Privacy Policy

Last updated: 4 August 2026

CareProof ("we", "us", "our") provides claims, evidence and operational assurance services to disability service providers in Australia. We are committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, how it is held, and your rights.

1. What we collect

• Business contact information you provide through our website, including the SIL Audit-Readiness Scorecard: your name, role, organisation and work email address.
• Scorecard responses describing how your organisation operates (systems used, audit timing, process maturity). These describe your organisation, not individuals.
• Technical and usage information collected via cookies and similar technologies: browser type, pages visited, and advertising campaign parameters (UTM tags).
• Booking information if you schedule a call with us through our scheduling provider (name, email, chosen time).

What we ask you never to submit: personal information about NDIS participants or your workers. Our website forms do not request it, and any client engagement involving operational data is governed by a separate deed of confidentiality and data-handling protocol agreed before any data moves.

2. How we collect it

Directly from you (forms and bookings), and automatically through cookies and the Meta Pixel, which we use to measure the effectiveness of our advertising. You can block cookies in your browser; the website works without them.

3. Why we collect it

• To generate and deliver your audit-readiness score.
• To respond to enquiries and to contact you about the services you have expressed interest in.
• To measure and improve our advertising: aggregate, non-identifying conversion signals are shared with Meta Platforms when you complete a form or book a call.
• To operate, secure and improve our website.

We only send marketing communications related to the interest you registered, and every message includes a working unsubscribe. We do not buy contact lists.

4. Who we share it with

• Service providers that operate our infrastructure: website and database hosting, appointment scheduling, and email. These providers process data on our instructions only.
• Meta Platforms (advertising measurement, as above).
• No one else. We do not sell, rent or trade personal information, and we do not share it with the NDIS Quality and Safeguards Commission, the NDIA, or any regulator except where required by law.

5. Overseas disclosure

Our website and its database are hosted on infrastructure that may be located outside Australia (currently the United States), and Meta Platforms processes advertising data globally. By submitting the scorecard you consent to this transfer of your business contact details. Client engagement data under a signed engagement is handled separately, on Australian-region storage, per our engagement terms.

6. Storage, security and retention

Personal information is stored in access-controlled databases, protected by encryption in transit and authentication controls. Access is limited to authorised personnel. We retain website lead information for up to 2 years from your last interaction with us, then delete it, unless you become a client or ask us to delete it sooner.

7. Access, correction and deletion

You may request access to, correction of, or deletion of your personal information at any time by emailing privacy@careproof.care. We will respond within 30 days. There is no charge for making a request.

8. Complaints

If you believe we have mishandled your personal information, contact us at the address above and we will investigate and respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

9. Changes to this policy

We may update this policy from time to time. The current version is always at this address, with the date above.

10. Contact

Privacy enquiries: privacy@careproof.care

Independence statement

CareProof is an independent advisory service and is not affiliated with, or endorsed by, the NDIS Quality and Safeguards Commission. We are not an approved quality auditor and do not issue statutory audit opinions or compliance certifications.