Privacy Policy

Last updated: 3.7.26

Inhabit Music Therapy is committed to protecting the privacy of the personal information we collect and hold. As a provider of music therapy services, we are treated as a health service provider under the Privacy Act 1988 (Cth), and we comply with the Australian Privacy Principles (APPs) regardless of our business size.

This policy explains what personal information we collect, how we use it, and how you can access, correct, or make a complaint about the handling of your information.

1. WHAT PERSONAL INFORMATION WE COLLECT

We may collect the following information about clients, their representatives, and other people involved in their care:

  • Name, date of birth, and contact details

  • NDIS participant number and plan details

  • Health, disability, and medical information relevant to therapy

  • Session notes, progress notes, and clinical observations

  • Support coordinator, plan manager, guardian, or family contact details

  • Billing and payment information

2. HOW WE COLLECT PERSONAL INFORMATION

We generally collect personal information directly from you, your guardian or representative, or your support coordinator – for example, through an intake form, service agreement, referral, or conversations during the course of providing therapy. We may also receive information from other members of your support team (e.g. support workers, allied health providers) with appropriate consent.

3. WHY WE COLLECT AND USE PERSONAL INFORMATION

We collect and use personal information to:

  • Provide music therapy services tailored to your goals and needs

  • Communicate with you, your representative, and your support team

  • Prepare session notes, progress reports, and NDIA-requested reports

  • Invoice for services and manage our business records

  • Meet our legal, regulatory, and NDIS Practice Standards obligations

4. WHO WE MAY SHARE YOUR INFORMATION WITH

We may share relevant information with:

  • Your support coordinator and/or plan manager, to coordinate your care and confirm funding

  • The NDIA or NDIS Quality and Safeguards Commission, where required by law or requested as part of your NDIS plan

  • Other health or support professionals involved in your care, where relevant and with your consent

  • Our accountant or bookkeeper, for invoicing and financial record-keeping purposes

We do not sell or use your personal information for marketing purposes, and we do not disclose it to anyone outside the above without your consent, unless required or authorised by law.

5. STORAGE AND SECURITY

We store personal information securely, using a secure practice management system. We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification, or disclosure.

6. HOW LONG WE KEEP YOUR INFORMATION

We retain personal and health information for as long as necessary to provide our services and to meet our legal and regulatory record-keeping obligations, which may require records to be kept for a minimum period after services end (currently at least 7 years for health records, or longer for minors).

7. ACCESS AND CORRECTION

You may request access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, or incomplete. To make a request, contact us using the details below. We will respond within a reasonable timeframe and may need to verify your identity before providing access.

8. COMPLAINTS

If you have a concern about how we have handled your personal information, please contact us in the first instance using the details below. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

9. CHANGES TO THIS POLICY

We may update this privacy policy from time to time. The most current version will always be available on our website.