Privacy Policy
Holistic Healthcare Management Services Pty Ltd – Commitment to Privacy, Information Handling, and Participant Rights.
Effective Date: October 2026 | Last Updated: October 2026
Organisation & Scope Details
| Organisation: | Holistic Healthcare Management Services Pty Ltd |
| ABN / ACN: | ABN: 20 695 058 096 | ACN: 695 058 096 |
| Location: | 15 Agasse Way, Tapping WA 6065 |
| Website: | https://holistichealthcentre.com.au/ |
1. Our Commitment to Your Privacy
Holistic Healthcare Management Services Pty Ltd (“we”, “us”, “our”) is committed to protecting the privacy, dignity, and confidentiality of our participants, their families, carers, support networks, and visitors to our website.
As a registered provider under the National Disability Insurance Scheme (NDIS), we manage personal and health information in strict accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the National Disability Insurance Scheme Act 2013 (Cth), and the NDIS Practice Standards for Privacy and Dignity, Information Management, and Governance. This Privacy Policy explains how we collect, hold, use, disclose, and secure your personal and sensitive health data, as well as how you can access, correct, or make an inquiry about your personal records.
2. Information We Collect
To deliver safe, high-quality, and person-centred disability support services, we collect relevant personal and health information. The types of data we collect include:
2.1 Personal & Identifying Information
- Full name, preferred name, title, date of birth, and gender identity.
- Contact details, including residential address, postal address, email, and phone numbers.
- Emergency contact details, next of kin, and appointed legal decision-makers (such as guardians, nominees, or advocates).
- Cultural background, language preferences, and interpreter or accessibility requirements.
2.2 NDIS & Administrative Information
- NDIS participant number and funding details (such as whether your plan is Self-Managed, Plan-Managed, or NDIA-Managed).
- Contact details for appointed Support Coordinators or Plan Management agencies.
- Service Agreements, Schedule of Supports, shift progress notes, billing statements, and payment records.
2.3 Sensitive & Health Information
We only collect sensitive health information with your explicit, informed consent or as authorised by Australian law. This includes:
- Disability diagnoses, medical histories, mobility requirements, and general health status.
- Medication charts, GP prescriptions, Webster-pack details, and side-effect monitoring notes.
- Mealtime management profiles, swallowing assessments, IDDSI texture modification needs, and dietary/allergy requirements.
- Individual Risk Assessments, Home Safety Assessments, and Behaviour Support Plans (BSPs).
- Shift progress notes, incident reports, and clinical feedback.
2.4 Website, Cookies & Digital Data
When you browse our website (https://holistichealthcentre.com.au/), we may automatically collect non-identifying technical data, including your IP address, browser type, operating system, pages visited, and visit timestamps. We use standard website cookies to optimize performance, measure traffic patterns, and improve visitor experience. You can disable cookies through your browser settings without affecting your ability to contact us directly.
When you submit an online enquiry or referral form on our website, we collect the details you provide (such as your name, contact information, and service interests) to respond to your request.
3. How We Collect Your Information & 4. Why We Collect and Use It
We collect personal information directly from you wherever practical and lawful through direct consultations, intake assessments, phone calls, planning meetings, completed Service Agreements, online forms, and ongoing support sessions. With your prior consent, we may also receive information from third-party professionals involved in your care, including General Practitioners, allied health therapists, hospitals, previous service providers, Support Coordinators, Plan Managers, or the NDIA.
Why We Collect and Use Your Information
- Conducting needs assessments to develop individualised, person-centred Support Plans.
- Matching, rostering, and briefing qualified support workers to deliver daily living, personal care, household tasks, transport, and community participation supports.
- Managing emergency and health protocols, including medication administration, mealtime safety, and infection control.
- Generating invoices and processing funding claims through the NDIA PRODA portal, registered Plan Managers, or self-managed participants.
- Monitoring your progress, reviewing service quality, and incorporating feedback.
- Fulfilling reporting, auditing, and compliance requirements under the NDIS Quality and Safeguards Commission.
5. Sharing, Disclosure, Consent & Security
We do not sell, rent, or trade personal data to any external parties under any circumstances. We only share your information with your direct support team, healthcare professionals, Plan Managers, the NDIS Commission/NDIA, independent quality auditors (unless you opt out), or in legal/emergency situations where necessary.
Informed Consent and Your Choices
We maintain clear separation between core service consent, third-party information sharing, and media usage (we never publish photographs, videos, or participant stories without written consent). You can withdraw consent at any time, and we provide accessible communication in plain language or Easy Read formats.
