Privacy Policy

We may collect the following types of personal information: • Identity information: full name, date of birth, gender • Contact information: home address, phone number, email address • Health information: medical history, care needs, disability information, medication details • Financial information: bank account details, pension or benefit status, funding package details • Employment information: résumé, qualifications, working with children/vulnerable persons checks • Website usage data: IP address, browser type, pages visited, referral source We collect sensitive information (including health information) only where it is reasonably necessary to provide care services or where you have consented.

We collect personal information directly from you when you: • Complete an enquiry, referral or intake form on our website or in person • Contact us by phone, email or post • Apply for employment or a carer role • Receive services from us We may also collect information from third parties such as My Aged Care, the National Disability Insurance Agency (NDIA), your GP or treating health professionals, family members or authorised representatives, and referral agencies — but only where you have consented or where the law permits.

We use your personal information to: • Assess your care needs and develop a personalised care plan • Deliver and coordinate home care, NDIS and community services • Communicate with you, your family and your health care team • Process funding claims with My Aged Care, the NDIA or private payers • Recruit, screen and manage carers and staff • Improve our services and website • Meet our legal and regulatory obligations under the Aged Care Act 1997, NDIS Act 2013 and other applicable legislation We will not use your personal information for any purpose that is unrelated to the above without your consent.

We may disclose your personal information to: • My Aged Care and the Australian Government Department of Health and Aged Care • The National Disability Insurance Agency (NDIA) • Your treating health professionals, allied health providers and specialists • Substitute decision-makers, legal guardians or authorised representatives • Our contracted service providers (e.g. IT systems, payroll) who are bound by confidentiality obligations • Regulatory bodies and law enforcement agencies where required by law We do not sell, rent or trade your personal information to third parties for marketing purposes. We do not disclose personal information overseas unless required by law or with your explicit consent.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Our security measures include: • Encrypted digital records systems with role-based access controls • Secure physical storage for paper records • Staff training on privacy obligations and confidentiality • Regular security reviews of our IT infrastructure We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When information is no longer needed, we securely destroy or de-identify it.

You have the right to request access to the personal information we hold about you, and to ask us to correct information that is inaccurate, out of date, incomplete or misleading. To make an access or correction request, please contact our Privacy Officer (see Section 9). We will respond within 30 days. In some circumstances we may be unable to provide access (for example, where it would unreasonably affect the privacy of another person), and we will explain why in writing.

Our website uses cookies and similar technologies to improve your browsing experience and analyse site usage. Cookies are small text files stored on your device. You can disable cookies through your browser settings, but this may affect the functionality of our website. We use analytics tools to understand how visitors use our site. This data is aggregated and does not identify you personally. We do not load tracking or analytics scripts without your consent, in accordance with applicable privacy laws.

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with our Privacy Officer. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC): Website: www.oaic.gov.au Phone: 1300 363 992 Post: GPO Box 5218, Sydney NSW 2001

For any privacy-related enquiries, access requests or complaints, please contact: Privacy Officer Central Home Care Pty Ltd Email: [email protected] Phone: 1800 000 000 Post: PO Box 0000, Australia This Privacy Policy was last updated on 15 August 2026. We may update this policy from time to time. The current version will always be available on our website.