Privacy Policy

Effective 6 March 2026   |   ABN: 74 673 353 994

Red Dirt Consulting Pty Ltd (RDC) values the privacy of every person and is committed to protecting the privacy and dignity of all clients and participants. This Privacy Policy explains how we collect, store, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

For NDIS participants, this policy also operates in accordance with the National Disability Insurance Scheme Act 2013 (Cth).

1.  What Information We Collect

We collect personal information that is necessary for the delivery of our services. This may include:

  • Full name, date of birth, and contact details

  • Health and medical information relevant to the services being provided

  • NDIS plan details, funding information, and support goals (where applicable)

  • Medicare referral details (where applicable)

  • Emergency contact information

  • Information about a client's support network, including family members, carers, and other service providers

  • Progress notes, session records, reports, and assessments

  • Photos and/or videos taken during appointments, where consent has been provided

We collect only the information that is relevant and necessary for the safe and effective delivery of services to each individual.

2.  How We Collect Information

Personal information is collected directly from the client or their authorised representative, and may also be received from:

  • Referrers such as GPs, specialists, schools, or other health professionals

  • The NDIA or NDIS Commission (for NDIS participants)

  • Other members of the client's care team, with appropriate consent

  • Medicare or other funding bodies (where applicable)

Where possible, we collect information directly from the person it concerns. If we collect information from a third party, we will take reasonable steps to notify the individual unless it is impractical to do so or the law permits otherwise.

3.  How We Use Your Information

Personal information is used only for the purposes for which it was collected. This includes:

  • Planning and delivering safe, effective, and person-centred services

  • Communicating with the client, their representative, and their care team

  • Preparing reports, assessments, and funding applications

  • Meeting our legal and regulatory obligations, including mandatory reporting requirements

  • Billing and administration, including invoicing and claiming through NDIS, Medicare, or private payment

  • Reviewing and improving the quality of our services

We will not use personal information for any purpose other than those outlined above without first obtaining consent, unless required or authorised by law.

4.  Sharing Your Information

Personal information will not be shared with anyone outside RDC without the consent of the client or their authorised representative, except in the following circumstances:

  • Where sharing is required or authorised by law

  • Where sharing is necessary to prevent a serious and imminent threat to the health or safety of any person

  • Where disclosure is required by the NDIA, NDIS Commission, or another regulatory body in the course of their functions

  • Where the client or their representative has provided specific consent for information to be shared with nominated individuals or organisations (such as a school, GP, Support Coordinator, Plan Manager, or other health professionals)

We take reasonable steps to ensure that any third party receiving personal information handles it in accordance with the Australian Privacy Principles.

5.  Photos, Videos & AI Tools

Where consent has been provided, RDC may take photos and/or videos during appointments for the following purposes only:

  • Creating visual supports to assist the client

  • Communicating the client's needs, for example in relation to assistive technology

  • Reviewing sessions and tracking progress over time

  • Supporting funding applications on the client's behalf

Once images or videos have served their intended purpose, they will be securely destroyed.

RDC may also use AI-assisted voice-to-text and summarisation tools to generate progress notes. This is done only where consent has been provided and in compliance with our privacy obligations.

Consent for photography, video, and AI tools is obtained separately and may be withdrawn at any time by notifying RDC in writing.

6.  Storage & Security

RDC takes the security of personal information seriously. All information is:

  • Stored in a locked physical file when held in paper form

  • Electronically encrypted and held in cloud-based systems that comply with the Australian Privacy Principles

  • Accessible only to authorised RDC staff and contractors who require it for service delivery

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Where personal information is no longer required, we will take reasonable steps to destroy or de-identify it securely.

7.  Cultural Sensitivity

RDC is committed to handling all personal information with cultural sensitivity and respect. We recognise that for many clients — particularly Aboriginal and Torres Strait Islander peoples and clients from culturally and linguistically diverse backgrounds — the collection, storage, and sharing of personal information carries particular significance.

We will always seek to understand and respect individual and community preferences regarding the handling of personal information, and will take these into account in our practice.

8.  Accessing & Correcting Your Information

You have the right to request access to the personal information RDC holds about you, and to request corrections if you believe information is inaccurate, incomplete, or out of date.

To make an access or correction request, please contact us using the details below. We will respond within a reasonable timeframe. In some circumstances, we may be unable to provide access — for example, where doing so would impact the privacy of another individual or where access is restricted by law. We will explain our reasons if this is the case.

9.  Complaints

If you have a concern about how RDC has handled your personal information, please contact us in the first instance so we can address your concern promptly.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

NDIS participants may also raise privacy concerns with the NDIS Quality and Safeguards Commission:

10.  Changes to This Policy

RDC may update this Privacy Policy from time to time to reflect changes in our practices or legislative requirements. The current version will always be available on our website and upon request. We will notify clients of any material changes where practicable.

11.  Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us:


Our Commitment

We have implemented safeguards to ensure the safety and security of all personal information we hold. We adhere to ethical standards for handling personal information, prioritising the individual's rights and interests at all times. Personal information is not shared with anyone unless required by law or with your consen