Privacy policy

Information collected and why

The referral form collects the referrer's name, role and contact details; participant identity and contact details; requested services, funding type and relevant referral information. Optional fields include date of birth, address, NDIS number, plan dates, plan-manager details, goals and safety concerns. These details help us consider suitability, contact you and the participant, plan safe services and clarify funding and billing arrangements. Share only information relevant to the referral and obtain the participant's or guardian's consent before submitting.

The contact form collects your name, email, message and any optional phone number or subject so we can respond. Website referral and enquiry submissions are stored in the website's Lovable Cloud database. The website does not provide a referral-document upload control; contact us to discuss an appropriate way to share reports.

Who receives the information

Referral and enquiry notifications contain the submitted information and are sent to admin@todayandtomorrowahs.com.au using Lovable's managed email service. Access to this mailbox is limited to administrative staff, as confirmed by the practice. Administrative and treating staff use relevant information to respond and arrange care. Recording a plan manager's invoice email does not automatically send them a referral copy.

Lovable Cloud and its service providers process information to host this website, store submissions and send notifications. Website visitors and ordinary website sign-in accounts cannot retrieve stored referral or enquiry records through the public website. Authorised privileged backend access remains possible for administration. Email and hosting involve third-party services; this policy does not promise that all processing or storage occurs in Australia.

Optional emailed referral copy

The emailed-copy checkbox is off by default. Selecting it requests a copy containing the submitted referral information, including any health, NDIS, contact or safety details you entered. It is sent to the referrer's email entered in “Your email”, not the participant's or plan manager's email. Check that address carefully and use a mailbox you are authorised to use for this information.

Email is not a private clinical portal and cannot be guaranteed secure or successfully delivered. Your email provider may retain the copy. Leave the checkbox unchecked if you do not want sensitive referral information emailed to that address. A successful website submission confirms the record was saved, not that notification or copy emails arrived.

Retention and deletion

The practice's stated retention period for referral records is 7 years. This is a practice policy, not an automatic expiry: the website currently has no automated seven-year deletion schedule. Database records, email copies and any subsequent clinical records may be held in separate systems. Backup expiry and deletion from email or clinical systems require separate handling; deleting a website record does not remove every copy.

Contact us to ask about retention or request deletion. We will consider your request against applicable record-keeping obligations and explain any reason information must be retained. No automatic deletion or complete erasure from backups is promised.

Access, correction and privacy concerns

To request access to your information, correct a referral, ask about deletion or raise a privacy concern, email admin@todayandtomorrowahs.com.au or call 0431 124 842. Avoid including unnecessary clinical details in the initial message. We may need to verify identity and authority before disclosing or changing records. We respond to enquiries within two business days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner about a privacy complaint.

Optional website analytics

Google Analytics is off by default. You can allow it using “Optional website analytics” in the footer and change your choice there at any time. Refusing analytics does not prevent enquiries or referrals. Your preference is stored in this browser; other browsers and devices have their own choice.

When allowed, we measure visits using broad page groups, counts of completed referrals and contact actions, and numeric loading and interaction performance. We do not intentionally send names, email addresses, phone numbers, form answers, clinical details, NDIS numbers, search terms, article-specific addresses or authenticated workspace activity. Google's service also processes technical information such as IP address, browser/device information and cookie identifiers; this is not anonymous measurement. Google Analytics settings outside this website also need to match these limits.

Turning the footer switch off stops future analytics events from this website; it does not erase information already sent to Google. Previously set cookies may remain until they expire or you clear them in your browser. Essential hosting and security logs may still record technical request information independently of optional Google Analytics.