Privacy Policy.

1. About this policy

This Privacy Policy explains how Technic3000 Pty Ltd ("Technic Software", "we", "us", "our") collects, holds, uses and discloses personal information, and how you can access or correct your information or make a complaint.

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and, where relevant, the additional requirements that apply to information collected in connection with NDIS supports and services.

This policy applies to personal information collected through our websites, applications, and services, and in the course of our business operations.

2. What information we collect

The information we collect depends on how you interact with us. It may include:

• Contact and identity information - name, email address, phone number, organisation.
• Account information - login credentials, role, preferences.
• Service-related information - information provided in the course of using our platforms, including information relevant to supports, goals, plans, and coordination activities where applicable.
• Sensitive information - where relevant to the services provided (for example, disability status or health-related information connected to NDIS supports), collected only where necessary and with appropriate consent or other lawful basis.
• Technical information - device, browser, and usage information collected automatically when you use our websites or applications.

We only collect sensitive information where it is reasonably necessary for our functions or activities, and in accordance with the APPs.

3. How we collect information

We collect personal information directly from individuals, organisations, and authorised representatives where possible. We may also collect information:

• Through the ordinary operation of our platforms and services
• From third parties you have authorised to share information with us (for example, a support coordinator, plan manager, or other service provider)
• Through publicly available sources, where appropriate

4. How we use information

We use personal information to:

• Provide, operate, and improve our platforms and services
• Support coordination, compliance, and administrative functions relevant to the services provided
• Communicate with you about your account or our services
• Meet legal, regulatory, and contractual obligations
• Maintain the security and integrity of our systems
• Where permitted, develop and improve our products

We do not sell personal information, and we do not use sensitive information for purposes beyond what it was collected for without appropriate consent or a valid legal basis.

5. How we disclose information

We may disclose personal information to:

• Service providers and contractors who support our operations (for example, cloud hosting, infrastructure, and technical support providers), under contractual obligations to protect that information
• Other individuals or organisations you have authorised us to share information with (for example, a support coordinator, provider, or plan manager you are connected with through our platforms)
• Regulatory bodies or authorities where required by law
• A purchaser or prospective purchaser in connection with a sale, merger, or restructure of our business, subject to appropriate confidentiality protections

We do not disclose personal information to third parties for their own marketing purposes.

6. Where your information is stored

Our infrastructure is hosted in Australia. We do not store personal information overseas as part of our standard infrastructure. Where a third-party service we rely on processes information outside Australia as part of its normal operation, we take reasonable steps to ensure that provider maintains privacy and security protections consistent with this policy, and we assess third-party providers before relying on them.

7. How we protect information

We apply security and privacy-by-design principles across our systems, including:

• Encryption of information in transit and at rest
• Role-based access controls and least-privilege access
• Ongoing monitoring for security threats and anomalies
• Documented incident response processes
• Regular review of our security practices, guided by ISO/IEC 27001 principles
• Assessment of third-party providers before they are given access to our systems or data

No system can guarantee absolute security, but we take proactive, documented steps to reduce risk and to detect and respond quickly if something goes wrong.

8. How long we keep information

We retain personal information only for as long as necessary to fulfil the purposes it was collected for, or as required by law, regulatory obligations (including NDIS record-keeping requirements), or legitimate business purposes. When information is no longer required, we take reasonable steps to securely destroy or de-identify it.

9. Access, correction, and complaints

You have the right to request access to the personal information we hold about you, and to request correction if it is inaccurate, out of date, or incomplete.

If you have a concern about how we have handled your personal information, please contact us using the details below. We will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, you may raise your concern with the Office of the Australian Information Commissioner (OAIC).

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. The current version will always be available on this page, with the date it was last updated shown above.

11. Contact us

If you have questions about this policy, or about how we handle your personal information, please contact us.