Data Security and Record Storage
We implement strict administrative, technical, and physical safeguards, including end-to-end encryption, multi-factor authentication (MFA), role-based permissions, locked physical filing cabinets, and mandatory staff Privacy and Confidentiality Agreements.
6. Retention, Breaches, Access & External Links
- Record Retention and Disposal: Retained for a minimum of 7 years from the last service entry (or until age 25 for minors), after which records are securely shredded or sanitized.
- Data Breach Notifications: In line with the NDB scheme, we immediately contain breaches, assess impact, notify the OAIC and NDIS Commission if reportable, and contact affected individuals directly.
- Accessing and Correcting Your Information: You have the right to request access to or correction of your records. We acknowledge requests within 5 business days and complete them within 30 calendar days at no charge.
- External Links Disclaimer: We are not responsible for the privacy practices, content, or security of external third-party websites linked from our site.
7. Privacy Inquiries, Feedback, Complaints & External Escalation
If you have questions about this Privacy Policy, wish to access/update your information, or have concerns regarding how your data has been handled, please contact our Privacy Officer directly:
| Attention: | Privacy Officer / Director |
| Company: | Holistic Healthcare Management Services Pty Ltd |
| Address: | 15 Agasse Way, Tapping WA 6065 |
| Phone: | 0455 055 537 |
| Email: | info@holistichealthcentre.com.au / clemjohs@outlook.com |
All formal complaints are acknowledged within one to two business days, investigated thoroughly, and provided with a written response and resolution summary within thirty (30) days.
External Escalation
If you feel your privacy concern has not been satisfactorily resolved by our team, you have the right to contact external regulatory bodies:
- Office of the Australian Information Commissioner (OAIC):
Phone: 1300 363 992 | Website: oaic.gov.au | Email: enquiries@oaic.gov.au
Post: GPO Box 5218, Sydney NSW 2001 - NDIS Quality and Safeguards Commission:
Phone: 1800 035 544 (free call) | TTY: 133 677
National Relay Service: Ask for 1800 035 544 | Website: ndiscommission.gov.au
Our Other Privacy Policy List
- FORM-68-Progress Notes
- FORM-67-Participant Exit Form
- FORM-65-Participant Consent Form
- CHK-64-Participant File Audit Checklist
- REP-63-Emergency Drill Report
- PL-62-Business Continuity Plan
- PL-61-COVID-19 Management Plan
- PL-57-Emergency Management Plan
- PL-54-Data Backup Plan
- PL-53-Data Breach Response Plan
- REP-56-Data Breach Assessment Report
- REP-50-Conflict of Interest Report Register
- REP-48-Incident Report Form
- FORM-46-Incident Investigation Provider
- Privacy Policy
- FORM-45-Incident Investigation Form
- REP-44-Complaint Report Form
- Complaint Report Form
- Hazard Identification Report
- Individual Risk Assessment Form
- Home Risk Assessment Form
- Continuous Improvement Plan
- Continuous Improvement Form
- Management Review Report
- Strategic Plan
- Team Meeting Agenda
- Senior Management Meeting
- Delegation of Authority Form
- Business Plan
- Sub-Contractor Management Policy and Procedure
- Delegation of Authority Policy and Procedure
- Participant Money and Property Management Policy
- Documented Decisions on Financial and Operational Matters Policy
- Meeting and Minutes Taking Procedure
- Document Control Policy and Procedure
- Code of Conduct and Employee Acknowledgement
- Financial Management Policy and Procedure
- Training and Development Policy
- Child Rights, Responsibilities and Safety Policy and Procedure
- Continual Improvement Policy and Procedure
- Conflict of Interest Policy and Procedure
- Safe Environment Policy and Procedure
- Infection Control Policy and Procedure
- Rights and Responsibilities Policy and Procedure
- Management of Waste Policy and Procedure
- Mealtime Management Policy and Procedure
- Management of Medication Policy and Procedure
- Participant Money and Property Policy and Procedure
- Transition to or from a Provider Policy and Procedure
- Responsive Support Provision Policy and Procedure
- Service Agreements with Participants Policy and Procedure
- Support Planning Policy and Procedure
- Access to Supports Policy and Procedure
- Emergency Management Policy and Procedure
- Continuity of Supports Policy and Procedure
- Human Resource Management Policy and Procedure
- Incident Management Policy and Procedure
- Feedback and Complaints Management Policy and Procedure
- Information Management Policy and Procedure
- Quality Management Policy and Procedure
- Governance and Operational Management Policy and Procedure
- Violence Abuse and Neglect Policy and Procedure
- Independence and Informed Choice Policy and Procedure
- Privacy and Confidentiality Policy and Procedure
- Individual Values and Beliefs Policy and Procedure
- Person Centred Support Policy and Procedure