What we collect, and what we don’t

Who this is about

Waves of Ability Pty Ltd (ABN 66 675 057 388), a registered NDIS provider operating in Sydney, New South Wales. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and under the NDIS Practice Standards.

This page covers this website. Information you give us once you’re a participant — support notes, plans, incident records — is covered by your service agreement, not this page.

What this website collects

Only what you type into a form. There is nothing collected in the background.

If you send an enquiry

The participant’s name and date of birth, your name and relationship to them, your email and phone number, your suburb and postcode, how the NDIS plan is managed, which supports you’re interested in, how you heard about us, and anything you write in the message box.

We collect it to call you back and work out whether we’re the right fit. Nothing more. Only give us what you’re comfortable giving — the only fields we genuinely need are your name, email and phone. If you’d rather not put a child’s details in a web form, call us instead on 0413 221 871.

If you apply for a job

Your name, email, phone, postcode, which clearances you hold, your availability, why you want the work, and your résumé if you attach one.

What we don’t do

• No Google Analytics, no Meta pixel, no tracking of any kind.
• No advertising, and no profiles built about you.
• This site sets no cookies. There’s no cookie banner because there’s nothing to consent to.
• Our fonts are served from our own domain rather than loaded from Google, so visiting this site doesn’t tell anyone else you were here.
• We never sell or rent personal information. Not to anyone, ever.

Where your information goes

Enquiries and applications reach us through a small number of services we rely on:

• Airtable — our internal system, where an enquiry becomes a record so nothing gets lost. Only our staff can see it.
• Resend — sends us the notification email so we know you’ve been in touch.
• Google Workspace — our email.
• Vercel — hosts this website. Their servers keep standard access logs, which include IP addresses, for a short period.

These services store data outside Australia, mostly in the United States. We’re telling you that because Australian Privacy Principle 8 requires it, and because you deserve to know before you type a child’s name into a form. Each provider is bound by its own contractual and legal obligations, but information held overseas may be subject to the laws of that country.

Beyond those services, we only share information where you’ve asked us to (with a support coordinator or plan manager, for example), where we’re required to by law, or where there’s a serious risk to someone’s safety.

How long we keep it

If you become a participant, your records are kept for as long as the NDIS requires us to hold them. If your enquiry doesn’t go ahead, we keep it for one month and then delete it. Unsuccessful job applications are kept for twelve months in case something suitable comes up, and you can ask us to delete yours sooner.

Keeping it safe

Access is limited to the staff who need it. Our systems require individual accounts, and everything between your browser and this site is encrypted. No system is perfect, and we’d rather say that than claim otherwise — but if something did go wrong, we’d tell you, as the Notifiable Data Breaches scheme requires.

Photos

Every photo on this website is of a real person we support or someone who works here, used with their written consent, or their guardian’s. That consent can be withdrawn at any time — email us and the photo comes down. We don’t publish a participant’s surname or any identifying detail alongside a photo.

Seeing it, fixing it, deleting it

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email admin@wavesofability.com.au or call 0413 221 871. We’ll respond within 30 days and we won’t charge you for it.

If you’re unhappy with how we’ve handled it

Tell us first — admin@wavesofability.com.au — and we’ll come back to you within 30 days. If you’re not satisfied with our answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

For anything about the quality or safety of NDIS supports, you can also contact the NDIS Quality and Safeguards Commission on 1800 035 544.