Policies and Compliance

​In compliance with the Privacy Act 1988 (Cth), Australian Privacy Principles (APPs), Health Records and Information Privacy Act 2002 (NSW), NDIS Practice Standards, NDIS Code of Conduct, AHPRA professional requirements, and the Spam Act 2003 (Cth).

Last Updated: 4 December 2025
 

The Stable Place (“we”, “our”, “us”) delivers services that include psychological, behavioural, disability, therapeutic, and health-related supports. As an organisation employing AHPRA-registered psychologists and nurses and as an NDIS Registered Provider, we are legally required to protect the privacy and confidentiality of all individuals who interact with our service.

This Privacy Policy outlines how we collect, use, store, and disclose personal and health information obtained through our website and through our intake and service processes.

1. What Personal Information We Collect

We may collect the following categories of information:

1.1 General personal information

Collected through website enquiries, subscriptions, or direct contact:

• Name

• Email address

• Phone number

• Organisation, role, or professional details

• Any information you include in an enquiry

1.2 Clinical and health information

Collected through:

• Our downloadable intake form

• Documents you voluntarily send us

• Communications relating to service delivery or referral

This information may include:

• Health, developmental, or behavioural history

• Diagnoses

• Medication information

• NDIS details

• Functional, behavioural, psychological, or support needs

• Reports from other providers

• Sensitive personal or family information

This is classified as Sensitive Information under the Privacy Act and Health Information under the HRIP Act (NSW). As such, it is given the highest level of statutory protection.

1.3 Automatically collected website information

Including:

• IP address

• Browser type

• Pages viewed

• Session duration

Collected for site security, analytics, and functionality.

2. Why We Collect Personal and Health Information

We collect information for purposes including:

• Responding to enquiries

• Managing subscriptions and sending blog updates

• Assessing service suitability

• Conducting intake, triage, and clinical assessment

• Delivering NDIS-funded and therapeutic supports

• Meeting clinical, ethical, and legal obligations

• Improving our services and website

• Complying with record-keeping obligations (NDIS, AHPRA, APS Code of Ethics, Privacy Act, HRIP Act)

We will only collect information that is reasonably necessary for our functions as a health and disability service provider.

3. Legal Basis for Collection and Use

We collect and use personal information under the following legal bases:

• Consent — subscribing, completing enquiries, providing intake forms

• Provision of a health or NDIS service — clinical assessment, behavioural support, psychological services

• Legal obligations — including the Privacy Act, HRIP Act (NSW), NDIS Practice Standards, Notifiable Data Breaches Scheme, AHPRA requirements

• Legitimate interests — ensuring service quality, safety, and secure operations

We do not use information for unrelated purposes without consent.

4. Sensitive and Health Information

As a provider employing AHPRA-registered clinicians:

• All health information is handled in accordance with the Health Privacy Principles (HPPs) under the HRIP Act (NSW) and the Australian Privacy Principles (APPs).

• Health information is used only to provide appropriate clinical, psychological, behavioural, or disability support services.

• Staff are bound by the AHPRA Code of Conduct, APS Code of Ethics, and relevant professional guidelines.

• Health information is not disclosed except as authorised or required by law.

5. Storage and Security of Information

We take all reasonable steps to protect personal and health information from:

• Unauthorised access

• Loss

• Interference

• Modification

• Misuse

• Disclosure

Information may be stored on:

• Secure electronic case management systems

• Encrypted cloud-based platforms compliant with Australian privacy requirements

• Secure email and document storage systems

Clinical records are stored for the minimum periods required by law and professional standards (e.g., psychology records typically 7+ years, or longer when treating minors).

6. Disclosure of Information

We may disclose personal or health information only to:

• Clinicians or support staff involved in your care

• NDIS Quality and Safeguards Commission if required

• Other service providers with your consent

• AHPRA, where mandatory reporting or professional compliance requires it

• Legal authorities (court order, subpoena, risk of harm)

• IT service providers supporting secure data storage

We will never sell or rent your information.

7. How to Unsubscribe

In compliance with the Spam Act 2003, you may unsubscribe at any time by:

• Clicking the “Unsubscribe” link in any email, or

• Contacting us at [insert email] and requesting removal

Your unsubscribe request will be actioned promptly.

8. Cookies and Tracking Technologies

Our website may use cookies for basic functionality and analytics.
You can disable non-essential cookies via your browser settings.

9. Access, Correction, and Your Rights

You have the right to request:

• Access to your personal or health information

• Correction of inaccurate or incomplete information

• Disposal of information where legally permissible and clinically appropriate

• A copy of your records (fees may apply for administrative time, as allowed under NSW law)

Requests can be made using the contact details in Section 12.

10. NDIS-Related Privacy Obligations

As an NDIS Registered Provider, we comply with:

• NDIS Practice Standards (including privacy, consent, rights, and records management)

• NDIS Code of Conduct

• Mandatory reporting obligations (incidents, restrictive practices, reportable conduct)

Information may be shared with the NDIS Quality and Safeguards Commission where legally required.

11. AHPRA and Professional Compliance

Because we employ AHPRA-registered clinicians:

• Confidentiality is upheld under the AHPRA Code of Conduct

• Clinical information is handled in line with the APS Code of Ethics (Psychologists) and NMBA Standards (Nurses)

• Mandatory reporting obligations apply where required by law (risk of harm, child protection, etc.)

12. Notifiable Data Breaches

Under the Notifiable Data Breaches Scheme (Privacy Act 1988), if a data breach occurs involving personal or health information likely to cause serious harm:

• We will promptly notify affected individuals

• We will notify the Office of the Australian Information Commissioner (OAIC)

• We will take immediate steps to mitigate risk

13. External Links

Our website may contain links to external sites. We are not responsible for their privacy practices, and recommend reviewing their policies before providing personal information.

14. Contact Us

For privacy-related enquiries, access requests, corrections, or complaints:

The Stable Place
Email: admin@stableplace.com.au
Website: https://stableplace.com.au

Complaints will be addressed in line with:

• APP guidelines

• HRIP Act (NSW) requirements

• NDIS Practice Standards

• AHPRA and professional ethical codes

If unresolved, complaints can be escalated to:

• Office of the Australian Information Commissioner (OAIC)

• NSW Privacy Commissioner

• NDIS Quality and Safeguards Commission

• AHPRA (for practitioner conduct concerns)

15. Updates to This Privacy Policy

We may update this policy as required to reflect:

• Changes in legislation

• NDIS registration requirements

• Clinical governance updates

• Operational changes

The latest version will always be available on this page.