Carefully Planned - July 2023
Capitalised words and phrases are defined in the “Definitions” section of this document unless otherwise specified.
Provider means Carefully Planned Pty Ltd (ABN 97 653 071 606), contactable on email@example.com.
Individual means you, the person using Provider’s Service, contactable on any email communicated to Provider.
While providing the Services, Provider collects Personal Information about Individual. This document describes how Provider collects, stores, uses and discloses Personal Information.
Provider may collect the following types of Personal Information about Individual:
Provider may collect sensitive information about Individual, including Personal Information about Individual’s:
Provider may collect Personal Information about the Individual using:
Carefully Planned is committed to keeping your information secure.
Data securely stored within Australia and at Rest. Your data is encrypted when stored on the server and during transfer with Secure Socket Layer (SSL) encryption. Access to chat messages and other data requires a valid login and password. Your messages and data will be stored in your account until you delete them.
The app is hosted on cloud infrastructure from Amazon Web Services with 99.99% uptime, industry leading back up, disaster recovery and data integrity.
We have AWS standard identity, device and process management that ensure only authorized individuals can access the information.
Provider deletes Personal Information when Individual requests its deletion and it is reasonable to comply.
Provider may disclose Personal Information to:
Provider may disclose Personal Information to organisations outside of Australia such as payment providers located in United States.
By using the Services, Individual consents to the disclosure of their Personal Information to overseas recipients.
Provider will make a good faith effort to ensure that overseas recipients deal with Personal Information in a way that is consistent with the principles of the Privacy Act, but Individual will not have the same rights in relation to overseas recipients who handle their information as they would with Australian recipients.
Questions or complaints from Individual relating to Provider’s use of Personal Information should be directed to Provider’s privacy officer, contactable on firstname.lastname@example.org.
When Individual communicates a complaint to Provider, Provider will respond within two weeks, and seek to resolve the complaint entirely within one month if the nature of the complaint permits it.
Provider’s privacy officer will make a reasonable effort to address complaints or questions of Individual, and where the privacy officer is unable to do so, the privacy officer will attempt to explain why it is unable to do so.
If Individual is unsatisfied with the outcome of the complaints process, Individual may complain to the (OAIC)(https://www.oaic.gov.au).
Under privacy law, Individual has the right to contact Provider to modify or obtain Personal Information held about them by Provider.
Provider reserves the right to make changes to this document in the future, either to:
It is the responsibility of Individual to regularly check this document for such changes.
means any information that is categorised as ‘personal information’ or ‘personal data’ under privacy law, or is otherwise regulated by privacy law.
means the Privacy Act (1988) Cth.
means the services provided by Individual to Provider, including a application for the storage and review of NDIS records.