Privacy policy reviewed: 22 October 2026.
Wired Different Pty Ltd (ABN 19 682 747 280) collects and handles personal information to respond to enquiries and provide positive behaviour support and related services. This policy explains our handling of participant, family, referrer and website visitor information, and how to contact us about privacy. We are responsible for meeting our obligations under the Privacy Act 1988 (Cth), the Australian Privacy Principles and applicable NDIS requirements.
Privacy contact: admin@wireddifferent.au, marked for the Privacy Officer. Ask us for a copy in an accessible format, or for help understanding it.
1. Information we collect
Depending on your contact with us, we collect names and contact details, your relationship to the participant, organisation and location, NDIS participant and plan details, funding arrangements, relevant representative and signatory details, service agreements, consent choices and service records. Behaviour support can also involve sensitive health, disability and assessment information. We only seek information reasonably necessary for the relevant purpose, with consent where required or another lawful basis.
The website forms do not request diagnoses, medication lists, clinical reports, identity documents or payment-card details. Please do not put these in the free-text fields. We arrange a suitable way to obtain further clinical information when needed.
2. How we obtain information
We obtain information from you, from a person with your permission or appropriate authority, and through service delivery, correspondence and the website. A referrer may be a participant, family member, support coordinator or another provider. Providing information about someone else does not, by itself, establish authority to consent or sign for that person.
When a referral is made by someone else, we take reasonable steps to make the participant or their appropriate representative aware of this notice. Referrers should share it with the person whose information they provide. We check consent and decision-making authority before relying on it for services.
3. Website enquiries and collection notice
The initial enquiry collects your contact details, role, organisation where relevant, service region, plan-management selection and permission to contact you. Wired Different uses this to respond, check suitability and availability, and coordinate intake. Required fields allow us to identify and respond to the enquiry; without them we may not be able to progress it. You can ask a general question anonymously or using a pseudonym by email, although services and funding arrangements generally need accurate identifying information.
Netlify receives the initial form. Make transfers its details into Google Sheets and sends administrative notifications through Gmail. These services process information for Wired Different; international processing is described below. An enquiry does not subscribe you to marketing or constitute a service agreement.
Additional participant and NDIS details
Our intake team may send a private confirmation link after reviewing an enquiry. The referrer can check available information and add missing administrative details. Responses are held in a restricted Google review spreadsheet for staff to check before approved information is passed to the service-document spreadsheet.
A support coordinator can instead choose to supply NDIS details immediately after the initial enquiry. That step is optional. These answers go directly to the existing referral spreadsheet, labelled unverified, for staff to check and correct before running the service-document process. Requested hours are not automatically agreed hours. Skipping the optional step does not cancel the original enquiry.
Make and Google Workspace process these additional forms. The established, staff-initiated service-document process uses verified information to prepare documents and create the relevant Splose record. Forms do not sign agreements, authorise restrictive practices, confirm eligibility or promise a start date. Collection consent is separate from service consent and signing authority.
4. Why information is used and shared
We use information to answer enquiries, assess service fit, verify referral details, prepare and administer agreements, deliver and review supports, communicate with the participant and authorised contacts, manage funding and billing, and deal with complaints, safety and legal obligations.
Access is for authorised staff and contractors who need it for their role. Information may be shared with the participant's authorised representatives, relevant treating professionals and support providers with appropriate consent or authority, plan managers or the NDIA for relevant funding administration, and professional advisers or regulators where necessary and lawful. We may disclose information without consent when required or authorised by law, including applicable safeguarding or reporting obligations.
We do not sell personal information. Enquiry or referral consent is not permission to add you to a marketing list. Any separate marketing consent can be withdrawn.
5. Storage, service providers and security
Our website and intake workflow uses Netlify for hosting and form delivery, Make for administrative automation, Google Workspace (including Gmail, Sheets, Docs and Drive) for communication and document handling, and Splose for practice records. Other service records may be held in business systems or paper records where required.
