What information we collect and why

​

When you book with us or submit an enquiry, we'll ask for:

• Your contact details (name, email, phone)

• Relevant background information to help us work together effectively

• Health information necessary for providing therapy/coaching

• NDIS participant number and plan details (if applicable)

We only collect what we actually need to do our job properly. No unnecessary forms, no data harvesting.

​

How we store your information

​

Your personal and health information is stored securely using encrypted, password-protected systems. This means:

• Secure encrypted storage and transmission

• Password-protected access

• Regular security updates

• Limited access (only Leanne and essential admin staff)

We comply with the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), plus NDIS Practice Standards for privacy and confidentiality.

​

​

NDIS participants - what you need to know

If you're an NDIS participant, we:

• Keep your information separate and secure as required by NDIS Practice Standards

• Only share information with the NDIA when necessary for plan management or as required by law

• Won't share your information with other providers without your explicit consent

• Maintain records according to NDIS requirements (minimum 7 years)

​

​

When we might share your information

​

Generally, what we talk about stays between us. The exceptions are:

• With your consent - if you ask us to coordinate with other providers, GP, etc.

• Legal obligations - if there's serious risk of harm to you or others, or if required by court order

• NDIS requirements - reporting to NDIA as needed for plan management

• Professional supervision - de-identified information only, for quality assurance

​

​

Your rights

​

You can:

• Ask to see what information we hold about you

• Request corrections to your information

• Ask us to delete your information (with some legal limitations)

• Withdraw consent for how we use your information

• Make a complaint if you're unhappy with how we handle your privacy

​

How long we keep your information

​

Clinical records are kept for 7 years from last contact (or longer if you're an NDIS participant and it's required). After that, they're securely destroyed.

 

Cookies and website stuff

​

This website uses basic analytics to see how people use it (like which pages are visited). No personal information is collected through website browsing. If you submit a contact form, that's stored securely and only used to respond to your enquiry.

​

Questions or concerns?

​

If you want to know more about how we handle your information, or if you have concerns, just ask. You can also make a formal complaint to the Office of the Australian Information Commissioner (OAIC) if needed.

Contact: hello@3mindsndservices.com.au

Last updated: 05 Feb 2026

​