📖 Easy Read Edition: This policy uses simple words and clear picture cards. Switch to the Full Standard Edition of this Policy Page.
Protecting Your Personal Information and Privacy – Easy Read Privacy Policy
Written by Jenny Mathers | Principal Support Coordinator, Author & Carer Advocate
💡 At a Glance & Privacy Overview
⏱️ Estimated Read Time: 5 minutes
Central Goal: Steady Guide treats your personal information with absolute respect and security. We follow the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) to keep your records safe, private, and in your control.
- Document Reference: SG-PRIV-ERG-2026-v1.0 (Effective Date: 12 September 2026, Version 1.0, Approved by Jenny Mathers).
- Complete System Segregation: Your confidential NDIS support coordination files (Astalty & Microsoft 365) are stored separately from website tools, social media, and marketing lists.
- Australian Data Sovereignty: All core participant records remain securely stored inside Australian-based data centres under Australian privacy laws.
- Independent Family Retail Store:As part of our promise to be honest and transparent, we want to tell you Jenny’s son owns and operates an independent online store selling books and other curated products to people who live with a disability on his own separate website. Steady Guide does no cross-promotion and never mentions the store during support coordination.
- AI Privacy Protections: Participant records are strictly excluded from AI training models and public AI bots.
- Your Rights: You can ask to see, correct, or delete your information at any time without paying any fees.
🗺️ What is in This Guide (Quick Navigation)
- Section 1: Document Control & What This Policy Is About
- Section 2: What Is Personal Information?
- Section 3: Information We Collect and Why
- Section 4: Keeping Your Information Safe and Separate
- Section 5: AI Ethics and Data Sovereignty
- Section 6: Your Legal Rights (Access, Correction & Deletion)
- Section 7: Direct Marketing, Spam Act, and Easy Opt-Out
- Section 8: How to Ask Questions or Make a Privacy Complaint
Section 1: Document Control & What This Policy Is About
| Reference | Version | Effective Date | Approved By | Review Date |
|---|---|---|---|---|
| SG-PRIV-ERG-2026-v1.0 | 1.0 | 12 September 2026 | Jenny Mathers | 12 September 2027 |
This Easy Read Privacy Policy explains how Steady Guide collects, uses, stores, and protects your personal information. It tells you what details we collect, how we keep your records safe, and how you can access or fix your information.
Style Note: All text in this guide is left-aligned and written using Macquarie Australian Commonwealth spelling standards (such as ‘acknowledgment’ without a middle ‘e’).
Section 2: What Is Personal Information?
Under Australian Privacy Principle (APP) 6, personal information is any detail or opinion that can identify who you are.
Basic Personal Information
This includes your full name, phone number, email address, home address, date of birth, and NDIS participant number.
Sensitive Health Information
This includes medical reports, disability diagnostic notes, NDIS goals, and clinical letters. We only collect sensitive information with your explicit permission.
Section 3: Information We Collect and Why
We only collect personal information that is strictly necessary to help you navigate your NDIS support plan safely and effectively:
NDIS Support Coordination
We collect your NDIS plan dates, funding budgets, and goal summaries so we can connect you with the right therapists and support services.
Consultations and Forms
When you book a private chat with Jenny or fill out an online contact form, we collect your name and email address so we can contact you back.
Private Website Analytics
Our website uses Plausible Analytics to count total page visits. It does not use invasive tracking cookies and does not collect any personal details about you.
Section 4: Keeping Your Information Safe and Separate
Under Australian Privacy Principle 11 (Security), we take strong technical steps to protect your files from loss, unauthorised access, or misuse:
Bank-Grade Encryption
Your NDIS participant records are hosted in Astalty and Microsoft 365 enterprise databases protected by bank-grade encryption in Sydney and Melbourne data centres.
Complete System Segregation
We maintain a physical and digital wall between systems. Your confidential support coordination records are never mixed with website marketing tools, social media ads, or external platforms.
7-Year Record Keeping
Under NDIS Commission rules, participant records must be kept securely for 7 years after service ends. After 7 years, records are securely and permanently destroyed.
Section 5: AI Ethics and Data Sovereignty
In accordance with the Artificial Intelligence (AI) Usage Policy – Steady Guide, we follow strict “Red Lines” to keep your privacy safe when using digital tools:
Zero-Input Mandate
We never put participant names, medical reports, or NDIS plan details into AI tools or Large Language Models (LLMs).
Australian Data Sovereignty
Your records are hosted exclusively within Australian servers under Australian Privacy Principles, protecting your data from foreign access laws.
No Automated Decisions
AI is never used to write NDIS reports or make decisions about your services. All support coordination decisions are made by real human professionals.
Section 6: Your Legal Rights (Access, Correction & Deletion)
Under APPs 12 and 13 of the Privacy Act 1988, you have strong, enforceable legal rights over your records:
Right to Access (APP 12)
You can ask to see or receive a copy of all personal records we hold about you.
Right to Correction (APP 13)
If any details are inaccurate, incomplete, or out of date, you can ask us to correct them. Under APP 13.4, we are strictly prohibited from charging you any fees for correction requests.
30-Day Response Time
We will respond to all formal access or correction requests within 30 calendar days.
Section 7: Direct Marketing, Spam Act, and Easy Opt-Out
We follow Australian Privacy Principle 7 (Direct Marketing) and the Spam Act 2003:
Voluntary Newsletters
Subscribing to our Steady Steps email updates is completely voluntary. We never send spam or unsolicited text campaigns.
1-Click Unsubscribe
Every email we send includes a clear 1-click unsubscribe button. You can opt out at any time and we will delete your email from our newsletter database within 30 days.
📚 Words That Are Hard to Understand
Privacy: Your right to keep your personal details, medical notes, and life story safe from unauthorised view or disclosure.
Personal Information: Details that identify who you are, such as your name, phone number, address, or NDIS plan number.
System Segregation: Storing confidential participant files in separate, encrypted software (Astalty/M365) so they cannot touch marketing tools or external stores.
Data Sovereignty: Keeping your records stored safely inside Australian data centres under Australian privacy laws.
APP 13 (Correction Rights): A privacy law that gives you the right to fix any wrong or out-of-date information held about you for free within 30 days.
Section 8: How to Ask Questions or Make a Privacy Complaint
If you have questions about your privacy or wish to lodge a concern, please contact our Privacy Officer:
| Privacy Officer | Jenny Mathers, Principal Support Coordinator |
| Organisation | Steady Guide |
| Location | Toowoomba, Regional Queensland |
| Phone | 0424 766 144 |
| jenny@steadyguide.com.au | |
| Website | steadyguide.com.au |
🏛️ Independent External Authorities
If you feel we have not answered your privacy concern properly, you can contact external regulators:
- NDIS Commission: Phone 1800 035 544 | TTY 133 677 | NRS 1800 035 544 | www.ndiscommission.gov.au
- Privacy Commissioner (OAIC): Phone 1300 363 992 | Email enquiries@oaic.gov.au
At Steady Guide, protecting your dignity and privacy is central to everything we do. Thank you for trusting us as your support partner.
Ref: SG-PRIV-ERG-2026-v1.0 • Effective: 12 September 2026