Last updated 12 Oct 2026
Privacy policy
Last updated
We collect only what you give us through our forms, such as your name, email and organisation, and use it to reply, review applications and run the service. We don't sell it. You can ask to see or correct it, or complain, by emailing [email protected].
This policy explains how Autonomy Ops ("we", "us"), the company behind Autonomy Care, handles personal information. We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What do we collect?
- When you contact us or book a demo: your name, email, organisation and what you tell us. Your phone number, role, state and team size if you give them.
- When you apply to use Autonomy Care: your organisation's name, ABN, state and NDIS registration, and your name and email. Your phone number, team size and a note if you give them.
- Where you came from: if you arrived from a campaign link or another website, the campaign name and that website's name, sent with a form you choose to send. Never the full address of the page you came from.
- To stop misuse: a scrambled form of your IP address with website enquiries, never the address itself.
What about information in Autonomy Care?
NDIS providers use Autonomy Care to keep information about their staff and the people they support. We look after that information for the provider, and only use it to run the service for them. If your information is in Autonomy Care because a provider supports you or employs you, ask that provider first.
How do we use it?
To reply to you, arrange demos, review applications to use Autonomy Care, set up and support provider accounts, keep our systems secure, and meet our legal obligations. We only send you updates if you ask for them, and you can stop them at any time. We don't sell personal information.
Who do we share it with?
Companies that help us run the website and the service, such as hosting, email, text messages and the security check on our application form (Cloudflare Turnstile). Some of them may store or process information outside Australia. We only share what they need to do that job.
How long do we keep it?
- Website enquiries: while we're in touch with you, then they're deleted 90 days after we close them.
- Applications we decline: deleted after 90 days, unless you update and resend them.
- Applications we approve become your organisation's account.
Can I see or correct my information?
Yes. Email [email protected] and tell us what you'd like to see or change. We'll reply within 30 days.
How do I make a privacy complaint?
Email [email protected]. We'll look into it and reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
What if something goes wrong?
If a data breach is likely to cause serious harm, we'll tell the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Will this policy change?
We may update it. The date at the top of this page shows when it last changed.