Daisy Chain Experiences - Privacy Policy

Welcome to Daisy Chain Experiences. We care about your privacy. This Privacy Policy explains how we collect, use, disclose, and store personal information when you use our services or website.

Last updated: October 2025

1. Introduction & Purpose
Daisy Chain Experiences is committed to protecting the privacy and dignity of all participants and users. This Privacy Policy outlines how we collect, use, store, disclose, and secure personal information, especially when working with people with disability under NDIS plans. By accessing our website or using our services, you agree to the collection and use of information as described in this policy.

2. What Information We Collect
We may collect the following types of personal information: identity & contact data such as name, email address, phone number, address; support / health & disability data such as mobility, support needs, medical or disability‑related information (only when voluntarily provided and relevant); usage data such as website visits, IP address, device type, pages viewed, analytics; media / images such as photos, video or audio recordings (with your consent); payment & billing data such as invoices, payment records, plan management or support coordinator details.

3. How & Why We Use Your Information
We use collected information to plan, deliver, and manage your personalised Daisy Chain experiences; communicate with you (booking confirmations, reminders, feedback); comply with legal or regulatory requirements; improve our website, services, and client experiences; where needed, coordinate with third parties (e.g. transport providers) to assist with logistics. We do not use your personal information for marketing or selling it unless you explicitly consent.

4. Sensitive Information & Disability Data
When we collect sensitive or disability‑related information, we treat it with enhanced safeguards. Access is limited to staff or subcontractors who require it. We may use encryption, secure storage, and restrict unauthorized access. You have the right to refuse providing certain sensitive details, though doing so may limit our ability to plan accessible or safe experiences for you.

5. Access, Correction & Deletion
You can request to access your personal information; correct or update inaccurate or incomplete data; request deletion or anonymisation of your data. If we cannot fulfill a request (for legal, security or operational reasons), we will provide reasons and a complaint avenue.

6. Data Retention & De‑identification
We retain personal data only as long as needed for service provision, legal compliance, or defense of claims. After that, data will be securely deleted or anonymised so it cannot be re‑associated with you.

7. Disclosure to Third Parties & Overseas Transfers
We may share information with subcontractors / partners (e.g. transport providers, contractors, venues) to deliver your experience; our staff and team members who need it; law enforcement or authorities if legally required. If providers are overseas, we only do so under protections that align with the Australian Privacy Principles (APPs).

8. Data Breach Response & Notification
If a privacy breach occurs that is likely to cause serious harm, we will promptly investigate and contain any breach; notify affected individuals as soon as possible; report the breach to the Office of the Australian Information Commissioner (OAIC) when required.

9. Cookies & Analytics
We may use cookies, Google Analytics, or similar tools to understand how people use our website. These tools collect non‑identifiable usage data. You can disable or manage cookies through your browser settings (although disabling cookies may limit site functionality).

10. Consent & Withdrawal
Wherever possible, we ask for your consent before collecting personal or sensitive information. You may withdraw your consent at any time (by contacting us), though withdrawal may limit our ability to provide some services.

11. Legal Compliance & NDIS Alignment
We comply with the Privacy Act 1988 (Australia) and the Australian Privacy Principles (APPs). We also adhere to provisions of the NDIS Act 2013, ensuring respect for dignity, confidentiality, and participant rights in all interactions and data handling.

12. Complaints & Dispute Resolution
If you believe your privacy has been breached, contact us at [your email address] with details. We will investigate and respond within a reasonable timeframe. If you remain unsatisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

13. Updates to Policy
We may update this Privacy Policy from time to time. The “Last updated” date will reflect the latest version. We encourage you to revisit this page periodically.

14. Contact Us
If you have any questions, concerns, or requests relating to your privacy or this policy, please email us at nicola@daisychainexperiences.com.au