Legal
Consent for Information Sharing
How we collect, use, and share personal information to deliver NDIS Support Coordination services.
Purpose and Legal Basis
Information collected will assess service suitability and ensure safe delivery. Processing complies with the Privacy Act 1988 (Cth) and the National Disability Insurance Scheme (NDIS) Act 2013.
Scope and Nature of Information Collected
Xyston Pty Ltd may collect:
- Identifying information (name, date of birth, residential address)
- Health-related information and medical history
- Support needs and service preferences
- Behavioural concerns and management strategies
- Legal/compliance information (guardianship details, restrictive practices authorisations)
Disclosure to Third Parties
Personal information may be disclosed to:
- Healthcare professionals and allied health providers
- Support workers and service providers
- NDIS planners, Local Area Coordinators (LACs)
- Government agencies as legally required
- Emergency contacts when immediate intervention is necessary
Disclosures follow Australian Privacy Principles and NDIS Act provisions.
Storage, Security, and Retention
Information is stored securely with physical, electronic, and procedural safeguards protecting against unauthorised access. Retention occurs as long as necessary for stated purposes or as required by law (minimum 7 years after end of service relationship).
Access to and Correction of Personal Information
Participants or authorised representatives may request access to or correction of their personal information in writing. Requests will be responded to within statutory timeframes (generally 30 days). See our Privacy Policy for full details on your rights under APP 12 and APP 13.
Withdrawal of Consent
Consent withdrawal must be communicated in writing. Upon receipt, Xyston ceases use and disclosure of personal information except where legally required or necessary for health and safety protection. Please note that withdrawal of consent may affect our ability to provide Support Coordination services.
Duration of Consent
Consent remains effective during the service engagement period until formally withdrawn in writing.
Complaints and Dispute Resolution
Formal complaints may be lodged with:
- Xyston Pty Ltd: admin@xyston.com.au or 08 9468 1502
- Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au or 1300 363 992
- NDIS Quality and Safeguards Commission: www.ndiscommission.gov.au or 1800 035 544
Confirmation of Consent
By proceeding with a referral or engaging Xyston's services, you acknowledge understanding of these consent terms and your rights regarding information access, correction, and withdrawal procedures.
Contact Us
- Email: admin@xyston.com.au
- Phone: 0416 444 744