Privacy policy
Last updated 15 September 2026.
This policy explains how positivebehavioursupport.au ("we", "us") handles personal information. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
When you use our forms we collect:
- your name, phone number, email address and postcode
- who the support is for, and your relationship to them
- what kind of behaviour support is needed, how soon, and how their NDIS plan is funded and managed
- anything else you choose to tell us, such as age range, where support would happen and practitioner preferences
- if you're referring someone for work: your organisation and role, and the participant's first name or initials
Some of this is sensitive information under the Privacy Act, because it relates to disability and support needs. We only collect it with your consent, and only because it's needed to connect you with the right practitioner.
We also collect technical information when you visit, such as pages viewed, the website or ad that brought you here, device type and IP address, using cookies and similar tools from Google, Meta and Microsoft. This helps us understand what's working and measure our advertising. Session recordings mask everything typed into our forms.
How we use it
- to connect you with a registered behaviour support provider who may be able to help
- to follow up and check you were contacted
- to send you a confirmation of your request
- to send you occasional guides by email, only if you ticked the box to say yes
- to run, protect and improve the website, including preventing spam and fraud
Who we share it with
Behaviour support providers. With your consent, we pass your details to a registered NDIS behaviour support provider near you so they can contact you. It goes to one provider at a time. If that provider can't help, we may pass your details to another registered provider, up to 3 in total. Providers pay us for these introductions. Each provider handles your information under its own privacy policy and its obligations as a registered NDIS provider.
Our service providers. We use trusted companies to host the website, store data, send email, prevent spam and measure advertising. Some of them store or process data outside Australia, including in the United States. We choose providers with appropriate security and privacy protections.
We don't sell or give your details to anyone else for their own marketing. We may disclose information where the law requires it.
Your choices
- You can withdraw your consent at any time. We'll stop passing your details on and let any provider we've already introduced you to know.
- You can ask to see or correct the information we hold about you.
- You can ask us to delete your information, unless we need to keep it by law.
- You can unsubscribe from our emails using the link in any email.
To do any of these, email hello@positivebehavioursupport.au. We'll respond within 30 days.
Children
If the support is for someone under 18, a parent, guardian or authorised representative should complete our forms on their behalf.
How we protect it and how long we keep it
Information is stored with reputable cloud providers using encryption in transit and access controls. We keep enquiry records for as long as we need them to provide the service and meet our legal obligations, then delete or de-identify them.
Complaints
If you're unhappy with how we've handled your information, email us first and we'll try to fix it. If you're still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.