Monday to Sunday, 9am to 5pm
How Lycon Care collects, uses and protects personal information, in line with the Australian Privacy Act 1988.
Lycon Care respects your privacy and is committed to protecting the personal information entrusted to us.
As an NDIS provider, we may collect and manage information about participants, their families and support networks, workers, job applicants, professionals and other people who interact with us.
We only collect, use, hold and disclose personal information for legitimate purposes connected with our services and business, and we take reasonable steps to keep information secure and confidential.
This Privacy Policy explains how Lycon Care manages personal information and how you can contact us about your privacy.
This Privacy Policy applies to personal information collected or held by Lycon Care about:
The type of information we collect depends on our relationship with you and how you interact with Lycon Care. Personal information may include:
Because Lycon Care provides disability support services, we may need to collect sensitive information where it is reasonably necessary to provide safe and appropriate supports. This may include:
Sensitive information receives additional protection under Australian privacy law. Where consent is required, Lycon Care will seek appropriate consent before collecting, using or disclosing sensitive information unless an exception applies under applicable law.
Where Lycon Care provides services to children or young people, we may collect information about the child or young person and their parent, guardian, nominee or authorised representative.
We take particular care when handling information relating to children and young people. Where appropriate, Lycon Care will communicate with and obtain consent from a parent, guardian, nominee or authorised representative in accordance with applicable law and the circumstances of the service.
If you apply for or work with Lycon Care, we may collect information reasonably necessary to assess your suitability, meet compliance requirements and manage your employment or engagement. This may include:
We will handle worker and applicant information in accordance with applicable privacy and employment requirements.
Where reasonably practicable, Lycon Care collects personal information directly from the individual. This may occur through face-to-face discussions, telephone calls, emails, our website, online forms, participant intake and referral processes, service agreements, support coordination communications, recruitment and onboarding processes, service records, feedback and complaints, and other communications with Lycon Care.
In some circumstances, we may collect information from another person or organisation where authorised or permitted by law. This may include parents, guardians, nominees or authorised representatives; family members or carers; support coordinators; plan managers; other service providers; health professionals; the National Disability Insurance Agency (NDIA); the NDIS Quality and Safeguards Commission; worker screening authorities; referees or previous employers; professional advisers; and other relevant organisations or individuals.
Lycon Care may collect, use and hold personal information to:
We will generally only use or disclose personal information for the purpose for which it was collected, a related purpose that would reasonably be expected, with consent, or where otherwise permitted or required by law.
Depending on the circumstances, Lycon Care may disclose relevant personal information to participants and their authorised representatives; parents, guardians or nominees where appropriate; support coordinators; plan managers; other providers involved in a participant’s supports; health professionals; the NDIA; the NDIS Quality and Safeguards Commission; government agencies and regulators; worker screening authorities; insurers; auditors; professional, legal and accounting advisers; IT and technology providers; payment providers; other contractors or service providers supporting our operations; and other organisations or individuals where authorised or required by law.
We only disclose information that is reasonably necessary for the relevant purpose and will take reasonable steps to ensure that information is handled appropriately.
Where consent is required, Lycon Care will seek appropriate consent before collecting, using or disclosing personal or sensitive information. Where appropriate, we will explain what information is being collected, why it is being collected, how it may be used, who it may be disclosed to, how it will be stored, how you can access or correct your information, and how consent may be withdrawn or changed.
Consent may be withdrawn or amended where applicable. However, withdrawing consent does not necessarily affect information that Lycon Care is required or authorised to collect, use, retain or disclose under law. In some circumstances, withdrawing consent may affect our ability to provide particular supports safely or appropriately.
Information may also be collected, used or disclosed without consent where this is authorised or required by law.
Lycon Care takes reasonable steps to protect personal information from misuse, loss, unauthorised access, unauthorised disclosure, unauthorised modification and other unauthorised interference.
Depending on the information and circumstances, our security practices may include:
Workers and contractors are expected to protect confidential information during and after their engagement with Lycon Care. We do not provide workers with access to information unless access is reasonably required for their role.
When you visit the Lycon Care website, certain technical information may be collected automatically. This may include your IP address, browser and device information, operating system, pages visited, date and time of access, and referring website information.
This information may be used to operate and maintain our website, improve website performance and user experience, identify technical problems, maintain website security, and understand general website usage.
Lycon Care may use cookies or similar technologies. Where third-party analytics or other technologies are used, Lycon Care will manage them in accordance with applicable privacy requirements and update this policy where necessary.
Lycon Care may collect personal information through contact forms, participant referral forms, employment applications, online enquiries, service enquiry forms and other online forms.
