Privacy policy
How we handle personal information.
Who this policy covers
Rubricare is operated by Caritas Collective Pty Ltd (ABN 62 695 513 430), Perth, Western Australia. References to "we", "us", and "Rubricare" mean Caritas Collective Pty Ltd.
What we collect
We collect personal information in two ways.
- Contact form. Name, email address, organisation (if provided), and the content of your message.
- Behaviour Support Plan content, for review platform users. Plan text is processed to generate a review. It may contain information about an NDIS participant, provided by the practitioner or organisation using the platform under their own lawful basis for collecting and holding that information.
We do not currently run analytics or tracking scripts on this site, and we do not use cookies beyond what is strictly required for the site to function.
How we use it
- Contact form submissions are used to respond to your enquiry, and for no other purpose.
- Behaviour Support Plan content submitted for review is used only to generate that review. It is not used to train, fine-tune, or otherwise improve any underlying model, ours or a third party's.
Where it is stored and processed
Production data is stored in Australia (Sydney region). Some processing steps, including the language model calls that generate a plan review, are performed by a service provider located outside Australia.
| What happens overseas | Plan content is sent to a third-party AI processing service for the review to be generated. That service does not retain plan content for its own purposes and does not use it for model training, under the terms Rubricare has agreed with that provider. |
|---|---|
| Where | United States. |
| Why this is disclosed here | Australian Privacy Principle 8 requires that if personal information may be disclosed to an overseas recipient, this policy say so and name the country, before you provide that information to us. |
If you do not want Behaviour Support Plan content containing identifiable participant information processed this way, do not submit that content through the platform. Contact us to discuss alternatives.
Disclosure to third parties
We do not sell personal information. We disclose it only to:
- The service providers described above, to the extent needed to operate the platform (cloud hosting, and the AI processing service used to generate reviews).
- A regulator, court, or law enforcement body, where we are required to by law.
Retention
Contact form submissions are retained for as long as needed to respond to and resolve the enquiry, and are deleted or archived after that. Behaviour Support Plan content submitted for review is retained for the period set out in the platform's data handling terms, provided separately to review platform users.
Security
We apply access controls, encryption in transit and at rest, and restrict who can access stored data to what is necessary for the platform to operate. No system is completely secure, and we cannot guarantee against every possible breach.
Access and correction
You can ask what personal information we hold about you, and ask us to correct it, by contacting us using the details below. We will respond within a reasonable time.
Making a complaint
If you have a concern about how we have handled your personal information, contact us first using the details below. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Contact
Caritas Collective Pty Ltd
ABN 62 695 513 430
Perth, Western Australia
info@rubricare.com.au
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed. Material changes will be reflected here before they take effect.