Privacy Policy

Version: 1.0
Effective Date: 28/06/2026
Review Date: Annually unless otherwise indicated (28/06/2027)
Approved By: Mia Raunik (Business Owner)

Mia Raunik Support Services is committed to providing quality services to you. This privacy policy outlines our ongoing obligations to you in respect of how we manage your Personal Information.

We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act). The APPs govern the way in which we collect, use, disclose, store, secure, and dispose of your Personal Information.

Mia Raunik Support Services acknowledges the trust placed in health and welfare services. We recognise the vital importance of confidentiality, and transparency regarding where your information is stored and shared when working with NDIS support services. We assure you that all personal information provided is protected under the Privacy Act 1988. Further to this, Mia Raunik Support Services is committed to maintaining compliance with the NDIS Quality and Safeguards Commission Practice Standards alongside the APPs.

A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at https://www.oaic.gov.au/.

1. Personal Information

1a) Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect include names, addresses, email addresses, and phone numbers.

1b) When entering into any agreement with Mia Raunik Support Services, you will be asked to voluntarily provide your personal information. We collect your Personal Information for the primary purpose of providing our services to you and liaising with third parties with your consent.

1c) Where practical, you have the right to interact with us anonymously or by using a pseudonym. However, because we provide specialised NDIS support coordination and psychosocial recovery coaching that requires verifying funding and planning health management safely, it is generally not practical or lawful for us to provide these services to you without your real identity

1d) We will never sell your personal information or use your sensitive health information for marketing purposes. We may occasionally use your non-sensitive personal information (such as your email address) to send you service updates, newsletters, or information about our practice. You can opt out of receiving these communications at any time by clicking "unsubscribe" or contacting us directly.

2. Sensitive Information

2a) Sensitive information is defined in the Privacy Act to include information or opinions about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record, or health information.

Sensitive information will be used by us only:

  • For the primary purpose for which it was obtained.

  • For a secondary purpose that is directly related to the primary purpose.

  • With your consent, or where required or authorised by law.

Examples of sensitive information we will likely ask for include:

  • Your NDIS Plan.

  • Information about your disability or disabilities.

  • Information about your current and historical health history, and social circumstances.

2b) You can choose not to disclose this information to us at any time; however, this may impact the quality and safety of your care. Mia Raunik Support Services reserves the right to terminate care, where individuals are unwilling to share information that is essential to provision of services and remaining compliant with risk management reporting obligations.

  1. Storage of Records and Electronic Health Systems

3a) Electronic Health Records and Secure Storage:

Mia Raunik Support Services securely stores participant information using Carepatron, a cloud-based practice management and electronic health record (EHR) platform. Carepatron is used to manage client records, appointments, service agreements, clinical documentation, billing and secure communications.

Carepatron employs industry-standard security measures including encryption of data in transit and at rest, role-based access controls, multi-factor authentication, audit logging and regular security monitoring designed to protect personal and sensitive information from unauthorised access, misuse or disclosure.

Access to participant records is restricted to authorised personnel who require the information to provide services.

3b) Use of AI-Assisted Documentation

Mia Raunik Support Services may use artificial intelligence (AI)-assisted documentation tools integrated within Carepatron to assist with the preparation of clinical notes and documentation following participant appointments.

These tools are used solely to improve administrative efficiency and reduce time spent on documentation, allowing more time to provide direct participant support.

AI-generated content is never relied upon without human review. All notes, reports and records are reviewed, edited and approved by your service provider (Mia Raunik) before becoming part of your official record.

AI tools are not used to make decisions about participants, determine eligibility for services, replace professional judgement or provide automated advice.

Any AI-assisted processing occurs within Carepatron's secure platform and is subject to Carepatron's privacy, security and confidentiality safeguards.

Further information about Carepatron's privacy and security practices is available in Carepatron's Privacy Policy.

4. Information Sharing with Third Parties

4a) Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances, we may be provided with information by third parties. In such cases, we will take reasonable steps to ensure that you are made aware of the information provided to us.

The provision of NDIS Services inherently requires communication between multidisciplinary teams. This assists us in advocating in your best interests and completing Support Coordination or Psychosocial Recovery Coaching at a high-quality level.

When entering into an agreement with Mia Raunik Support Services, we will ask for your consent to share relevant information between you, your care team, and the NDIA. This consent can be withdrawn at any time. The process of obtaining ongoing, informed consent regarding who Mia Raunik Support Services is liaising with will be strictly preserved.


