PRIVACY POLICY

Little Stomps Occupational Therapy (“Little Stomps”, “we”, “us” or “our”) is committed to protecting the privacy of our clients and their families. This Privacy Policy explains how we collect, use, store, and disclose personal and health information, and how you can access or correct your information, or raise a concern.

This policy applies to all clients of Little Stomps, including those receiving services through the National Disability Insurance Scheme (NDIS), Medicare (Chronic Disease Management), and private arrangements, across clinic, home visit, and telehealth settings.

Little Stomps is a sole trader practice operated by Khalisa, based in the Parramatta area of Sydney, NSW. ABN: 59972392271.

1. Our commitment to privacy

We are committed to handling personal and health information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), and, where applicable, the NDIS Code of Conduct and NDIS Practice Standards.

2. What information we collect

To provide safe, effective occupational therapy services, we collect a range of personal and sensitive information, including:

  • Contact details — your name, address, phone number, and email, and those of your child or the person receiving services

  • Demographic information — such as date of birth, school or daycare, and relationship of the parent/guardian to the client

  • Health information — including diagnoses, medical history, medications, allergies, and relevant reports or assessments

  • Funding and billing details — including NDIS participant number, plan details, plan manager details, Medicare details, or private billing information

  • Referral information — including who referred you to Little Stomps, and details from any other treating professionals or services involved in your care

  • Service history — session notes, progress notes, assessment results, and therapy goals

  • Communication records — emails, messages, and notes from phone or in-person conversations relevant to your care

3. How we collect your information

We collect personal information directly from you, primarily through:

  • Our intake form, completed before or at the start of services

  • Direct conversations, emails, and phone calls with you or your family

  • Information provided by other professionals involved in your care, such as paediatricians, schools, or previous therapists, where you have consented to this

  • Our website and online enquiry forms

We do not collect personal information about you from third parties without your knowledge unless required or authorised by law.

4. How we use your information

We use your personal and health information to:

  • Assess your needs and provide occupational therapy services

  • Develop and review therapy goals and treatment plans

  • Communicate with you about appointments, progress, and your care

  • Process invoices and claims, including NDIS, Medicare, and private billing

  • Liaise with other professionals involved in your care, with your consent

  • Meet our legal, regulatory, and professional obligations, including those under the NDIS Practice Standards

We do not use your information for marketing purposes without your consent, and you may opt out of any non-essential communications at any time.

5. Where your information is stored

Your information is stored securely using a combination of the following:

  • Splose — our practice management system, used to store client records, appointment history, clinical notes, and billing information

  • Secure email — used for communication with clients, referrers, and other treating professionals

  • Secure cloud storage (e.g. Google Drive) — used to store supporting documents such as reports, assessments, and service agreements

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes the use of secure, password-protected systems and limiting access to your information to those directly involved in your care.

6. Who we may share your information with

We only share your personal information where necessary to provide your care, where you have given consent, or where required by law. This may include:

  • Other treating professionals involved in your care (e.g. paediatricians, speech therapists, schools), with your consent

  • NDIS plan managers or the National Disability Insurance Agency (NDIA), where relevant to your funding arrangement

  • Medicare, where you are accessing services under a Chronic Disease Management plan

  • Our practice management and IT service providers (such as Splose), who are bound by confidentiality obligations

  • Regulatory or government bodies, where required by law or under the NDIS Code of Conduct

We do not sell or rent your personal information to any third party.

7. Storage and retention of records

We retain client records for as long as required under applicable health records legislation in New South Wales. As a general guide, records relating to a client who was a minor at the time of treatment are retained until they reach 25 years of age, or for a minimum of 7 years from the last service, whichever is longer. Records relating to adult clients are generally retained for a minimum of 7 years from the date of the last service.

When records are no longer required to be retained, they are securely destroyed or permanently de-identified.

8. Accessing and correcting your information

You have the right to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, out of date, or incomplete. To make a request, please contact us using the details in Section 10. We will respond to your request within a reasonable timeframe, and may need to verify your identity before providing access.

In some circumstances, access may be limited where it would pose a risk to the safety of a child or another person, or where access is restricted by law.

9. If you have a concern or complaint

If you have a concern about how your personal information has been handled, please contact us in the first instance using the details below. We take all concerns seriously and will work with you to resolve the matter.

If you are not satisfied with our response, you have the right to contact the Office of the Australian Information Commissioner (OAIC), or, for NDIS-related concerns, the NDIS Quality and Safeguards Commission.

10. Contact us

If you have any questions about this Privacy Policy, or wish to access, correct, or ask a question about your personal information, please contact:

Khalisa

Little Stomps Occupational Therapy

Phone: 0451 891 195

Email: khalisa@littlestomps.com.au

Website: www.littlestomps.com.au

This policy was last updated June 2026 and may be reviewed and updated from time to time. Updates will be made available on our website.