Privacy Policy

1. What this policy covers

This policy applies to personal information we collect through:

• The website at providerpass.au
• Purchases of the NDIS Audit Pack
• Email and contact form communications
• Any other interaction you have with ProviderPass

2. What information we collect

We only collect personal information that's reasonably necessary to operate ProviderPass.

Information you provide directly:

• Your name
• Your email address
• Your business name and ABN (if provided at checkout)
• Your billing address
• The content of any messages you send us via our contact form or email

Information collected automatically:

• Standard web analytics data (pages visited, referrer, approximate location, device and browser type)
• Cookies and similar technologies used for analytics and to remember your preferences

Payment information:

We do not collect or store credit card or banking details. Payments are processed by Stripe Payments Australia Pty Ltd, who handles all payment data in line with their own privacy policy and PCI-DSS compliance.

3. How we use your information

We use your personal information only for these purposes:

• To deliver the NDIS Audit Pack to you after purchase
• To respond to your enquiries
• To send you updates if the NDIS Practice Standards change and updated documents are available
• To issue tax invoices and meet our legal record-keeping obligations
• To improve the website and understand how it's used
• To detect and prevent fraud or misuse

We do not use your information for unsolicited marketing. We do not sell your information to anyone.

4. Who we share your information with

We share personal information only with the following service providers, and only to the extent necessary for them to perform services for us:

• Stripe Payments Australia Pty Ltd — payment processing
• Google LLC — website analytics (Google Analytics)
• Firebase (Google LLC) — website hosting
• Formspree Inc. — contact form processing
• Email service providers — to send pack delivery and customer support emails

Some of these providers store data outside Australia (primarily the United States). By using ProviderPass, you consent to your information being transferred and stored overseas where reasonably necessary for these services to function.

We will only otherwise disclose your personal information if required by law, in response to a lawful request from an Australian regulator or court, or to protect our rights, property, or safety.

5. Cookies and analytics

We use Google Analytics to understand how visitors use the site. Google Analytics uses cookies to collect information about your visit. This information is aggregated and we cannot identify you personally from it.

You can disable cookies in your browser settings. The site will still work, but some preferences may not be remembered between visits.

6. How we store your information

We store your personal information on secure servers operated by reputable providers (primarily Google Firebase and Stripe). We use reasonable technical and organisational measures to protect your information from unauthorised access, loss, or misuse.

We retain personal information only as long as we need it to provide our services to you and to meet our legal obligations (including Australian Taxation Office record-keeping requirements, which require us to retain transaction records for at least 5 years).

7. Your rights

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Correct any personal information that's inaccurate or out of date
• Withdraw consent to receive emails from us at any time
• Lodge a complaint about how we handle your personal information

To exercise any of these rights, email us at hello@providerpass.au. We will respond within 30 days.

8. Making a privacy complaint

If you believe we have breached the Australian Privacy Principles, please contact us first at hello@providerpass.au and we will respond within 30 days.

If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Mail: GPO Box 5288, Sydney NSW 2001

9. Children's privacy

ProviderPass is sold to NDIS providers operating businesses in Australia. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information about a minor, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the policy will reflect any changes. For significant changes, we'll notify customers by email. Continuing to use the website after a change means you accept the updated policy.

11. Contact us

If you have questions about this Privacy Policy or how we handle your personal information:

Tether Technologies Pty Ltd
ABN 18 659 420 005
Trading as ProviderPass
107 Randstone Parade, Butler WA 6030
Australia

Email: hello@providerpass.au