YOUR INFORMATION. YOUR PRIVACY.
Privacy Statement.
Connecting Support Services
Effective date: 12 November 2026
About this statement
Connecting Support Services is a family-run disability support business serving Hervey Bay and Maryborough, Queensland. In this statement, “we”, “us” and “our” mean Laura Elisia Brown, trading as Connecting Support Services, ABN 58 176 485 521.
We respect your privacy and are committed to handling personal information professionally and responsibly in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This statement explains how we collect, use, hold and share personal information through our website, service enquiries, recruitment and the delivery of our supports. Personal information is information or an opinion about an identified person, or someone who can reasonably be identified. Health and disability information can be sensitive information and requires additional care.
Information we collect
We collect information reasonably necessary for our work. The information depends on your relationship with us and may include:
Your name, contact details, location and communication preferences.
Your representative's details and their authority to act for you.
Your support interests, preferences, goals and availability.
Relevant health, disability, medication and safety information needed to assess or provide appropriate supports.
Funding and service information, including relevant NDIS plan details, service agreements and billing information when needed for onboarding and service delivery.
Records relating to supports, feedback, complaints and incidents.
Recruitment information such as resumes, qualifications, work history, availability and relevant screening and training information.
Technical website information such as IP address, browser type and pages visited, depending on our website systems.
Our initial participant enquiry form asks for a brief overview. Please do not submit your full NDIS plan, Medicare number, tax file number, banking details or identity documents through that form. If further information is needed, we will explain why and arrange an appropriate way to collect it.
How we collect information
We usually collect information directly from you through forms, conversations, emails, meetings and service delivery. With your consent or other lawful authority, we may also collect relevant information from your authorised representative, support coordinator, plan manager, health professionals or others involved in your supports.
Where required, we seek your consent before collecting sensitive information, unless an exception under the law applies. If you provide information about another person, please ensure you have their permission or authority to do so.
You may make a general enquiry anonymously or use a pseudonym where practical. We will need enough accurate information to contact you, arrange services and provide safe supports. If you choose not to provide necessary information, we may be unable to progress your enquiry, application or services.
Why we use information
We use personal information to:
Respond to enquiries and arrange meet and greets.
Assess whether our services are suitable and plan supports with you.
Provide, coordinate and review supports and communicate with people you authorise.
Administer service agreements, invoices and funding arrangements.
Assess job applications and check relevant experience, qualifications and screening.
Manage feedback, complaints, incidents and service quality.
Meet applicable legal, safety, recordkeeping and reporting responsibilities.
Operate and protect our website and business systems.
We do not sell your personal information. Enquiring about services does not automatically subscribe you to promotional emails. If we send promotional communications, we will obtain consent where required and provide a way to unsubscribe.
When we share information
We share personal information only where reasonably necessary for the purpose for which it was collected, with your consent, or where otherwise permitted or required by law. Depending on the circumstances, recipients may include:
Workers who need the information to perform their role.
Your authorised representative and people involved in your supports, such as your support coordinator, plan manager or treating professionals.
Providers who help us operate our website, email, secure records, scheduling, billing and other business systems.
Professional advisers, insurers, regulators or government agencies where appropriate and lawful.
Emergency services where disclosure is permitted or required to respond to a serious threat to health or safety.
We aim to limit information shared to what is needed. Being a family member does not automatically give someone access to your personal information; we consider your consent and any relevant legal authority.
Keeping information secure and retaining records
We take reasonable steps to protect information against misuse, interference, loss and unauthorised access, modification or disclosure. Access is limited to people who need information for their work, and we expect workers and service providers to respect confidentiality.
We retain information for as long as needed for the purpose for which it was collected and to meet applicable legal and recordkeeping obligations. When it is no longer needed and we are not required to keep it, we take reasonable steps to securely destroy or de-identify it.
No internet transmission or storage system can be guaranteed completely secure. Please contact us if you would prefer to discuss another way to provide sensitive information.
