Sign in Support

Privacy Policy

Carefully Planned - July 2023

Capitalised words and phrases are defined in the “Definitions” section of this document unless otherwise specified.


Provider means Carefully Planned Pty Ltd (ABN 97 653 071 606), contactable on

Individual means you, the person using Provider’s Service, contactable on any email communicated to Provider.

1. Introduction

While providing the Services, Provider collects Personal Information about Individual. This document describes how Provider collects, stores, uses and discloses Personal Information.

2. Types of Information Collected

Provider may collect the following types of Personal Information about Individual:

  • names;
  • addresses;
  • email addresses;
  • dates of birth;
  • telephone numbers;
  • computer device information;
  • IP addresses;
  • details of products or services that Provider has provided to Individual;
  • whatever Personal Information is included in content Individual posts on the Service or on the website of Provider;
  • records of, or notes on communications between Provider and Individual; and
  • browser cookies.

3. Sensitive Information

Provider may collect sensitive information about Individual, including Personal Information about Individual’s:

  • health, health services, health records or health preferences; and
  • ethnic origin.

4. How Information Is Collected

Provider may collect Personal Information about the Individual using:

  • information from Provider’s Service;
  • the Individual’s communications with Provider; and
  • automated analysis of Individual’s use of Provider’s services.

5. How Information is secured

Carefully Planned is committed to keeping your information secure.

Data securely stored within Australia and at Rest. Your data is encrypted when stored on the server and during transfer with Secure Socket Layer (SSL) encryption. Access to chat messages and other data requires a valid login and password. Your messages and data will be stored in your account until you delete them.

The app is hosted on cloud infrastructure from Amazon Web Services with 99.99% uptime, industry leading back up, disaster recovery and data integrity.

We have AWS standard identity, device and process management that ensure only authorized individuals can access the information.

6. Deletion of Personal Information

Provider deletes Personal Information when Individual requests its deletion and it is reasonable to comply.

7. Disclosures of Information

Provider may disclose Personal Information to:

  • third party service providers;
  • payment systems operators;
  • Provider’s employees;
  • professional advisors; and
  • regulatory bodies.

8. Disclosing Information Outside Australia

Provider may disclose Personal Information to organisations outside of Australia such as payment providers located in United States.

By using the Services, Individual consents to the disclosure of their Personal Information to overseas recipients.

Provider will make a good faith effort to ensure that overseas recipients deal with Personal Information in a way that is consistent with the principles of the Privacy Act, but Individual will not have the same rights in relation to overseas recipients who handle their information as they would with Australian recipients.

9. Privacy Contact

Questions or complaints from Individual relating to Provider’s use of Personal Information should be directed to Provider’s privacy officer, contactable on

When Individual communicates a complaint to Provider, Provider will respond within two weeks, and seek to resolve the complaint entirely within one month if the nature of the complaint permits it.

Provider’s privacy officer will make a reasonable effort to address complaints or questions of Individual, and where the privacy officer is unable to do so, the privacy officer will attempt to explain why it is unable to do so.

If Individual is unsatisfied with the outcome of the complaints process, Individual may complain to the (OAIC)(

10. Accessing Information

Under privacy law, Individual has the right to contact Provider to modify or obtain Personal Information held about them by Provider.

11. Changes To This Policy

Provider reserves the right to make changes to this document in the future, either to:

  • comply with changes in Australian privacy law, or
  • to reflect changing business practices.

It is the responsibility of Individual to regularly check this document for such changes.


Personal Information

means any information that is categorised as ‘personal information’ or ‘personal data’ under privacy law, or is otherwise regulated by privacy law.

Privacy Act

means the Privacy Act (1988) Cth.

Service, Services

means the services provided by Individual to Provider, including a application for the storage and review of NDIS records.