Careva Privacy Policy

Our Commitment to Privacy

Careva is committed to protecting the privacy and personal information of all individuals who interact with our organisation, including contractors, support workers, therapists, participants, and members of the public.

We are governed by the Australian Privacy Act 1988, the Privacy and Personal Information Protection Act 1998 (NSW), and the Health Records and Information Privacy Act 2002 (NSW). We also uphold the 13 Australian Privacy Principles (APPs), which guide how we collect, store, use, and disclose personal information.

This Privacy Policy explains how we manage your personal information in line with our legal and ethical obligations.

What Personal Information We Collect

We may collect the following types of personal information to provide our services and fulfil our legal responsibilities:

• Identification details: Full name, date of birth, gender
• Contact details: Phone number, email address, mailing address
• Professional information: Occupation, qualifications, ABN, insurance details, Working With Children Check or NDIS Worker Screening ID
• Financial information: Bank account or payment processing details
• Participant details (if applicable): For contractors referring participant data under our registration, limited relevant participant information may be collected for compliance and invoicing purposes

We may also collect health or disability-related information if relevant to your relationship with us, and only with appropriate consent or where legally required.

How We Use Personal Information

Your personal information will only be used for purposes that are directly related to your interaction with Careva and our services, such as:

• Onboarding you to use our NDIS registration as a contractor
• Delivering services under the NDIS framework
• Providing support, coaching, and resources
• Processing payments and generating invoices
• Meeting compliance, legal, and audit obligations
• Communicating updates, marketing content, and relevant offers (you can opt out of marketing emails at any time)

We will not use or disclose your information for any purpose outside of these without your consent, unless required by law.

Disclosure of Information

Careva will only share personal information:

• With relevant government agencies (e.g. NDIA, NDIS Commission) when required for service delivery or compliance
• With IT service providers or software systems (e.g. HubSpot, ShiftCare) who support our operations under strict confidentiality
• With other third parties where required by law, such as safeguarding authorities or under court order

We do not sell personal information to third parties under any circumstances.

Storage and Security

We store your information securely using encrypted systems and restrict access to authorised personnel only. We take reasonable steps to:

• Protect your data from misuse, interference, or loss
• Secure it against unauthorised access, modification or disclosure
• Destroy or de-identify personal information when it is no longer needed

All Careva systems and tools follow data protection best practices and are hosted within Australia wherever possible.

Access, Correction & Complaints

You can request access to the personal information we hold about you at any time by contacting us. You may also request correction if you believe any information is inaccurate or outdated.

To make a privacy-related complaint or raise a concern, please email our team. We take all feedback seriously and will investigate any issues in accordance with our complaints handling policy.

• 📬 Contact: info@careva.com.au
• 🌐 Website: www.careva.com.au

We aim to resolve all concerns promptly and respectfully.

Updates to This Policy

Careva may update this Privacy Policy from time to time to reflect legal changes or improvements in our systems. Any changes will be published on our website.

Last Updated: September 2025