Overseas storage and disclosure
Where we disclose personal information overseas, we will meet the applicable requirements of Australian privacy law, including taking reasonable steps to protect information where required. This statement does not waive your privacy rights or automatically release us from responsibility for information handled overseas.
Website service providers
Our enquiry and recruitment forms use FormSubmit to process the information you submit and email it to management. FormSubmit retains submission details for 30 days; uploaded files are not retained in its submission archive. Our business email uses Titan. The website is hosted through Crazy Domains, and loads fonts from Google Fonts and map resources from OpenStreetMap and unpkg. These providers receive the technical information needed to deliver their services.
These services may process information outside Australia. Their processing locations are not fully identified in this statement. Contact management before submitting sensitive information if you would like to discuss another way to communicate.
Optional Meta marketing measurement
If you accept marketing, we use Meta Pixel on our main marketing page to record a general page visit, measure advertising and help Meta show relevant advertising. Meta may receive technical information such as your IP address, browser and device details, page address and cookie identifiers. This information is not anonymous and may be processed outside Australia.
Our support enquiry, recruitment and privacy pages do not load our Meta Pixel. Our website’s marketing measurement does not send enquiry answers, recruitment fields, attachments or form-submission events to Meta.
You can accept or decline marketing without affecting access to our services or forms. No Meta Pixel script is loaded before you choose to accept marketing. When your browser permits, we remember your choice using browser storage and a first-party preference cookie for future visits to the marketing page; that choice does not enable the tool on our enquiry, recruitment or privacy pages.
To change your choice or withdraw permission, use Marketing privacy choices. Declining stops future Pixel collection from our website and reloads the marketing page to apply the change if the tool was active. Withdrawing permission does not remove information already shared with Meta. See Meta’s Privacy Policy for its information handling and advertising choices.
Cookies and website tools
Our website may use cookies or similar technologies to support its functions. Depending on the tools enabled, technical information may also be collected about how the website is used.
You can manage cookies through your browser settings. Blocking some cookies may affect website functions. Our optional Meta marketing measurement and choices are explained above; it is enabled only after you accept marketing.
Accessing or correcting your information
You can contact us to request access to personal information we hold about you or to ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading. We may need to verify your identity or authority before responding.
We will respond within a reasonable period. If access or correction is refused as permitted by law, we will explain our decision and available complaint options in writing, except where it would be unreasonable to do so. There is no charge to make a request. If a reasonable access charge is proposed, we will explain it in advance; we do not charge for correcting information.
Privacy concerns and complaints
If you have a privacy question, believe your information has been mishandled or want to report a suspected data breach, please contact our Privacy Contact:
Connecting Support Services
Privacy Contact: Management
Phone: 0483 647 938
Email: enquiries@connectingsupportservices.au
For written correspondence, contact management by phone or email to arrange the appropriate delivery details.
We will acknowledge your complaint, review the concern and aim to respond within 30 days. If more time is needed, we will explain why and keep you informed. You may ask a representative to assist you or request communication in a format that works for you.
If you are unhappy with our response, or we have not responded within 30 days, you can lodge a written privacy complaint with the Office of the Australian Information Commissioner (OAIC):
Website: OAIC privacy complaints
Enquiries phone: 1300 363 992
Postal address: GPO Box 5288, Sydney NSW 2001
Responding to data breaches
If we become aware of a suspected privacy breach, we will act promptly to assess it, limit harm and take appropriate remedial action. Where the Notifiable Data Breaches scheme applies, we will take all reasonable steps to complete an assessment of a suspected eligible data breach within 30 calendar days. If notification is required, we will notify the OAIC and affected people as soon as practicable and explain steps they can take to protect themselves.
Changes to this statement
We may update this statement as our services, systems or legal obligations change. The current version will be available on our website with its effective date. Contact us if you would like a copy or need help understanding it.