Privacy Policy

Johnny H Disability Supports Pty Ltd (Johnny H) respects your privacy and is committed to protecting the personal information we collect and hold.

This Privacy Policy explains how Johnny H collects, uses, stores and discloses personal information when you use our website, create an account, make a booking, enquire about our services, participate in our programs or supports, or otherwise interact with us.

Johnny H handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What personal information do we collect?

The personal information we collect depends on how you interact with Johnny H and the services or supports you access.

This may include:

• your name, date of birth and contact details
• your address and emergency contact details
• account and website login information
• booking, attendance and participation information
• payment, invoice and billing information
• NDIS-related information, including plan management and funding information
• details of your Support Coordinator, Plan Manager, nominee, parent, carer or other authorised representative
• transport and travel requirements
• communication preferences
• information you provide when making an enquiry, completing a form, providing feedback or contacting our team
• photographs, video or other media where appropriate consent has been provided.

Sensitive information

To safely and appropriately provide disability supports, programs, activities and other services, we may also need to collect sensitive information.

This may include information about:

• disability and support needs
• health and medical information
• medications
• allergies and dietary requirements
• accessibility requirements
• behaviour support or risk information
• other information relevant to safely providing your supports.

We only collect sensitive information where it is reasonably necessary for our functions or activities and where we have the appropriate consent or are otherwise permitted or required by law to collect it.

How do we collect personal information?

We generally collect personal information directly from you when you:

• create or update a Johnny H account
• make or manage a booking
• register for a program, activity, event or getaway
• complete an online or paper form
• contact us by phone, email, through our website or in person
• subscribe to communications from Johnny H
• participate in our services or supports
• provide feedback or make a complaint.

We may also receive personal information from another person or organisation where appropriate. This may include:

• a parent, carer, guardian or nominee
• a Support Coordinator
• a Plan Manager
• another authorised representative
• the NDIA or another government body where permitted
• a health professional or support provider where appropriate and authorised
• a person making a booking or enquiry on your behalf.
• Where practicable, we will make you aware when personal information is collected from another source.

Why do we collect and use personal information?

Johnny H may collect, hold and use personal information to:

• provide disability supports and services
• assess, process and manage bookings
• create and manage website accounts
• communicate with participants and their authorised representatives
• confirm NDIS funding and payment arrangements
• prepare schedules of supports, service agreements, invoices and other service documentation
• organise transport, activities, events, programs and supported getaways
• understand individual support, accessibility, health and safety requirements
• respond to enquiries, requests, feedback or complaints
• manage payments and outstanding accounts
• maintain accurate service and participant records
• improve our website, services and participant experience
• send service information, updates and marketing communications where permitted
• comply with our legal, regulatory, safeguarding and reporting obligations.

We will only use or disclose personal information for the purpose for which it was collected, a related purpose you would reasonably expect, with your consent, or where otherwise permitted or required by law.

Support Coordinators, Plan Managers and authorised representatives

Where you have authorised another person or organisation to assist with your supports, we may share relevant personal information with them.

This may include a Support Coordinator, Plan Manager, nominee, parent, carer, guardian or other authorised representative.

The information shared will depend on the authority provided and may include information relating to bookings, funding, invoices, service delivery and other matters necessary to coordinate your supports.

Payments

Payments made through our website may be processed by third-party payment providers.

Johnny H does not generally receive or store your complete credit or debit card number when a payment is processed through an external payment gateway. Payment providers may collect and process payment information in accordance with their own privacy and security practices.

Photographs, video and media

Johnny H may take photographs or video during some programs, activities, events or services.

We will manage the use of identifiable photographs, video and other media in accordance with the consent provided to us. Where consent has not been provided, or has been withdrawn, we will take reasonable steps to ensure identifiable images are not used for promotional or marketing purposes.

You can contact Johnny H if you would like to review or change your media consent preferences.

Website information and cookies

When you use the Johnny H website, certain information may be collected automatically. This can include:

• IP address
• browser and device information
• pages visited
• date and time of your visit
• interactions with website features
• referring website or source
• other technical information about how the website is used.

