Privacy Policy

Last updated: 11 November 2026

About this policy

Fijiana Enterprises (ABN 79 640 614 292) (“we”, “us”, “our”) provides NDIS and aged care support in Griffith, New South Wales. We are committed to handling personal information openly and responsibly, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains:

• the kinds of personal information we collect and hold;
• how we collect, store and protect it;
• why we collect it, and how we use and share it;
• how you can access or correct the information we hold about you;
• how to make a privacy complaint, and how we will handle it; and
• whether information is likely to be disclosed outside Australia.

As an NDIS provider, we also follow the NDIS Code of Conduct, which includes respecting the privacy of the people we support.

Information we collect

Personal information is information or an opinion about an identified person, or a person who is reasonably identifiable. We only collect personal information that is reasonably necessary to provide our services, or that we are required by law to collect.

When you contact us or use the forms on this website, we may collect:

• your name, email address and phone number;
• your organisation and relationship to a person being referred (referral form);
• the type of support you are interested in or requesting;
• your preferred contact method; and
• the content of any message, referral or feedback you send us.

If you receive support from us, we may also collect:

• your date of birth, address and emergency contacts;
• details of family members, carers, nominees or other people you would like involved in your support;
• your support needs, goals, routines and preferences;
• information about your NDIS plan or aged care funding that relates to our supports; and
• information needed to invoice for our services.

Sensitive information

Some personal information is “sensitive information” and has extra protection under the Privacy Act. It includes health and disability information, racial or ethnic origin, religious beliefs and criminal records.

To provide safe, person-centred support, we may need to collect health and disability information, information about your cultural and linguistic background (including languages you speak), and information about other supports you receive. We only collect sensitive information with your consent, or where the law requires or allows it.

Our website forms are deliberately designed not to collect diagnoses, medical records, NDIS numbers or NDIS plan documents. Please do not include this information in website forms. We will discuss anything personal with you directly.

How we collect information

Wherever reasonable and practical, we collect personal information directly from you or your authorised representative: through our website forms, by phone or email, in writing, or in person.

With your consent, we may also collect information from other people involved in your support, such as your support coordinator, plan manager, health professionals or family. When we collect personal information, we will take reasonable steps to tell you why we are collecting it and how it will be handled.

Staying anonymous

You can choose not to identify yourself, or to use a different name, when it is lawful and practical. For example, you can make a general enquiry or give feedback anonymously. To provide you with supports, however, we need to know who you are, and we will let you know when this is the case.

How we use information

We use personal information to:

• respond to your enquiry, referral or feedback;
• plan, deliver and review your supports;
• communicate with you and the people you have asked us to involve;
• invoice for our services;
• handle feedback and complaints, and improve our services;
• meet our legal and regulatory obligations; and
• protect our website from spam, fraud and misuse.

We only use personal information for the purpose it was collected, unless you consent, you would reasonably expect a related use, the law requires or authorises it, or it is necessary to lessen or prevent a serious threat to someone's life, health or safety. We do not sell personal information or use it for unrelated marketing.

When we share information

Depending on the circumstances, we may share personal information with:

• people you have asked us to involve, such as family members, carers, nominees, your support coordinator, plan manager or health professionals;
• government bodies such as the National Disability Insurance Agency or the NDIS Quality and Safeguards Commission, where the law requires or authorises it;
• emergency services, where we believe it is necessary to protect someone's life, health or safety; and
• service providers who help us run our business and this website, such as hosting, database, email and IT providers. They may only use the information to provide their services to us.

Storage and security

We hold personal information in electronic systems and, where necessary, in paper records. We take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include:

• storing records securely, with access limited to people who need it for their work;
• protecting systems with secure, authenticated logins;
• sending website submissions over encrypted connections (HTTPS);
• taking reasonable steps to check that service providers who handle information for us protect it appropriately; and
• securely destroying or de-identifying personal information once we no longer need it and are not required by law to keep it.

Data breaches

If we suspect that personal information we hold has been lost, or accessed or disclosed without authorisation, we will act promptly to contain the breach and assess it, taking reasonable steps to complete that assessment within 30 days.

If the breach is likely to result in serious harm to anyone (an “eligible data breach” under the Notifiable Data Breaches scheme), we will notify the people affected and the Office of the Australian Information Commissioner (OAIC).

Overseas disclosure

Some of the service providers we use store or process information outside Australia. Our website is hosted in the United States, and the information you submit through its forms is stored in a database in India. We are also notified of each submission by email, sent through a provider that may process it in the United States, and our email service may store messages in other countries.

We take reasonable steps to ensure any overseas recipient handles personal information in a way that is consistent with the Australian Privacy Principles, unless you have consented to the disclosure or another exception under the Privacy Act applies.

Our website and cookies

When you submit a form, we record your browser type and a one-way, encrypted (hashed) form of your IP address. We use these only to protect our forms from spam and abuse, and cannot use the hash to identify you.

This website does not use advertising or tracking cookies, or website analytics. If that changes, we will update this policy.

Our Contact page includes an embedded Google Map. When the map loads, Google may collect information such as your IP address and may use cookies, in line with Google's Privacy Policy (opens in a new tab). Our website also links to other websites, such as the NDIS and My Aged Care. We are not responsible for the privacy practices of other websites.

Sending information over the internet, including by email, always carries some risk. If you would prefer not to send personal information electronically, please call us instead.

Access and correction

You have the right to ask for access to the personal information we hold about you, and to ask us to correct it if you think it is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using the details below. There is no charge to make a request.

We may need to confirm your identity first, and will usually respond within 30 days. In limited circumstances the law allows us to decline a request. If we do, we will explain why in writing.

Privacy complaints

If you believe we have handled your personal information in a way that is not consistent with this policy or privacy law, please contact us first so we can try to put it right. We will respond promptly, fairly and without reprisal, following our complaints process. We may ask for more information so we can respond fully.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (opens in a new tab) on 1300 363 992.

Contact us

For privacy questions, requests to access or correct your information, or privacy complaints, please contact our Privacy Officer:

• Privacy Officer, Fijiana Enterprises
• Phone: 0475 868 949
• Email: fijianaenterprises@gmail.com
• Online: our enquiry form
• Location: Griffith NSW 2680

Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.