for the young adult, a first name only, age band, suburb, funding management type, broad goal areas and a short non-clinical description of support required.
• Website analytics: if analytics is enabled, aggregate usage such as pages viewed and whether a form was started or completed.

What we deliberately do not collect

Through this website we do not collect NDIS numbers, plan numbers, diagnoses, medical or medication history, behaviour support plans, clinical records or file uploads. Individual Scorecard answers, names and email addresses are never sent to analytics providers.

Sensitive information

Health information is sensitive information under the Privacy Act 1988 (Cth). We ask you not to include it in free-text boxes on this site. If you do, we will handle it as sensitive information and delete it where it is not needed.

Marketing consent

Asking for Scorecard results does not put you on a mailing list. Marketing emails are only sent where the separate, unticked-by-default consent box was ticked. Consent, the date and the wording version are recorded, and every marketing email carries an unsubscribe link. You can also unsubscribe at any time at /unsubscribe.

How it is stored and who can see it

Submissions are stored in a Postgres database with row level security enabled, which means no anonymous or public access to any table. Staff access is restricted to an allow-list of named email addresses and requires authentication. Emails are sent through a transactional email provider.

How long we keep it

Our working position is that Scorecard submissions with no follow-up contact are deleted after 24 months, and enquiry and referral records are kept while there is a business reason to keep them. This is pending confirmation as part of the legal review noted above.

Access, correction and deletion

You can ask for a copy of your information, ask us to correct it, or ask us to delete it. Email admin@waymakerpathways.com or call 0420 567 794. We will not charge you to ask.

Complaints

If you think we have mishandled your information, please tell us first through our feedback and complaints page. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

Contact

Waymaker Pathways, ABN 21 697 375 527
PO Box 23, Smithfield West NSW 2164
admin@waymakerpathways.com · 0420 567 794