Privacy Policy
Who we are
ThriveAbility Care Services Pty Ltd, trading as ThriveAbility Care, is a registered NDIS provider supporting people across Sydney. We respect your privacy, including the privacy of children, families and people with complex support needs.This policy explains how we handle personal information through this website, enquiries, recruitment applications and related communications. Additional collection notices and service documents may explain how information is handled during intake and support delivery. Applicable obligations include the Privacy Act 1988 and Australian Privacy Principles, and NSW health privacy requirements where they apply.
Information we collect
When you contact us, we may collect your name, phone number, email address, preferred contact method, relationship to the person seeking support and the information you choose to include in your enquiry. We may also keep correspondence, feedback and complaint records.
Please provide only what is needed for an initial conversation. Do not send NDIS numbers, identification documents, medication charts, behaviour support plans or detailed health records through a general website enquiry. Contact us to arrange an appropriate way to share sensitive documents.
During an authorised intake or support process, relevant information may include disability and health information, support needs, communication preferences, emergency contacts and funding arrangements. Collection must be necessary for the purpose and supported by consent or another lawful basis.
Website and marketing tools may process technical information such as browser and device details, IP address, pages visited, referring websites, interaction events and cookie identifiers. What is collected depends on the tools and settings actually enabled.
How information reaches us
We collect information directly from you where practicable. We may also receive it from an authorised representative, family member, support coordinator, practitioner or referrer. A relationship alone does not establish authority to share another person's information. Please check consent or other lawful authority before making a referral.
You may ask general questions without identifying yourself where this is practical and lawful. We may need identity and relevant support information to arrange services, respond to an individual matter or meet our obligations.
Why we use information
Respond to enquiries and discuss suitable support options.
Assess and coordinate agreed services, with the necessary authority.
Communicate with you and authorised people involved in your support.
Manage feedback, complaints, administration, safety and legal obligations.
Improve the website and, where appropriately authorised, understand marketing performance.Communicate about your application and any future roles you have chosen to be considered for.
Providing information for an enquiry does not automatically subscribe you to marketing. If requested information is not provided, we will explain whether this affects our ability to assist.
When information may be shared
Information may be available to authorised team members and necessary service providers supporting our website, forms, communications, IT and administration. Relevant support information may be shared with authorised people involved in your services, with consent or as otherwise permitted by law.
Disclosure may also be required or permitted for legal obligations, safeguarding, regulatory reporting, responding to serious threats or obtaining professional advice. We aim to limit disclosure to what is necessary for the relevant purpose. This policy does not authorise unrestricted sharing of participant information.
Cookies, analytics and Meta PixelOur website uses Framer, with Microsoft Forms used for some forms and Tally used for recruitment applications. Google Analytics and Meta Pixel are planned but are not enabled as at 14 September 2026. We have not yet selected or enabled a newsletter service.If these tools are introduced, we will update this policy and the relevant collection notices to explain the information collected, its purpose, service providers and available choices.Our hosting, form and spam prevention services may process technical information needed to provide and protect their services. This can include device and browser details, network information and interactions with a form. These functions are separate from the planned advertising and analytics tools.
Browser settings can help you manage cookies, although blocking cookies may affect some functions and does not necessarily stop every type of tracking. See Google's information about partner websites.
Newsletters and marketing choicesThere is no newsletter subscription service currently enabled. Sending an enquiry or applying for a role does not subscribe you to marketing.If we introduce a newsletter, subscription will be separate from service enquiries and recruitment. We will explain the provider, information collected and unsubscribe options before collecting subscriptions. Necessary service and recruitment communications are separate from marketing.
Storage and overseas processingWe use cloud services for this website, online forms and email, including Framer, Microsoft 365, Microsoft Forms and Tally. These services may involve storage or processing outside Australia. The recruitment section below explains the overseas locations identified by Tally for form responses, uploaded files and notification emails.You can contact us to ask about the service providers involved in a particular enquiry or application and discuss another way to share sensitive information. We do not represent that all website, form or email information remains in Australia.
