Privacy Policy

Last updated 12 August 2026.

Disability Insights Pty Ltd runs this website and the provider directory on it. This policy explains what personal information we collect, why we collect it, and who we give it to. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

When you fill in a form on this site, we collect what you type into it. Depending on the form, that includes:

• your name, email address and phone number
• your postcode
• whether you are a participant, a family member or carer, a support coordinator or a professional
• how your NDIS plan is managed
• the type of support you are looking for and when you need it to start
• anything you choose to write in a free-text field

We also collect technical information automatically, such as your IP address, browser and device type, the pages you visit and the site you arrived from.

Information about disability and health

Information about your disability or health is sensitive information under the Privacy Act, and it gets extra protection. We only collect it where you give it to us and you consent to us using it for the purpose you gave it to us for. You do not have to give us any of it. When you write in a free-text box, please include only what a provider genuinely needs in order to answer your enquiry. There is no need to send us diagnoses, reports or plan documents.

Sending an enquiry to a provider

On a provider's profile page you can send an enquiry straight to that provider. Before you can send it, you have to tick a box consenting to us passing your details on. That tick is the consent we rely on to disclose your personal information under Australian Privacy Principle 6.

Here is exactly what happens to that enquiry:

• It goes to the one provider you named, so they can contact you about your enquiry. We do not send it to any other provider, and we do not sell it or share it with anyone else.
• Once a provider has your details, they hold them as an organisation in their own right, and their own privacy policy applies to what they do with them. We do not control that. If you want a provider to delete your details, ask them directly.
• We keep a record of the enquiry, including your consent, so we can show what was sent and where, resolve disputes, and count and invoice enquiries sent to providers who pay for a listing.

Providers who pay us for placement are marked as such on the page and in the form. What a provider pays does not change what we do with your information.

You can withdraw your consent at any time through our contact page. Withdrawing it stops any further use by us, but we cannot claw back an enquiry a provider has already received.

Other forms on this site

• Find a provider and request a quote forms. These ask us to help you find a suitable provider. We use your details to respond and to introduce you to providers that match what you have asked for. If you would rather we did not pass your details to anyone, say so in the message field and we will only contact you ourselves.
• Contact form. Used to answer you, and nothing else.
• Newsletter. Used to send you the newsletter. Every email has an unsubscribe link, and it works immediately.
• Advertising and listing enquiries. Used to talk to you about advertising with us.

Who else handles your information

We use these services to run the site. Each one is bound by its own agreement with us:

• Formspree delivers our form submissions and stores them. Formspree is based in the United States.
• Brevo runs our newsletter list.
• Amazon Web Services hosts and serves the site.
• Google provides our analytics and advertising measurement.

This means your personal information may be stored or processed overseas, mainly in the United States. We take reasonable steps to make sure anyone who handles it for us protects it to the standard the Australian Privacy Principles require.

We will also disclose personal information where the law requires it, or where it is needed to deal with a serious threat to someone's life, health or safety.

Cookies, analytics and advertising

This site uses Google Analytics and Google Ads. These set cookies and similar identifiers so we can see how the site is used, measure which pages lead to an enquiry, and show ads for Disability Insights on Google and its partner sites. That includes remarketing, which is how you may see our ads after visiting.

You can turn a lot of this off:

• Google's own ad settings let you turn off personalised ads at myadcenter.google.com.
• Google provides a browser add-on that blocks Google Analytics at tools.google.com/dlpage/gaoptout.
• Your browser settings let you block or delete cookies. Parts of the site may stop working properly if you block all of them.

How long we keep it

We keep enquiry records for seven years, which covers our tax and business record obligations and any dispute about what was sent to whom. Newsletter subscriptions are kept until you unsubscribe. Analytics data is kept on Google's retention schedule. When we no longer need personal information, we destroy it or de-identify it.

Keeping it secure

The site is served over HTTPS and access to form submissions is limited to people who need it. No website can promise perfect security, and information you send us over the internet travels at your own risk.

Getting access, and fixing mistakes

You can ask us for a copy of the personal information we hold about you, and you can ask us to correct it if it is wrong. Ask through our contact page. We will respond within 30 days. We may need to confirm who you are first. If we refuse access, we will tell you why in writing.

Complaints

If you think we have mishandled your personal information, tell us through the contact page and we will investigate and respond within 30 days. If you are not happy with our response, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We update this policy as the site changes. The date at the top tells you which version you are reading.