Privacy policy
How The Raph Project collects, uses, stores and protects your personal information, in line with the Australian Privacy Principles.
Your privacy matters, and participant information is some of the most personal information there is. This policy explains what we collect, why, and what you can do about it. Last updated 21 October 2026.
What we collect
Only what we need to provide safe, good support. That can include your name and contact details, date of birth, NDIS number and plan details, how your plan is managed, your goals, relevant health and disability information, emergency contacts, and notes about your sessions.
If someone contacts us on your behalf, such as a family member or support coordinator, we collect their contact details too.
Why we collect it
To provide and plan your supports, keep you safe, communicate with you and the people in your corner, prepare service agreements, invoice for supports, and meet our legal and NDIS obligations.
How we store and protect it
Participant information is kept in three places: on Raph's computer, with each participant in their own folder; in Halaxy, where progress notes and invoicing are kept; and in the business email account. Each is password protected, and access is limited to Raph. Records are kept for seven years after support ends, or until the participant turns 25 if they were a child when we supported them.
Who we share it with
We only share your information with your consent, or where the law requires or allows it. With your consent, that usually means your plan manager (to pay invoices), your support coordinator or Local Area Coordinator, and the NDIA. We may also need to share information to prevent a serious threat to someone's safety, or to report to the NDIS Quality and Safeguards Commission. We never sell your information.
Our website and enquiries
When you send a message through our website, we receive the details you enter so we can reply.
We use Google Analytics to see how people find and use the website, such as which pages are visited and roughly where visitors are. It sets cookies in your browser, but it doesn't collect your name or contact details, and the website doesn't use advertising cookies.
Seeing or correcting your information
You can ask to see the information we hold about you, and ask us to correct anything that's wrong. Just get in touch using the details below. We'll respond within 30 days.
Making a privacy complaint
If you think we've mishandled your information, please tell us first so we can put it right — see our Feedback and complaints page. If you're not satisfied, you can contact the Office of the Australian Information Commissioner on 1300 363 992 or at oaic.gov.au.
Contact
The Raph Project, ABN 55 202 619 827. Phone 0401 625 713, or email hello@theraphproject.com.