Privacy policy

ESIO is provided by Intelexact Technologies Pty Ltd.

Last Updated: 29 July 2025

1. Privacy Policy

Intelexact Technologies Pty Ltd ACN 645 405 116 (Intelexact, we, our, us) is committed to complying with the Australian Privacy Principles and the Privacy Act 1988 (Cth) (Privacy Act).

This Privacy Policy sets out the way in which Intelexact collects, uses, stores and discloses your personal information.

This Privacy Policy may be updated from time to time. If practical, we will endeavour to notify you of any updates to our policy (e.g., through push notifications within our website or software products, or via email).

2. What is personal information?

The Privacy Act defines personal information as information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.

Personal information includes sensitive information, which is defined under the Privacy Act as information or an opinion about a person’s race, ethnic origin, political opinions, membership of political associations and trade associations, religious or philosophical beliefs, sexual orientation or practices, criminal record, health information, genetic information about an individual that is not otherwise health information, biometric information that is used for the purpose of automated biometric verification or biometric identification and biometric templates.

3. Types of personal information we collect

The particular types of personal information that we collect will depend on the nature of our relationship with you, such as whether you have a general enquiry, are a customer or business partner, NDIS support worker or patient. Generally, we only collect personal information reasonably necessary for enabling our services and organisational functions.

We collect various types of personal information including, but not limited to, your name, age, date of birth, contact details, job title and organisation, health records and medical history, guardianship information and relevant family history, banking details, and information relating to your use of our services that allow us to improve or personalise your use of our products or services.

4. How do we collect personal information?

We collect your personal information from:

(a) you directly, for example when you create an account on our products or services, or submit a query through our website;

(b) content provided through, or uploaded to, our software products and services by you or other users of the products or services;

(d) from public records or other publicly accessible sources.

Unless it is impracticable, we will provide you with the source of your personal information if requested.

5. Anonymity and pseudo-anonymity

Due to the nature of our products and services, it is not practical for us to interact or communicate with you on an anonymous basis or using a pseudonym. We require your personal information in order to provide you with our products and services, or respond to any questions, concerns or inquiries you may have.

6. Purpose of collecting personal information

6.1. General

We collect, use and hold your personal information for the following purposes:

(a) to enable you to register to, and use, our services, software products or other products and services, including those services which facilitate connecting our NDIS service provider customers with NDIS support workers and patients;

(b) to carry out statistical analysis and improve or personalise our products and services to you;

(d) to comply with a law, regulation, court order or other legal process;

(e) to investigate or report suspected unlawful activity; and

(f) to protect, enforce or defend our rights.

We will not use your sensitive information for direct marketing purposes.

7. Who do we share your personal information with?

We may share or disclose your personal information to:

(a) the NDIS care provider in connection with the provision of a care service by you or to you;

(b) our related entities and bodies corporate and associated entities who help us deliver our products or services;

(c) our service providers and partners who assist us to deliver or support our services, such as IT or storage service providers or marketing service providers;

(d) our professional advisers, e.g., lawyers and accountants;

(e) law enforcement officers, regulators, courts and government agencies, if permitted or required:

(i) by law, regulation, court order or other legal process;

(ii) to assist in the prevention or detection of crime;

(iii) to improve the safety of our website or services;

(iv) in order to protect our or any user’s rights; or

(v) to prevent a threat to any person’s life, health or safety; and

(f) any purchaser or prospective purchaser of our business, including in the case of bankruptcy, a merger, acquisition, reorganisation, sale of assets or assignments, or due diligence in respect of any such transactions.

8. Overseas disclosure of personal information

Any personal information collected and held by Intelexact will only be disclosed or transferred to destinations within Australia.

9. Automated decision-making

We may process your personal information using semi- or fully- automated decision-making systems, being any computer program or artificial intelligence, for the purposes of making suggestions or offering alternatives as part of the provisions of services to you. We do not use semi- or full- automated decision-making systems to do anything which is substantially and directly related to making a decision that could significantly affect the rights or interests of an individual.

10. Third-party websites

Our website or services may include links to other websites or services operated by third parties. This Privacy Policy does not apply to the data processed by such third-party websites or services, and we have no control over the actions of those third parties in respect of your personal information.

11. Cookies

When you use our website or services, we may use “cookies”, traffic measurement software or other similar technologies to personalise or improve your user experience, including:

(a) Functionality. These cookies allow us to recognise you when you access our website or services, and remember your selected preference.

(b) Analytics and customisation. These cookies help us understand how you use our website or services, how effective our marketing campaigns are, or to help us customise our website or services for you.

(c) Advertising. These cookies allow us to collect information about your activities on our website or services (including the content you viewed and links you clicked), so we can present advertisements based on your activities.

If you do not want your information to be collected through the use of cookies or traffic measurement software, your device and/or browser may enable you to delete or “turn off” cookies or some of the measurement software features. However, some or all parts of our software or website may not function properly if these features are disabled.

12. De-identified data

We may use de-identified and aggregated forms of information for any purpose, including without limitation, artificial intelligence machine learning, statistical analysis, product or service development or any other commercial purpose. We take reasonable steps to remove or deidentify your personal information so that this data cannot be associated to you.

13. Data retention

We will store your personal information for so long as is required to provide you with our products and services or some other purpose for which your information was collected, as set out in this Privacy Policy.

When we no longer require your personal information to carry out any such purpose or if required by law, we will remove or de-identify your personal information as soon as reasonably possible.

However, we may retain your personal information for another period to comply with any applicable law, for the prevention of fraud, to resolve disputes or for other legitimate purposes.

14. Data security

We take reasonable steps to implement and maintain technical and organisational measures to protect your personal information (such as, data encryption and pseudonymisation measures) in our custody or control.

15. Access and correction

You may request access to your personal information, or correct any inaccurate or out of date information by contacting us using the details in section 17.

We may refuse your request to access or correct your personal information for legitimate reasons, including if we believe that granting you access will endanger the life, health or safety of any person, would adversely impact the privacy of other individuals, that the request is frivolous or vexatious, or if your personal information is part of ongoing or pending legal proceedings between you and Intelexact.

16. Complaints

You should contact us immediately if:

(a) someone has gained unauthorised access to your personal information;

(b) you believe we have breached our privacy obligations (including under the Privacy Act) or your privacy rights in any way; or

You can find more information about your rights and obligations in respect of privacy at www.oaic.gov.au or by contacting the Office of the Australian Information Commissioner at:

Address: GPO Box 5218, Sydney NSW 2001

Email: enquiries@oaic.gov.au

17. Our contact details

You may contact us at:

Email: Attn: Privacy Officer

support@intelexact.com