Privacy Policy

Ability Directory (https://abilitydirectory.com) respects your privacy. This policy explains what information we collect, how we use it, and your rights.

The short version: We collect minimal data. If you voluntarily submit your email, name, or phone number through one of our forms, we store it for the stated purpose only. We do not collect health or disability information, and we do not require user accounts. We do not sell or share any data with third parties.

1. Information we collect

Information you voluntarily provide

When you use certain features on this site, you may choose to provide personal information. We only collect what you explicitly submit:

• Email signup / quiz: If you sign up for updates or complete our provider matching quiz, we collect your email address to send you relevant information. You can unsubscribe at any time.
• Provider claim form: If you claim a listing, we collect your name, email address, and optionally your phone number and role, to verify your association with the listing.
• Suggest an edit: If you submit a correction, we optionally collect your email address in case we need to follow up.

We use this information only for the purpose stated at the time of collection. We do not use it for marketing unless you have explicitly opted in.

Information we do NOT collect

• Health or disability information of any kind
• NDIS plan details, participant numbers, or funding information
• Account or login credentials (we have no user accounts for visitors)
• Payment or financial information
• Location data from your device

Anonymous usage data

We use privacy-friendly analytics to understand how visitors use the site. This may include:

• Pages visited and time spent on pages
• Referring website (how you found us)
• General geographic region (country/city level, not precise location)
• Device type and browser

This data is collected in aggregate and cannot be used to identify individual visitors. We do not track individual users across sessions.

2. Cookies

We use privacy-friendly analytics tools that do not use cookies or other tracking technologies to identify individual visitors. We do not use advertising cookies, retargeting pixels, or third-party tracking scripts.

If our analytics or hosting providers set any essential cookies (for example, for security or performance), these do not contain personal information and are not used for tracking purposes.

Embedded Google Maps on provider pages may set cookies or collect data in accordance with Google's Privacy Policy. We do not control these cookies.

3. Third parties

We do not sell, share, rent, or trade any visitor data with third parties. The third-party services we use are limited to:

• Hosting provider (Vercel) — serves the website and may process server logs containing IP addresses in accordance with their privacy policy
• Analytics — privacy-focused, aggregate-only analytics with no personal data collection
• Email service (Resend) — used to send verification emails for provider claims, in accordance with their privacy policy
• Database (Supabase) — stores directory data and form submissions, in accordance with their privacy policy
• Google Maps — embedded maps on provider pages are loaded from Google and are subject to Google's Privacy Policy

4. Provider information

This site displays publicly available information about NDIS providers, sourced from public directories, Google Maps, and provider websites. This information includes business names, addresses, phone numbers, and other details that providers have made publicly available.

If you are a provider listed on this site and would like to update or remove your listing, please contact us at hello@abilitydirectory.com.

5. Data retention

We retain form submission data (such as email addresses from the quiz or provider claim requests) for as long as it is needed for the stated purpose. Email subscriptions are retained until you unsubscribe. Suggested edit submissions are retained until the correction is processed, after which any personal information is deleted.

You may request deletion of your data at any time by contacting us at hello@abilitydirectory.com.

6. Children's privacy

This site is intended for adults seeking information about NDIS providers for themselves or people they support. We do not knowingly collect any information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take steps to remove it.

7. Your rights

If you have submitted personal information through any of our forms, or if you have any privacy concerns, you have the right to:

• Contact us to ask what data, if any, we hold about you
• Request removal of any information relating to you
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

8. Data security and breach notification

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access. Our database is hosted by Supabase (with data stored in cloud infrastructure that may include servers located outside Australia) and our website is hosted by Vercel.

In the event of a data breach that is likely to result in serious harm to any individual, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988.

9. Applicable law

This privacy policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

10. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

For privacy-related questions or requests, contact us at hello@abilitydirectory.com.