Reasonable safeguards include limiting access, using account authentication, protecting devices and credentials, and keeping sensitive information out of public pages and routine notification emails. The web forms use HTTPS. Private confirmation links use random tokens, server-side expiry checks and one-use submission controls. Please keep those links private: anyone holding a valid link may be able to use it. No online system can be guaranteed completely secure.
Do not use a shared device to enter sensitive information unless it is safe to do so. Tell us promptly if you sent information to the wrong person or believe a private link or account has been compromised. We assess suspected breaches and notify affected people and the OAIC where required.
Overseas processing
Some information is processed, stored or accessed outside Australia by our cloud providers and their service providers. Relevant locations include the United States and European Union countries; Google also operates an international service and support network. Splose states that Australian customers' primary data is stored in Australia. This does not make the whole website and intake workflow Australia-only.
The provider information linked below describes their processing arrangements and possible locations. The locations used for a particular service depend on our account settings, the service and any support access. Contact our Privacy Officer for information about our current arrangements. We remain responsible for taking the reasonable steps required by Australian privacy law when using these services; a form checkbox does not waive those obligations.
Netlify privacy information · Make privacy information · Google Workspace service-provider locations · Splose data residency
Retention
We retain information for as long as it is reasonably needed for the purpose and any applicable clinical, NDIS, financial, legal or dispute-related recordkeeping requirements. When it is no longer needed and no retention requirement applies, we take reasonable steps to destroy or de-identify it. A link expiring does not delete the referral record. Provider logs, queues and backups can have separate retention periods; deleting a spreadsheet row does not necessarily remove every copy.
6. Access, correction and consent choices
You or a person you authorise can ask to access your information, correct inaccurate or incomplete details, or discuss withdrawing or changing consent by emailing admin@wireddifferent.au. We may need to confirm identity and authority before providing records. We respond within a reasonable period; where access or correction cannot be provided, we explain the reason and available complaint options as required by law.
Withdrawing consent does not undo lawful handling that has already occurred or override records we are required to keep. It may affect our ability to provide particular supports; we will explain that rather than treating a withdrawal as automatic consent to something else. Ask our team for another way to supply information if the online form is unsuitable.
7. Website technology and browser storage
The site does not include Google Analytics, Meta/Facebook Pixel, advertising cookies or a marketing newsletter sign-up. Hosting and security providers still receive technical information such as IP addresses, request time, browser details and requested pages. Fonts are loaded from Google Fonts, which also receives connection information when your browser requests them.
For the optional coordinator step, this browser tab temporarily keeps a random access token, the referrer's contact details, selected role and plan-management choice in session storage. The step is valid for up to two hours. We do not deliberately save the participant's answers to browser storage. The session is cleared on completion or choosing to finish; closing the tab normally clears session storage, although browser restore features may retain it. Private invitation tokens are carried in the link fragment and used by the form, not placed in a public webpage or a search index.
External websites linked here have their own privacy practices. Opening the privacy policy in another tab does not submit your form.
8. Administrative automation and online payments
Automation transfers data and prepares administrative records; it does not establish signing authority or decide whether supports are appropriate. Staff review remains part of the process. These website forms do not use generative AI to interpret referral answers and do not take online payments or appointment bookings.
9. Privacy complaints and concerns
Email admin@wireddifferent.au, marked for the Privacy Officer, with what happened, when, how to contact you and the outcome you are seeking. Ask a staff member for help making a complaint or for a safe alternative contact method. We will assess the concern, make appropriate enquiries and explain our response. We aim to respond within 30 days, and will let you know when more time is needed.
If the matter remains unresolved, you can contact the Office of the Australian Information Commissioner or call 1300 363 992. OAIC generally asks that you complain to us first and allow a reasonable response period. You may also raise concerns about NDIS supports with the NDIS Quality and Safeguards Commission. Raising a concern will not, by itself, affect your right to respectful support.
10. Policy changes
We update this policy when our information-handling practices change. The adopted version will show its current review date on this page. Significant changes to collection or use may also require an updated notice or fresh consent. Contact us for a copy or an explanation.