We may use cookies and similar technologies to operate the website, remember preferences, understand how people use the website and improve its functionality.

Some cookies or similar technologies may also be provided by third-party services used for website analytics, advertising or other functionality.

Where required or appropriate, you can manage your cookie preferences through our website or your browser settings. Disabling some cookies may affect the way certain website features operate.

Analytics and online advertising

Johnny H may use analytics and advertising services to understand website activity and improve our communications and marketing.

These services may use cookies, pixels or similar technologies.

We take reasonable steps to ensure that sensitive information is not intentionally provided to advertising or analytics platforms through these technologies.

Where personal information is used for direct marketing, you can opt out of receiving those communications at any time.

Marketing communications

If you have subscribed to our communications, made an enquiry, used our services or otherwise agreed to receive updates, we may contact you about Johnny H programs, events, services, supported getaways or other relevant information.

You can unsubscribe from marketing emails using the unsubscribe option provided in the communication or by contacting us.

Service-related communications that are necessary to manage your account, booking or supports may still be sent where required.

When may we disclose personal information?

Johnny H may disclose personal information to third parties where this is reasonably necessary to provide our services or operate our organisation.

These may include:

• authorised Support Coordinators, Plan Managers, nominees, parents, carers or guardians
• payment processing providers
• website, booking and information technology providers
• professional advisers
• transport, accommodation, activity and service providers where information is required to safely deliver a booked service
• government agencies, regulators or law enforcement bodies where required or authorised by law
• other organisations where you have authorised the disclosure.

We seek to limit disclosures to the information reasonably necessary for the relevant purpose.

We may also use or disclose de-identified or aggregated information where individuals cannot reasonably be identified.

Overseas disclosure and storage

Some of the third-party technology, software, cloud storage or service providers used by Johnny H may store or process information outside Australia.

Where personal information may be disclosed to overseas recipients, Johnny H will take reasonable steps to ensure it is handled consistently with applicable Australian privacy requirements.

[Johnny H to confirm whether specific countries can practicably be identified and listed here.]

How do we protect your information?

Johnny H takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

Our safeguards may include:

• access controls and user permissions
• password and account security measures
• secure systems and technology providers
• staff confidentiality requirements
• internal procedures for handling personal and sensitive information
• appropriate disposal or de-identification of information when it is no longer required, subject to legal and record-keeping obligations.
• No electronic system or method of transmission is completely secure, but we take reasonable steps appropriate to the nature of the information we hold.

Data breaches

Johnny H has processes for responding to suspected or actual data breaches.

Where a data breach is likely to result in serious harm and notification is required under the Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

Accessing or correcting your personal information

You may request access to personal information Johnny H holds about you or ask us to correct information that is inaccurate, incomplete or out of date.

We may need to verify your identity before providing access or making a change.

In some circumstances, the law may permit or require us to refuse access to particular information. If this occurs, we will explain the reason where we are permitted to do so.

To request access or correction, please contact us using the details below.

Anonymity and pseudonyms

Where practicable, you may interact with Johnny H anonymously or by using a pseudonym.

However, we will generally need to know your identity where you are creating an account, making a booking, accessing disability supports, arranging NDIS funding or where identification is otherwise necessary or required by law.

Privacy complaints

If you have a concern or complaint about how Johnny H has handled your personal information, please contact us using the details below.

We will review your complaint and aim to respond within a reasonable period.

If you are not satisfied with our response, you may be able to make a complaint to the Office of the Australian Information Commissioner.

Contact us

For questions about this Privacy Policy, to request access or correction to your personal information, or to make a privacy complaint, please contact:

Johnny H Disability Supports Pty Ltd

Email us

Phone: 1300 053 001

Postal address: Shop 9/228 Varsity Parade, Varsity Lakes QLD 4227

Changes to this Privacy Policy

Johnny H may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or information-handling practices.

The current version will be published on our website.

Last updated: September 2026