At ORS, we are committed to protecting the privacy and security of our website visitors and clients. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our website or use our healthcare services. By accessing our website or engaging with our services, you consent to the practices described in this policy.

1. Information We Collect

We only collect, use, hold and share personal information that is necessary to provide you with NDIS allied health services. The type of information we collect and keep depends on the service you have been referred for.

This may include:

  • Personal identifiers (name, address, DOB, contact details etc.) Government related identifiers (NDIS number) Correspondence (emails, letters, texts)
  • Health Information: Medical, disability and allied health information, records, reports and assessments Information provided from other service providers
  • Employment Information: Employment related information such as resumes
  • Website Usage Data: We may automatically collect certain information about your visit to our website, including your IP address, browser type, referring/exit pages, and operating system.

2. When we share your information

Your personal information may be shared with
  • Individuals involved in your care
  • Government departments (for example, the NDIS Commission and the NDIS Quality and Safeguards Commission)
  • Other organisations such as your Support Coordinator or other treating providers in accordance with service requirements and to allow ORS to meet our legal and funding obligations
  • ORS employees who need access to your information to perform their role, including administration, clinical supervision, quality assurance, and to meet business, compliance, and NDIS registration requirements. All ORS employees apply the same privacy principles and are only permitted to access information directly related to their role and business function.

2.1 Sharing without your consent

In some situations, your information may be shared without your consent.

These include:

  • Where consent to disclose or release has been provided by you or your legal guardian
  • To prevent or lessen a serious threat to the life, health or safety of a person or to the public or safety
  • Where it is required or authorised by law (e.g. NDIS reportable incidents, mandatory child protection reporting)
  • Where a permitted health situation exists (e.g. during a medical emergency)
  • When reasonably necessary for law enforcement purposes (such as investigating or prosecuting criminal offences)
  • Where the individual would reasonably expect the disclosure and it is directly related to the primary purpose of collection (e.g. sharing allied health reports internally with the ORS Key Worker coordinating the services)
  • Whereby ORS receives a court summons or a legal direction

Please note that any disclosure of information relating to committing criminal offences or preparing to commit criminal offences involving you or other parties will be reported to the police and/or other relevant authorities. Confidential information is not privileged information, and your consultant may be required by law to share it.

If you choose not to provide some information, ORS may be unable to provide safe services or meet legal and funding requirements. You can withdraw your consent at any time by letting your Allied Health Consultant know. Any impacts of withdrawing consent will be discussed with you.

3. Data Security

We take the privacy and security of your personal information very seriously. We keep your information safe by using password-protected devices, two-factor authentication, secure cloud-based systems (including ISO 27001 accredited systems), and other security measures that are regularly checked by our team and external auditors.

4. Data Retention and Breach Notification

ORS keeps personal and health information in line with health records laws and NDIS requirements. If there is ever a data breach that could cause serious harm, we will let you know and notify the NDIS and the Office of the Australian Information Commissioner, as required under the Notifiable Data Breaches Scheme.

5. Your Rights

Everyone has the right to request access to, or correction of, personal and sensitive information held by ORS. You can make this request through your Allied Health Practitioner, who will submit a formal request on your behalf. You can also contact ORS directly by calling 1800 000 677 and asking to speak to the Privacy Officer, or by emailing privacy@orsgroup.com.au. The Privacy Officer will review your request in line with relevant legislation and service requirements and will respond within 30 days.

6. Complaints

If you have any concerns or complaints about how your personal information is being managed, please speak with your Allied Health Practitioner or contact the Privacy Officer as above. You may also lodge a complaint with the NDIS Commission by calling 1800 035 544 or emailing feedback@ndiscommission.gov.au.

If you would like to view a copy of ORS’ Privacy Policy or Complaints and Feedback Policy, please ask your Allied Health Consultant.

7. Use of Artificial Intelligence (AI)

As part of our commitment to high-quality, efficient service delivery, ORS uses secure, internally built AI tools to support communication, service planning, and reduce administration. These tools operate within the ORS secured network. AI is never used for decision making or clinical reasoning. All use is governed by our commitment to strict privacy, security, and ethical standards.

8. Cookies, Analytics and Advertising Technologies

Our website uses cookies and similar tracking technologies to help it function, and to understand how visitors use it.

These include:

  • Google Tag Manager
  • LinkedIn Insight Tag
  • Meta Pixel
  • Microsoft Clarity

9. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of those websites before providing any personal information.

10. Updates to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically for any updates.

Contact Us

The ORS Group Pty Ltd

Address
Shop 11, Level 2 Gateway Centre, 237 Mann Street, GOSFORD, NSW, 2250
Phone
1800 000 677
Email
ors@orsgroup.com.au
ABN
24 057 733 892
Provider Number
405 0000 976