Privacy Policy

Blueblossom Health Services Pty Ltd respects your privacy and is committed to protecting the personal information, sensitive information and health information we collect, hold, use and disclose.

This Privacy Policy explains how we manage information about participants, families, representatives, supporters, workers, contractors, referrers and website visitors.

We are committed to managing information in accordance with the Privacy Act 1988, the Australian Privacy Principles, applicable privacy requirements, and our responsibilities as a NDIS provider.

Our Commitment to Privacy, Dignity and Confidentiality

Blueblossom Health Services is committed to protecting each participant’s privacy, dignity and confidentiality.

Privacy is not only about records. It also includes how we respect a person’s personal information, health information, physical environment, home, room and private spaces, personal care needs, possessions, relationships, choices, photos, videos and personal dignity during support.

We expect all employees, contractors and volunteers to always respect privacy and confidentiality.

Information We May Collect

We only collect information that is reasonably necessary to assess, plan, deliver, monitor and review our services.

• Participants contact details, date of birth, NDIS number where required, address or service location
• Emergency contacts, family, supporter, nominee or guardian details
• Support coordinator or plan manager details
• Health status, medical information, medication records, care plans and support plans
• Service intake, assessment, monitoring and review information
• External provider information, allied health reports or hospital discharge information
• Behaviour support information, incident reports, feedback, complaints and consent forms
• Photos or videos where consent has been provided
• Worker, contractor and volunteer information such as employment details, payroll details, qualifications, training records, screening information and emergency contacts

Health and Sensitive Information

Some information we collect may be health information or sensitive information.

Health information may include information about a person’s physical, mental or psychological health, disability, medical history, medication, care needs, support requirements, behaviour support needs or clinical risks.

Sensitive information may include information about a person’s cultural background, religious beliefs, disability, health, criminal history or other sensitive personal matters.

How We Collect Information

We may collect information directly from the participant, from family members, nominees, guardians or authorised representatives, from support coordinators, plan managers, referrers, hospitals, GPs, nurses, allied health professionals or other providers.

We may also collect information through website enquiry or referral forms, phone, email, SMS, written communication, intake, assessment, support planning, service delivery, feedback, complaints, incident reporting or reviews.

Why We Collect Information

We collect personal, sensitive and health information to support safe, responsive and appropriate service delivery.

• Respond to enquiries and referrals
• Assess whether we can provide suitable supports
• Confirm consent and authority
• Understand participant needs, risks, goals and preferences
• Develop and review care plans and support plans
• Provide nursing care, personal support, community access, domestic assistance, SIL, home and living supports, high intensity supports and other services
• Manage incidents, risks, complaints and feedback
• Meet legal, NDIS, audit, insurance, contractual and compliance obligations
• Train, guide and supervise workers involved in support
• Improve the quality and safety of our services

Consent

Before collecting and holding participant information, we seek consent where required.

Information is collected sensitively, lawfully and only for a specific purpose.

Website Forms and Referrals

Our website forms may collect information from participants, family members, support coordinators, plan managers, health professionals, referrers or other stakeholders.

Please do not use website forms for emergencies. If there is immediate risk to life, health or safety, call 000.

How We Use and Disclose Information

We only use or disclose information where it is necessary, authorised, consented to, or required by law.

• The participant and authorised representatives
• Family members, nominees or guardians where appropriate
• Support coordinators and plan managers
• GPs, hospitals, nurses, allied health professionals and behaviour practitioners
• Workers and contractors involved in providing support
• NDIA or NDIS Commission where required
• Auditors, insurers, legal advisers or compliance consultants
• Emergency services where there is immediate risk
• Government agencies where required or authorised by law

Access to Information

Participant and supporter information is only accessed by relevant staff or authorised personnel with a genuine need to know.

Staff must not access participant files unless required as part of their duties.

Information Storage and Security

Blueblossom Health Services takes reasonable steps to protect personal and health information from misuse, interference, loss, unauthorised access, modification or disclosure.

• Secure filing cabinets and locked rooms or secure storage areas
• Password-protected electronic records
• Restricted access permissions
• Confidentiality agreements
• Staff induction and privacy training
• Limiting access to staff who need information for their role
• Secure storage of participant and staff records
• Reviewing privacy and confidentiality arrangements
• Annual privacy audits

Accessing or Correcting Your Information

Participants, supporters and staff have the right to request access to personal information we hold about them. They may also request correction if they believe information is inaccurate, incomplete or out of date.

We will aim to respond within 2 working days where possible, and no later than 45 days after receiving the request, unless a lawful exception applies.

Photos, Videos and Images

We respect each person’s choice about being photographed or filmed.

We will seek consent before taking or using participant photos, videos or recordings.

Staff, Contractor and Volunteer Responsibilities

• Follow this Privacy Policy
• Only collect information that is necessary
• Store information securely
• Only access records needed for their role
• Keep participant, staff and stakeholder information confidential
• Respect privacy during personal care and service delivery
• Complete confidentiality agreements where required
• Participate in privacy, confidentiality and information management training
• Report privacy concerns or suspected breaches

Privacy Breaches

If we become aware of a privacy breach or suspected privacy breach, we will take steps to assess, contain and respond to the matter.

Privacy Audits and Review

Blueblossom Health Services reviews privacy and confidentiality arrangements annually through a privacy audit process.

Privacy Complaints or Concerns

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be published on our website.

References for Legal Context

• Privacy Act 1988 (Cth) and Australian Privacy Principles
• NDIS Practice Standards and Quality Indicators
• NDIS Code of Conduct
• Office of the Australian Information Commissioner privacy guidance