Legal

Privacy Policy

Last edited 07 September 2026 — reflects StepByStep Recovery's official Privacy, Confidentiality & Consent Form

Source: this page is adapted from StepByStep Recovery's official Privacy, Confidentiality & Consent Form, provided to clients directly. If that document is updated, this page should be updated to match.

StepByStep Recovery is committed to protecting your privacy and ensuring your personal and health information is handled in a safe and confidential manner. This page outlines how your information is collected, used, stored and shared, and how consent is sought for the provision of services. This policy is aligned with relevant legislation, including the Privacy Act 1988 (Cth), the Australian Privacy Principles, and National Disability Insurance Scheme (NDIS) requirements.

Collection of Personal and Health Information

We collect information necessary to provide safe and effective services, including:

  • Personal details (name, address, contact details, NDIS information)
  • Health and medical history
  • Functional capacity and goals
  • Relevant reports and assessments

This information may be collected through interviews, forms, email, phone, or from other relevant providers where appropriate (medical professionals, support coordinators). You may choose how much information to provide, however insufficient information may impact service delivery.

Storage and Security of Information

Your information is stored securely and protected from misuse, loss, or unauthorised access. Records may be stored electronically and accessed by authorised StepByStep Recovery staff involved in your care. Information will be retained and disposed of in accordance with legal and regulatory requirements. While reasonable steps are taken to protect your information, no system is completely secure. In the unlikely event of a data breach, StepByStep Recovery will respond in accordance with applicable laws and guidelines.

Use of Information

Your information is used to:

  • Deliver therapy and support services
  • Develop and review treatment plans
  • Communicate with your support team
  • Process payments and manage billing
  • Meet legal and NDIS reporting requirements

Sharing of Information

Your information may be shared with relevant parties involved in your care, including General Practitioners, specialists, allied health professionals, support coordinators, plan managers, and family or carers where appropriate. Information shared will be limited to what is necessary. We may also disclose information where required by law, to prevent serious risk to you or others, and/or with your consent. You may request that certain individuals or services are excluded from receiving your information.

Access to Your Information

You have the right to:

  • Request access to your personal or health information
  • Request corrections to your information
  • Receive a copy of your records (fees may apply)

Requests may be denied in limited circumstances where required by law or where it may impact the safety or privacy of others.

Complaints and Enquiries

If you have concerns regarding your privacy or how your information is handled, please contact StepByStep Recovery at info@stepbysteprecovery.com.au or 0426 248 969. You may also contact the NDIS Quality and Safeguards Commission on 1800 035 544 or at ndiscommission.gov.au.