Privacy Policy

Capacity Plus Group
Last updated: 9 July 2025

At Capacity Plus Group, we are committed to protecting your privacy and handling personal information in a way that is respectful, transparent, and secure.

This policy explains how we collect, use, store, and share your information — and how you can access or update your details at any time.

What we collect

Depending on how you interact with us, we may collect:

• Your name, contact details, and date of birth
• NDIS number and plan information
• Health or disability-related details
• Support preferences and goals
• Employment or job application information
• Files or documents you choose to upload (e.g. CVs, reports, NDIS plans)
• Website usage data (e.g. form submissions, analytics)

How we collect information

We collect personal information in the following ways:

• When you complete a referral, enquiry, or job application form on our website
• During phone calls or email conversations with you or your representative
• From support coordinators, plan managers, or other providers involved in your care
• Automatically, via tools like Google Analytics (when you visit our website)

Why we collect it

We use the information we collect to:

• Provide support and services tailored to your needs
• Respond to enquiries and referrals
• Coordinate with other professionals and service providers
• Assess job applications and manage recruitment
• Maintain accurate records and meet NDIS and legal requirements
• Improve our services and website experience

How we store and protect your information

Your information is stored securely using trusted digital tools, including:

• Secure form software (e.g. Jotform)
• Protected cloud storage and internal systems
• Password-protected access restricted to authorised staff

We take reasonable steps to keep your data safe from misuse, loss, unauthorised access, or disclosure.

Who we share information with

We only share your information when it’s relevant and with your consent, including with:

• NDIS providers, support coordinators, and plan managers
• Allied health professionals or other services involved in your support
• Third-party service providers (e.g. web platforms or contractors) who help us operate — all of whom are required to keep your data secure

We do not sell or trade your personal information to anyone.

Cookies and website data

Our website may use cookies and analytics tools (such as Google Analytics) to collect basic usage data. This helps us understand how people use our site so we can improve it — but it doesn’t identify you personally.

Accessing or updating your information

You have the right to:

• Ask what personal information we hold about you
• Request corrections if something is wrong or out of date
• Withdraw your consent at any time (where applicable)

To do this, please contact us directly using the details below.

Capacity Plus Group – Data Security

Why Data Security Matters

We handle highly sensitive information about our participants, families, and staff. Protecting this data is not just a legal requirement — it’s a core part of our commitment to dignity, trust, and best practice.

How We Keep Your Data Safe

Secure Platforms

· Microsoft 365 with Two-Step Verification (MFA) for all staff accounts

· ShiftCare with encrypted cloud storage and role-based access

· Australian-hosted servers for compliance with local privacy laws

Access Control

· Only authorised staff can access participant records

· All access is logged and monitored

· Staff are trained in privacy and data handling protocols

Encryption & Protection

· Emails, documents, and client notes are encrypted in transit and at rest

· Passwords are protected with multi-factor authentication

· Regular system updates and patching to prevent vulnerabilities

Contact us

Capacity Plus Group
17 Bolton St, Newcastle NSW 2300
Phone: 1300 758 555
Email: greg@capacitypg.au