NDBS Pty Ltd (ABN: [INSERT ABN]) (“NDBS”, “we”, “us”, “our”) is committed to protecting the privacy of all individuals whose personal information we collect, use, store and disclose.
NDBS provides independent Building Works Project Management services for NDIS participants and complex home modification projects.
In delivering these services, we necessarily collect and handle personal information including sensitive information relating to disability, about our clients, their families, occupational therapists, support coordinators, and other parties involved in home modification projects.
This Privacy Policy explains how NDBS handles personal information in accordance with:
As a company operating in the disability services sector, NDBS is an APP entity and is bound by the Australian Privacy Principles regardless of annual turnover.
When providing project management services to or on behalf of NDIS participants, we may collect:
When working with OTs, allied health practitioners and support coordinators, we may collect:
When you visit www.ndbs.net.au or submit a form on our website, we may collect:
We collect personal information:
NDBS uses personal information only for the purposes for which it was collected, or for directly related purposes that you would reasonably expect.
These include:
We will not use your personal information for direct marketing without your express consent.
You may withdraw consent for marketing communications at any time by contacting us at office@ndbs.net.au or using the unsubscribe function in any email we send.
NDBS regularly handles sensitive information as defined under the Privacy Act 1988, including information about disability, health and medical conditions.
This category of information receives a higher level of protection under the Australian Privacy Principles.
We will only collect, use and disclose sensitive information where:
NDBS recognises that disability-related information is among the most sensitive categories of personal data.
We treat it with the highest standard of care and discretion at all times.
NDBS may disclose personal information to the following parties, only to the extent necessary for the purposes described in Section 3:
NDBS will not:
Where we rely on consent to collect or use your personal information, we will obtain that consent clearly and explicitly. You have the right to withdraw consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before withdrawal, but may affect our ability to deliver certain services.
For participants who are minors or who have diminished capacity, we will seek consent from the parent, guardian or authorised nominee as appropriate.
NDBS retains consent records for a minimum of 7 years from the date of last service delivery, consistent with the NDIS Practice Standards and general Australian record-keeping obligations. For participants who were minors at the time of service, records are retained until the participant turns 25 or for 7 years from last service — whichever is longer.
All personal information collected and managed by NDBS is stored on Microsoft OneDrive, linked to the company’s Microsoft 365 Business subscription. Microsoft stores Australian business data in its Australian datacentres located in New South Wales and Victoria, in accordance with its Australian Data Residency commitments.
Our Microsoft 365 Business subscription provides:
NDBS retains personal information for as long as necessary to deliver services and meet our legal obligations:
When information is no longer required, it is securely deleted from our systems.
NDBS takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include:
Under the Australian Privacy Principles, you have the right to request access to personal information NDBS holds about you, and to request correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading.
To make an access or correction request, please contact us in writing at:
Privacy Officer, NDBS Pty Ltd
Email: office@ndbs.net.au
Phone: (08) 8233 5895
Post: Level 30, RAA Place, 91 King William St, Adelaide SA 5000
We will respond to access and correction requests within 30 days.
In some circumstances we may decline a request — if so, we will explain why in writing and advise you of your right to complain to the Office of the Australian Information Commissioner (OAIC).
We do not charge a fee for making an access or correction request.
NDBS is subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988. In the event of a data breach that is likely to result in serious harm to any individual whose information is involved, NDBS will:
Given the sensitive nature of the disability-related information we handle, NDBS treats any actual or suspected data breach as a serious incident requiring immediate response. We maintain internal breach response procedures consistent with OAIC guidance.
To report a suspected privacy breach or security incident involving your information, contact us immediately at office@ndbs.net.au or (08) 8233 5895.
Our website (www.ndbs.net.au) uses cookies — small text files stored on your device — to improve your experience and analyse how the site is used. We use:
You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality. We do not use cookies for behavioural advertising or sell cookie data to third parties.
If you subscribe to the NDBS mailing list, we will use your name and email address to send you updates, sector news and resources relevant to NDIS home modifications. We use Mailchimp (operated by Intuit Inc.) to manage our mailing list.
By subscribing, you consent to your name and email address being transmitted to Mailchimp’s servers. Mailchimp is subject to its own privacy policy. Your mailing list data is used only for sending NDBS communications and is never shared with or sold to third parties.
You may unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us at office@ndbs.net.au. On unsubscription, your data will be removed from our mailing list within 30 days.
If you believe NDBS has mishandled your personal information or breached your privacy, we encourage you to contact us in the first instance so we can attempt to resolve the matter promptly.
Please direct privacy complaints to:
Privacy Officer, NDBS Pty Ltd
Email: office@ndbs.net.au
We will acknowledge your complaint within 5 business days and endeavour to resolve it within 30 days. If you are not satisfied with our response, you may escalate your complaint to:
NDBS reviews this Privacy Policy at least annually and whenever our information handling practices change materially. The current version is always published at www.ndbs.net.au/privacy-policy.
We will notify subscribers of material changes to this policy by email prior to the changes taking effect.
For any privacy-related enquiries, requests or concerns, please contact:
NDBS Pty Ltd — Privacy Officer
Level 30, RAA Place, 91 King William St, Adelaide SA 5000
Email: office@ndbs.net.au
Phone: (08) 8233 5895
Website: www.ndbs.net.au
This Privacy Policy was prepared with reference to the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Privacy and Other Legislation Amendment Act 2024, the NDIS Act 2013, the NDIS Practice Standards, and the Notifiable Data Breaches scheme. It is intended as a general guide and does not constitute legal advice. NDBS recommends seeking independent legal advice to ensure full compliance with all applicable obligations.
A no-obligation 20-minute call with Nader. Honest conversation, no sales pitch.
Practical updates and tips from NDBS — straight to your inbox.
No jargon — just tell us your situation. We'll respond within one business day.
You have the right to change at any time. We handle the transition — you just give us the go-ahead.
We'll review your referral and be in touch within one business day.
