Skip to content
Australian-owned NDIS and business consultants: audit-ready systems and end-to-end support. Free Readiness Quiz →
Trust & Security

Data Privacy & Security

Your information is protected by industry-standard encryption, regular backups and strict access controls, and we are open about how we handle it.

Security First

How We Protect Your Data

Layered security protects your data from collection through to storage and access.

Active

SSL/TLS Encryption

All data in transit is encrypted using industry-standard SSL/TLS protocols (HTTPS). Your data is protected while being transmitted to and from our servers.

Active

Data at Rest Encryption

Sensitive client data (documents, invoices, personal information) is encrypted at rest on our secure servers. Only authorised staff can decrypt and access.

Active

Secure Server Infrastructure

Servers are hosted on enterprise-grade infrastructure with redundant backups, firewalls, and DDoS protection. Regular security patches and updates applied.

Active

Access Controls

Role-based access control ensures only authorised team members can view specific client data. Admin logs track all data access.

Data Handling

How We Handle Your Information

Clear practices for how we collect, store, access and retain your data.

Data Collection

  • We collect personal data only when you provide it (contact forms, portal registration, enquiries).
  • We collect business data only for service delivery (NDIS documents, website content, payroll details).
  • Cookies are used for session management and analytics (Google Analytics). You can opt out anytime.
  • No unnecessary personal data is collected or stored.

Data Storage

  • Client data is stored on Australian-based servers (where possible) for compliance.
  • Data is backed up daily to secure offsite locations.
  • Backup copies are tested monthly for integrity and recoverability.
  • Redundant systems ensure your data is safe even if primary servers fail.

Data Access

  • Only SOL staff involved in your project can access your data.
  • Third-party integrations (e.g., Stripe for payments) access only necessary data.
  • Admin access is logged and audited regularly.
  • No data is accessed without documented business reason.

Data Retention

  • Active project data is kept throughout service delivery and 1 year after completion.
  • Financial records (invoices, receipts) are kept for 7 years (Australian tax requirement).
  • Training records (certificates, progress) are kept indefinitely if you request.
  • You can request deletion of data at any time (within legal compliance limits).

Data Sharing

  • We never sell, rent, or share your data with marketing companies.
  • We never share personal data publicly or on social media without explicit permission.
  • Case studies are published only with written client approval.
  • Integrations with payment processors (Stripe) share only transaction data.
Compliance

NDIS Provider Privacy

NDIS participant information needs extra care. Here is how we handle it.

NDIS Privacy Expectations

SOL understands that NDIS providers hold sensitive participant information. Our processes are designed to meet NDIS Commission expectations:

  • NDIS provider data is isolated from other service data.
  • Access to participant information is restricted to NDIS project team only.
  • Data breaches involving NDIS information are reported to the NDIS Commission as required.
  • Documentation (policies, procedures, audit trails) is maintained for NDIS compliance audits.
Incident Response

If a Data Breach Occurs

We take data security seriously. This is exactly what we do if something goes wrong.

  1. 1

    1. Detection & Containment

    If we detect unauthorized data access or breach, we immediately isolate affected systems and stop the breach.

  2. 2

    2. Assessment

    We assess which data was accessed and which clients are affected within 24 hours.

  3. 3

    3. Client Notification

    You will be notified immediately by phone and email, with details of what happened and what to do.

  4. 4

    4. Regulatory Reporting

    If required by law (e.g., Privacy Act, NDIS Commission), we will report to relevant authorities.

  5. 5

    5. Support & Remediation

    We provide free credit monitoring or other support as appropriate. We also implement changes to prevent recurrence.

Legal Framework

The Australian Laws We Follow

We comply with all relevant Australian privacy and data protection laws.

Privacy Act 1988 (Cth)

SOL complies with Australian privacy law. Your personal information is handled according to the Australian Privacy Principles.

NDIS Act & Rules

For NDIS-related data, we follow NDIS Commission rules on provider obligations and participant privacy.

Spam Act 2003

We send marketing emails only to opted-in contacts. You can unsubscribe anytime.

E-Commerce Act 1999

Our website and service portal comply with Australian e-commerce requirements for secure transactions.

Your Rights

Your Data Privacy Questions Answered

Can I see what data SOL has about me?

Yes. You have the right to request a copy of your personal data. Email info@solbusinessconsultant.com.au with 'Data Access Request' in the subject. We will provide information within 30 days.

Can I ask SOL to delete my data?

Yes, with limitations. We must keep financial records for 7 years (tax law). Training certificates may be kept on request. Contact us to discuss your specific situation.

Can I correct wrong information?

Absolutely. If any personal data is incorrect, let us know and we will update it immediately. Email info@solbusinessconsultant.com.au with corrections.

Who can see my client portal?

Only you (and your authorized team members if granted access). SOL staff involved in your project can see project data only.

What if I don't agree to data practices?

You can opt out of non-essential data collection (e.g., marketing emails). However, essential data (payment, service delivery) is required for service use.

How do I make a privacy complaint?

Contact us at info@solbusinessconsultant.com.au with 'Privacy Complaint' in the subject. If unsatisfied, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Privacy Questions?

Contact our privacy team with any data privacy questions, to request your data or to report a concern.