Participant Privacy Collection Notice

Your privacy matters. Keana Care collects only information reasonably needed to assess, plan, safely deliver, review and invoice your supports. This notice explains our collection practices; it is not blanket consent.

Keana Care Pty Ltd (trading as Keana Care) collects and holds your information. The Director acts as Privacy Officer at startup. Contact us using the email or mobile shown above or in the footer.

Sensitive information: we generally collect health, disability or other sensitive information with your consent and only when reasonably necessary for our work, unless the law permits another basis.

We usually collect information directly from you or your authorised representative. With authority, or where otherwise lawful, we may receive it from a referral source, family member, advocate, support coordinator, plan manager, health professional, another provider, emergency service or regulator. Workers also create factual service records and observations while providing support.

Required or authorised collection: some information may be required or authorised by NDIS, tax, work health and safety, child protection, court or other laws. Where practicable, we will tell you the specific requirement when it applies.

You may decline optional information. Without essential identity, funding, health, risk or emergency details, we may be unable to start or safely tailor a service or obtain payment. We will explain the effect and consider a less intrusive alternative where practicable.

7. Overseas disclosure — Keana Care does not currently intend to disclose participant information to overseas recipients in ordinary service delivery. If that changes, we will assess applicable requirements and, where practicable, tell you the recipient country before disclosure.

We use access controls, secure passwords, need-to-know access and locked paper storage. We retain records for applicable legal, contractual, NDIS, insurance and service needs, then securely destroy or de-identify them when no longer required. Suspected data breaches are contained, assessed and notified where required.

Ask our Privacy Officer to access or correct your information. We may verify your identity and may lawfully refuse or limit access in some cases; where permitted, we will explain why and available review options. Ask us for the full Privacy and Confidentiality Policy.

11. Consent, choice and accessible communication — this is not blanket consent. We record information-sharing choices and obtain consent where required. Optional consent may be withdrawn, subject to legal, payment and safety duties. Ask for an interpreter, Easy Read version, advocate, support person or another reasonable adjustment.

Control note: Keana Care applies applicable privacy laws, including the Privacy Act 1988 and Australian Privacy Principles where they apply, and uses the APPs as its minimum operational privacy standard. This notice also supports the NDIS Code of Conduct obligation to respect privacy.