Privacy Policy

How STAGES Community Services approaches the collection, use and protection of personal information.

Privacy Policy approved 14 October 2026.

Who we are

STAGES Community Services provides support services for children, young people, families and people living with disability in Sydney. You can contact us about privacy at info@stages.net.au or 0448 796 004.

Information we collect

When you contact us or request a quote, we may receive your name, contact details, organisation, service type, general service location, preferred dates and hours, and a short description of the support requested. The name and age of the person requiring support are optional in our initial quote form. If services progress, additional information may be required for safe planning and delivery, including relevant health, disability, safety, care and emergency-contact information. We aim to request only information needed for a particular purpose.

How information reaches us

Information may be provided directly by you through our website, phone or email, or by a person or organisation making an authorised referral. Please do not include medical records or detailed sensitive information in an initial website enquiry. We will discuss appropriate ways to provide additional information if needed.

Why we use information

We use enquiry information to respond to requests, assess whether proposed services may be suitable and available, prepare quotes, communicate with authorised contacts and, where services proceed, plan, deliver, document and administer support. Information may also be used to meet applicable safeguarding, incident-management, contractual and legal obligations.

Children, young people and sensitive information

We recognise that information about children, young people and people receiving support can be particularly sensitive. We seek to limit access and sharing to what is needed for an authorised and lawful purpose. Where consent or authority is required, we will seek to establish it before collecting or sharing additional information. A quote enquiry does not itself authorise the disclosure of another person’s detailed records.

When information may be shared

Depending on the service and applicable authorisations, information may need to be shared with relevant STAGES personnel, authorised referrers, carers or guardians, service partners or professional advisers, and regulators or authorities where required or permitted by law. We do not treat a website enquiry as permission for unrestricted sharing.

Website forms, technology and cookies

Our website uses a WordPress contact and quote-request form and may use cookies or similar technologies to operate the site, manage preferences and help protect forms from spam. Service providers involved in website hosting, email delivery, security or analytics may process information on our behalf. STAGES intends to use Dropbox for client and referral documentation. Website, email and form providers may process limited information under their separate service arrangements. STAGES reviews these arrangements and its privacy disclosures as needed.

Storage, security and retention

We aim to protect information through appropriate access controls and administrative and technical safeguards. No online transmission or storage system can be guaranteed completely secure. We retain information for as long as necessary for the relevant purpose and applicable legal or contractual requirements, and then take appropriate steps to delete, de-identify or securely dispose of it. STAGES intends to use a Dropbox Business account as its cloud document storage system for client and referral documentation. At launch, the Business Manager will be the sole person authorised to access and manage client and referral files in Dropbox Business. The Dropbox Business account has two-factor authentication enabled, and at launch the Business Manager is the sole person authorised to access client and referral files. Records are retained according to applicable NSW and Commonwealth laws, regulatory obligations, safeguarding requirements and service contracts. Retention periods vary by record type, and records relating to children, incidents and safeguarding may require extended retention. When no obligation requires further retention, information is securely deleted, de-identified or disposed of under STAGES’ records management procedures. Backup procedures and any future staff access arrangements will be documented in internal procedures.

Access and correction

You can ask to access personal information we hold about you, or request a correction, by emailing info@stages.net.au. We may need to verify your identity or authority before responding. Some requests may be subject to legal restrictions.

Questions and complaints

If you have a concern about how STAGES has handled personal information, please contact info@stages.net.au and explain the issue. We will review your concern and respond. If you are dissatisfied, you may be able to contact the Office of the Australian Information Commissioner.

Overseas Disclosure and Technology Providers

STAGES does not authorise third-party access to client and referral records as part of its service delivery. At launch, access to those records is restricted to the Business Manager. STAGES has confirmed Australian-only storage and processing arrangements for its Dropbox Business account. Other technology providers supporting the website, forms and email may have separate processing arrangements, which must be checked before making any broader assurance about overseas processing or disclosure. STAGES will review any future use of automated systems that make significant decisions about individuals.

Updates

This policy will be reviewed as STAGES’ services and information-handling practices develop. A revised policy will show its last updated date.