Security and retentionNo website, email or electronic transmission can be guaranteed completely secure. Please provide only the information needed for your enquiry or application. Contact our team before sending sensitive records, and tell us promptly if you believe information has been sent to the wrong person or accessed without authority.How long information is retained depends on its purpose and any applicable legal, NDIS, health record or complaint obligations. You can ask us about the retention period applying to your information. The optional period for considering an application for future roles is six months, as explained below. A request for deletion does not override a lawful requirement to retain a record.
Children and authorised representatives
Our services include support for children. We handle children's information with particular care and involve the child in an age appropriate and accessible way. Consent and authority must be considered in the circumstances, including the child's capacity and any lawful parental or representative authority. We do not assume that every family member can access a child's records.
Access, correction and consent
You can ask to access personal information we hold about you or request correction if it is inaccurate, incomplete or out of date. We may need to verify your identity or authority before responding. If a lawful exception prevents access or correction, we will explain the reason and available complaint options where required.
You can withdraw marketing consent and discuss other consent choices with us. Withdrawal does not necessarily undo earlier lawful handling or remove record keeping obligations. Australian privacy law does not create an unrestricted right to have every record deleted.
Questions and privacy complaints
Call 1300 500 821 and ask for the Operations Manager to discuss privacy, access or correction. You may also use our Complaints and Feedback form. Please include only the information necessary for us to understand your concern and contact you, if you want a response.
We will consider your concern, explain the next steps and respond within a reasonable period. You can ask a support person or advocate to assist. If you are not satisfied, you can contact the Office of the Australian Information Commissioner. NSW health privacy concerns may also be directed to the NSW Information and Privacy Commission. These options do not restrict other complaint rights.
Keeping this policy currentWe update this policy when our services, website tools or information handling practices change. Please check this page for the latest version. Last updated: 14 September 2026.
Recruitment applications through Tally
When you apply for a role, we collect your name, contact details, preferred work locations, availability, experience, qualifications, resume and any optional cover letter or comments you provide. We use this information to assess your suitability, communicate with you and manage recruitment. If required information is missing, we may be unable to assess your application. Applying does not subscribe you to newsletters or advertising.
Our recruitment form is provided by Tally. Responses and uploaded files are stored with Tally on our behalf, not simply forwarded and immediately deleted. Tally states that form data is hosted in Europe, with Google Cloud hosting in Belgium and file storage through Cloudflare in the European Union. Its email notification provider, SendGrid, may process submission information in the United States. Notifications are sent to our Microsoft 365 recruitment mailbox.
Authorised staff involved in recruitment may review your application. Resume download links can provide access to uploaded documents, so these links and notification emails must be treated as confidential and not forwarded outside the recruitment process. Please do not include participant information, identity documents, tax details or screening certificates in this initial form. Obtain permission before providing a referee’s personal contact details.
The form uses Google reCAPTCHA to help prevent spam. This service may process device, network and interaction information for security purposes under Google’s privacy arrangements. Submitting an application does not authorise using your application answers or resume for advertising audiences or analytics events.
Recruitment records in Tally, email and any downloaded copies are subject to our retention and security requirements above. They are not automatically erased when a notification is sent. You may ask to access or correct your information, withdraw your application or request deletion by emailing info@thriveabilitycare.com.au or calling 1300 500 821. We will explain any records we are legally required or otherwise lawfully entitled to retain. Contact us if you need another way to apply.
Keeping your application for future roles
If you select the optional future opportunities checkbox, we may retain your application and resume for up to 6 months from the date you submit them, even if you are not selected for the role you first applied for. During this period, authorised recruitment staff may use those details to consider you for other suitable ThriveAbility Care roles and contact you about them.
This consent is separate from assessing your current application and from marketing. The checkbox is not selected by default. Choosing not to opt in will not disadvantage your current application. You can withdraw this consent at any time by emailing info@thriveabilitycare.com.au or calling 1300 500 821. We will then stop using your information to contact you about future roles.
At the end of 6 months, we will stop using your information for future opportunities unless you give fresh consent. We will take reasonable steps to delete or deidentify information no longer needed for a permitted purpose. Any records that must be retained for legal obligations or another lawful records purpose will be kept separately from active future recruitment use. Deletion and retention reviews must cover Tally responses, uploaded files, email notifications and downloaded copies, taking account of the service provider’s backup deletion process.