Where a form collects participant, health or other sensitive information, Lycon Care will take reasonable steps to ensure that the information is transmitted and stored appropriately. Individuals should only provide information that is reasonably necessary for the relevant enquiry, referral, application or service.
Lycon Care may use external providers to support the operation of our business. These may include providers of rostering and scheduling systems, accounting and invoicing systems, payment services, cloud storage and document management, email and communications, information technology, website services, professional services and other business systems.
Lycon Care currently uses Google Workspace, including Google Drive, Microsoft OneDrive and Microsoft SharePoint for business email, document storage, document management and collaboration.
Where these providers handle personal information on our behalf, Lycon Care will take reasonable steps to select and manage providers appropriately and maintain suitable privacy and security arrangements.
Some technology or service providers used by Lycon Care may store or process information outside Australia. Where personal information is disclosed to an overseas recipient, Lycon Care will take reasonable steps to manage the disclosure in accordance with applicable Australian privacy obligations. Where required, we will obtain appropriate consent or take other steps required by law.
The countries where overseas recipients are located may depend on the particular technology and service providers Lycon Care uses.
Lycon Care retains personal information for as long as reasonably necessary for the purpose for which it was collected or where retention is required by law, regulatory requirements, contractual obligations or legitimate business requirements.
Certain participant and NDIS-related records may need to be retained to meet regulatory, service delivery, auditing, reporting and record-keeping requirements.
When personal information is no longer required and there is no legal or regulatory reason to retain it, Lycon Care will take reasonable steps to securely destroy, delete or de-identify the information.
You may ask Lycon Care for access to personal information we hold about you. Requests should be made in writing to our Privacy Contact. We may need to verify your identity before providing access to information.
In some circumstances, access may be refused or limited where permitted by law. If we refuse or limit access, we will explain the reasons where appropriate.
You may ask Lycon Care to correct personal information we hold about you if you believe it is inaccurate, incomplete, out of date, irrelevant or misleading. We will take reasonable steps to correct information where appropriate.
If we do not agree that information requires correction, we will explain the reason where appropriate and may provide information about other available options.
Where Lycon Care relies on your consent, you may ask us to withdraw or change that consent. Requests should be directed to our Privacy Contact.
Withdrawal of consent does not necessarily affect information that Lycon Care is required or authorised to retain, use or disclose under law. It may also affect our ability to provide certain services or supports where the information is reasonably necessary to provide those services safely or appropriately.
Where reasonably practicable, Lycon Care will allow individuals to interact with us without identifying themselves or by using a pseudonym. This may not be practicable where identifying information is reasonably necessary to:
Lycon Care may communicate with individuals about our services, activities, updates and other information relevant to our relationship with them. We will comply with applicable privacy and direct marketing requirements.
Lycon Care does not sell personal information.
Where consent is required for direct marketing, we will seek appropriate consent and provide a reasonable way to opt out of receiving further marketing communications.
If you believe Lycon Care has not handled your personal information appropriately, or you have a privacy concern or complaint, please contact our Privacy Contact, Elya Sirgyous, at elya@lyconcare.com.au or 0431 720 868. You may also contact us through www.lyconcare.com.au.
We will acknowledge and investigate privacy complaints and aim to respond within a reasonable period. We may ask for additional information where necessary to help us investigate and resolve your complaint.
We will handle privacy complaints fairly and confidentially where appropriate. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.
Lycon Care takes data security seriously. If we become aware of a suspected or actual data breach, we will take reasonable steps to:
Lycon Care will also consider whether any NDIS reporting, notification or incident management requirements apply.
Lycon Care may update this Privacy Policy from time to time. Updates may be required because of changes to our services, changes to the way we collect, use or store information, changes to technology, changes to privacy legislation, changes to NDIS requirements, or improvements to our privacy practices.
The most current version of this Privacy Policy will be made available on the Lycon Care website. We intend to review this policy at least annually and sooner if there is a significant change to our information-handling practices or applicable requirements.
Lycon Care does not currently intend to use automated decision-making systems to make decisions based on personal information that could reasonably be expected to significantly affect an individual’s rights or interests.
If this changes, Lycon Care will review its privacy practices and update this Privacy Policy as required by applicable privacy law.
If you have a question about this Privacy Policy, want to access or correct your personal information, wish to withdraw consent, or have a privacy concern, please contact us.
Policy owner: Lycon Care Management · Approved by Elya Sirgyous, Director & Founder · Effective 30 August 2026 · Version 1.0 · Reviewed at least annually.