Your information deserves care.

Last reviewed: 3 October 2026

Who we are

Actually Good Disability Support Pty Ltd provides disability support services in Western Australia. Contact us about privacy, access to your information, corrections or a privacy complaint:

Email: jordon@actuallygoodsupport.com.au
Phone: 0423 123 629

What information we may collect

The information we handle depends on how you interact with us. It may include:

• Contact details and, when reasonably needed to provide support, identity and address information.
• Funding, plan-management and billing information.
• Communication preferences, interests, goals, routines and support preferences.
• Disability, health, allergy, emergency and safety information relevant to support.
• Support plans, participant instructions, consent and information-sharing preferences.
• Authorised representative, nominee, guardian, family and support-network details.
• Shift records, service notes, feedback, complaints, incidents, transport and activity information.
• Worker and applicant contact details, work history, qualifications, references, screening, training, supervision, payroll and employment records.
• Referral and enquiry details, supplier and adviser information, and website interaction information reasonably needed for security or to respond.

We may handle sensitive information, including health information, when it is reasonably necessary for support and its collection is lawful. The website is not a participant intake system. The short online support enquiry form is for first contact only. Please do not send an NDIS number, full plan, diagnosis, detailed health information or sensitive documents through it.

How we collect information

We usually collect information directly from the person it relates to, through conversation, email, phone, forms and service records. We may also receive information from an authorised representative, nominee, guardian, family member, support coordinator, plan manager, health professional, referral source, previous provider or worker referee where this is authorised, reasonably expected or otherwise lawful.

When information is collected from another person, we take reasonable steps to make the individual aware of relevant privacy information where required. For children and young people, we check relevant consent and authority, involve the young person appropriately and avoid collecting information just because an adult is willing to provide it.

The short support enquiry on this website asks only for basic first-contact and worker-fit information. When you submit it, the website securely sends your answers to a Google Form in Actually Good's business Google Workspace. The website does not keep a separate copy of your response. Detailed disability, health, risk, behaviour, identity and NDIS plan information is collected later, if needed, through an appropriate onboarding process.

Why we use information

We may use information to:

• Respond to enquiries and assess whether a support is in scope, safe and available.
• Plan, match, arrange, deliver and review support around the participant.
• Prepare workers with the minimum information reasonably needed for their role.
• Communicate with participants and people they have authorised.
• Manage service agreements, rostering, billing, payments and business records.
• Recruit, employ, train and supervise workers.
• Handle feedback, complaints, incidents, quality improvement and serious safety concerns.
• Meet legal, regulatory, insurance, taxation and employment obligations.

We do not use personal information for an unrelated purpose merely because we already hold it.

When information may be shared

Depending on the circumstances, information may be shared with Actually Good workers who need it for their role; a participant's authorised representative, nominee, guardian, advocate or support person; plan managers and payment administrators; health or support professionals where authorised or otherwise lawful; and professional advisers, insurers and approved service providers that support our business, including website, email, cloud, form, finance and payroll providers.

Information may also be shared with emergency services, law-enforcement, regulators or government bodies where required or permitted by law. Workers receive the minimum information reasonably needed for their role; they do not automatically receive a participant's complete file. A referral does not automatically give the referrer authority to make decisions or receive participant information.

Website and cloud services

This website is hosted using ChatGPT Sites. OpenAI may process site information needed to provide, secure and operate the website under the terms and privacy arrangements that apply to the service. Our domain registration and DNS are managed through VentraIP. See the OpenAI Privacy Policy and VentraIP Privacy Policy for information about those providers' own handling of personal information. When you submit a support enquiry, the website passes your answers to Google Forms in Actually Good's business Google Workspace. Google operates the form service and the response is held in that Workspace. See Google's Privacy Policy for information about Google's own data practices.

Actually Good also uses Google Workspace as its primary business record environment. These providers are international cloud services. Depending on the service, account configuration and provider arrangements, information may be stored, processed or accessed outside Australia, including in the United States and other countries where providers or their service partners operate. We do not promise Australia-only storage. Exact processing locations may change, and we review our systems and notices when our arrangements materially change.

Actually Good takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Controls include approved business accounts, access limited by role and need, strong account security, careful worker-facing briefs and review of privacy risks when we introduce a system or workflow.

Access, correction and privacy complaints

You may ask to access personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify identity or authority. We will respond within a reasonable period and explain any lawful reason if we cannot provide access or make a requested correction in full.

You may raise a privacy concern or complaint without being disadvantaged. We will acknowledge it, record what happened and the outcome you want, review the facts, keep you informed and explain the outcome and any corrective action. If you are not satisfied with our response, or we have not responded within 30 days, you may contact the Office of the Australian Information Commissioner.

Anonymity and pseudonyms

Where lawful and practical, you may contact us anonymously or use a pseudonym. We may need your identity to arrange support safely, confirm authority, meet employment requirements, process billing or meet another legal obligation.

Children, automated decisions and AI

We may support children and teenagers. We check relevant authority arrangements, involve the young person appropriately, collect only what is reasonably necessary and take extra care with sensitive information, images, contact details and disclosures.

Actually Good does not use an automated decision system to make decisions with a significant effect on a person's rights or interests. Identifiable participant information is not approved for routine use in generative AI, transcription or automation tools. Human judgement remains responsible for participant, worker, safety, billing and service decisions.

Retention and destruction

We keep information only as long as reasonably needed for its purpose or for applicable legal, regulatory, insurance, employment, financial, safeguarding or investigation requirements. When it is no longer required, we take reasonable steps to securely destroy or de-identify it.

NDIS claim-related provider records are retained for at least seven years from the claim date where the current requirement applies. Employment and tax/business records are kept for the period required by law. Other records may be kept longer where a complaint, safeguarding, insurance or investigation matter requires it.

Privacy incidents and changes to this policy

We act promptly to contain and assess suspected privacy breaches, consider the risk of serious harm and notify affected individuals and the OAIC where legally required.

We review this policy when our services, systems, laws or information-handling practices materially change. You may ask us for a copy in another reasonable format using the contact details above.