4b) We do not actively sell or disclose your information to overseas recipients. Mia Raunik Support Services primarily stores participant information electronically using secure cloud-based practice management software. Some technology providers used by our practice, including Carepatron, may process or securely store information using servers located outside Australia (including the United States or other jurisdictions). Where this occurs, we take reasonable steps to ensure these providers maintain security standards consistent with Australian privacy obligations and contractual confidentiality requirements. By engaging our services, you acknowledge that secure overseas processing or storage may occur where necessary to provide our services.

5. Disclosure of Personal Information without consent

5a) Your Personal Information may be disclosed without your consent in a limited number of circumstances, including the following:

  • Where required or authorised by law (e.g., mandatory reporting requirements for safety, abuse, or neglect).

  • Where there is a serious and imminent threat to your life, health, or safety, or to public health and safety.

  • When responding to a formal order from a court, tribunal, or a regulatory body like the NDIS Quality and Safeguards Commission.

6. Security of Personal Information

6a) Storage and Protection of your personal information: Your Personal Information is stored in a manner that reasonably protects it from misuse, loss, and from unauthorised access, modification, or disclosure. All personal and sensitive information is obtained and stored in digitally compliant, secure Electronic Health Software.

When your Personal Information is no longer needed for the purpose for which it was obtained, information will be retained for a minimum of 7 years from the date the record was created or from the last date a service was provided, whichever is later. Under NDIS compliance standards, archiving files is required; deleting records upon discharge is a compliance breach.

For participants under the age of 18 at the time of service provision, records must be retained until the child turns or would have turned 25 years old.


6b) Data Breach Procedure: In the event that your personal or sensitive information is compromised due to a data breach (such as unauthorized access, disclosure, or loss of data), we are bound by the Notifiable Data Breaches (NDB) Scheme under the Privacy Act 1988. If a data breach occurs and is likely to result in serious harm to you, we will assess the situation immediately. We will notify you directly and report the incident to the Office of the Australian Information Commissioner (OAIC) as soon as practicable, detailing what happened and the steps you should take to protect yourself.

7. Access to your Personal Information

7a) You have a right to request access to the personal information, case notes, support coordination records, and psychosocial recovery coaching plans that we hold about you.

7b) How to Request Access
To request access to your records, please contact us directly in writing at admin@miarauniksupports.com.au. To protect your privacy, we will require you to verify your identity before we can release any information. If you are a current participant of Mia Raunik Support Services, we are able to action verbal requests, and will document formally your request and upload this to your client portal.

7c) Our Response and Timeframes
We will acknowledge your request promptly and aim to provide access to your information within 30 days. In most cases, we will provide this information to you free of charge. However, if your request requires an extensive amount of administrative work, we reserve the right to charge a reasonable, cost-reflective fee for retrieving and copying the records. We will discuss any potential fees with you beforehand.

7d) When Access May Be Denied
In rare circumstances, we may refuse to grant access to your records. This only occurs if permitted or required under the Privacy Act 1988 (Cth). For example, we may withhold information if providing it would:

  1. Pose a serious threat to your life, health, or safety, or to the safety of the public.

  2. Unreasonably impact the privacy of another individual.

  3. Breach legal professional privilege or court orders.

If we refuse your request, we will provide you with a written notice explaining our reasons (unless it is unreasonable to do so) and information on how you can lodge a complaint about the refusal.

7e) Correcting Your Information
We are committed to take reasonable steps to ensure your personal information is accurate, up-to-date, and complete. If you believe the information we hold about you is incorrect, incomplete, or out of date, please contact us and we will update it promptly.

8. Policy Updates

8a) This Policy is updated annually, however may be updated prior to this to ensure ongoing compliance with legislative updates and NDIS standards. The most current version of this policy will always be available on our website.

9. Privacy Policy Complaints and Enquiries

9a) If you have any questions, concerns, or a complaint about how we have handled your personal information, please contact us directly:

  • Contact Person: Mia Raunik

  • Email: admin@miarauniksupports.com.au

  • Phone: 0408057836

We take all privacy complaints seriously. We will investigate your concern thoroughly and aim to provide a written response within 30 days.

9b) If you are not satisfied with our response, you can escalate your complaint to the independent national regulators: