Privacy Policy

At Nuon Health Pty Ltd, we are committed to protecting the privacy of all individuals we work with, including but not limited to participants of the National Disability Insurance Scheme (NDIS), worker's compensation clients, and those accessing our private or other allied health services. This Privacy Policy outlines how we collect, use, store and disclose personal information in line with applicable Australian laws.

Nuon Exercise Physiology abides by the obligations imposed under federal law, inclusive of the Privacy Act 1988 (Cth), the National Disability Insurance Scheme Act 2013 (Cth), and all other relevant laws, regulations, and guidelines, including those applicable to worker's compensation and health information handling.

Nuon Exercise Physiology will collect information which is considered reasonably necessary to carry out our role as service providers. The kinds of information we collect and store includes, but is not limited to, personal information (as defined under the Privacy Act 1988 (Cth)) about the participants and other users of our services, and about our employees, contractors and providers.

We may collect the following types of personal information:

• Identity details (e.g. name, date of birth)
• Contact information (e.g. phone number, email address)
• NDIS participant number or claim number for worker's compensation
• NDIS plan details, support coordination details, or insurer contact
• Health and medical information, including injuries, diagnoses, and history
• Information about your interactions with Nuon Health staff or platforms
• Documents you upload or provide in person
• Other information required to facilitate or manage your care

This applies to all people interacting with us, including participants/clients, family members, employees, contractors, and referring professionals.

Sensitive information is defined under the Privacy Act 1988 (Cth) as "Information or an opinion about an individual's: racial or ethnic origin; political opinions; membership of a political association; religious beliefs or affiliations; philosophical beliefs; membership of a professional or trade association; membership of a trade union; sexual orientation or practices; criminal record; or health information".

Without your consent, we will not collect information sensitive information. Sensitive information will only be collected if it is specifically required for operational purposes. This is subject to certain exceptions such as when collection is required by law, or when the information is necessary for the establishment, exercise, or defence of a legal claim.

Your personal and health information may be collected to:

• Deliver and coordinate services to you (or the participant) under NDIS, worker's compensation, or private funding
• Communicate with you and/or relevant parties involved in your care
• Process claims, reports, invoices or payments related to service delivery
• Assess and improve our services
• Meet our reporting obligations to insurers, NDIS, or regulatory bodies
• Comply with applicable laws and clinical standards
• Manage risks, feedback, or incidents related to your service

We will not share your information with third parties unless:

• You give written or verbal consent
• It is required or permitted by law (e.g. court order, insurance investigation, safety concern)
• It is necessary to protect someone's life, health, or safety
• We are working with contracted service providers (e.g. IT, admin, claims processing) who are bound by privacy obligations
• In the event of a business restructure (e.g. acquisition), where data may be transferred to a successor organisation

Where appropriate, we will notify you before disclosing personal information.

We take active steps to safeguard the personal information we hold. These include:

• Secure paper and electronic record storage
• Limited access by authorised personnel only
• Encryption of digital communication and records
• Regular audits and updates to our systems
• Secure disposal of documents when no longer required

Information is retained as long as necessary for service provision and as required by law.

Nuon Exercise Physiology aims to ensure that all personal information held about a person is accurate, up to date, complete and relevant before acting on it. If a person learns that the personal information that Nuon Exercise Physiology holds about them is inaccurate, outdated, incomplete, irrelevant, or misleading that person can contact Nuon Exercise Physiology through the methods detailed in Section 7 so that the information can be updated accordingly. You have the right to access and request correction of your personal information.

Where a person requests Nuon Exercise Physiology to correct the personal information we hold about them, we will action this request promptly. A person can request that we notify this change to any other agencies or organisations that we have previously disclosed the personal information too.

If we do not agree to correct our records as requested, we will give written notice of the decision, setting out our reasons for refusing this request and how the person can lodge a complaint about our decision.

We will respond to your request to access or correct your personal information within 30 days of receiving your request. If we require more time to respond, we will notify you and explain the reasons for the delay.

If you have concerns about how we've handled your information:

• Contact us directly by phone or email (see below)
• We will aim to resolve your complaint within 14 days
• If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

If you would like to access your information, update your details, raise a concern, or learn more about this policy, contact:

For general information on your privacy rights, visit the Office of the Australian Information Commissioner at: