Privacy Policy
Carefully Planned - July 2023
Capitalised words and phrases are defined in the “Definitions” section of this document unless otherwise specified.
Parties
Provider means Carefully Planned Pty Ltd (ABN 97 653 071 606), contactable on support@carefullyplanned.com.au.
Individual means you, the person using Provider’s Service, contactable on any email communicated to Provider.
1. Introduction
While providing the Services, Provider collects Personal Information about Individual. This document describes how Provider collects, stores, uses and discloses Personal Information.
2. Types of Information Collected
Provider may collect the following types of Personal Information about Individual:
- names;
- addresses;
- email addresses;
- dates of birth;
- telephone numbers;
- computer device information;
- IP addresses;
- details of products or services that Provider has provided to Individual;
- whatever Personal Information is included in content Individual posts on the Service or on the website of Provider;
- records of, or notes on communications between Provider and Individual; and
- browser cookies.
3. Sensitive Information
Provider may collect sensitive information about Individual, including Personal Information about Individual’s:
- health, health services, health records or health preferences; and
- ethnic origin.
4. How Information Is Collected
Provider may collect Personal Information about the Individual using:
- information from Provider’s Service;
- the Individual’s communications with Provider; and
- automated analysis of Individual’s use of Provider’s services.
5. How Information is secured
Carefully Planned is committed to keeping your information secure.
Data securely stored within Australia and at Rest. Your data is encrypted when stored on the server and during transfer with Secure Socket Layer (SSL) encryption. Access to chat messages and other data requires a valid login and password. Your messages and data will be stored in your account until you delete them.
The app is hosted on cloud infrastructure from Amazon Web Services with 99.99% uptime, industry leading back up, disaster recovery and data integrity.
We have AWS standard identity, device and process management that ensure only authorized individuals can access the information.
6. Deletion of Personal Information
Provider deletes Personal Information when Individual requests its deletion and it is reasonable to comply.
7. Disclosures of Information
Provider may disclose Personal Information to:
- third party service providers;
- payment systems operators;
- Provider’s employees;
- professional advisors; and
- regulatory bodies.
8. Disclosing Information Outside Australia
Provider may disclose Personal Information to organisations outside of Australia such as payment providers located in United States.
By using the Services, Individual consents to the disclosure of their Personal Information to overseas recipients.
Provider will make a good faith effort to ensure that overseas recipients deal with Personal Information in a way that is consistent with the principles of the Privacy Act, but Individual will not have the same rights in relation to overseas recipients who handle their information as they would with Australian recipients.
9. Privacy Contact
Questions or complaints from Individual relating to Provider’s use of Personal Information should be directed to Provider’s privacy officer, contactable on support@carefullyplanned.com.au.
When Individual communicates a complaint to Provider, Provider will respond within two weeks, and seek to resolve the complaint entirely within one month if the nature of the complaint permits it.
Provider’s privacy officer will make a reasonable effort to address complaints or questions of Individual, and where the privacy officer is unable to do so, the privacy officer will attempt to explain why it is unable to do so.
If Individual is unsatisfied with the outcome of the complaints process, Individual may complain to the (OAIC)(https://www.oaic.gov.au).
10. Accessing Information
Under privacy law, Individual has the right to contact Provider to modify or obtain Personal Information held about them by Provider.
11. Changes To This Policy
Provider reserves the right to make changes to this document in the future, either to:
- comply with changes in Australian privacy law, or
- to reflect changing business practices.
It is the responsibility of Individual to regularly check this document for such changes.
Definitions
Personal Information
means any information that is categorised as ‘personal information’ or ‘personal data’ under privacy law, or is otherwise regulated by privacy law.
Privacy Act
means the Privacy Act (1988) Cth.
Service, Services
means the services provided by Individual to Provider, including a application for the storage and review of NDIS records.
