Privacy
Privacy notice.
What we collect, why we collect it, and how it is protected and used.
Last updated: 21 July 2026
Data controller: Embark Potential Pty Ltd, ABN 27 682 258 939. Contact: Admin@embarkpotential.com.au or (02) 9099 1744.
Scope of this notice
This notice covers public website forms, screening and referral, assessment pathways and other Embark professional services. A more specific collection notice and consent form may also be provided when a service begins.
Information we collect
Depending on the contact, we may collect contact details, role and organisation, referral source, communication preference, a problem summary, health records and documents, relevant family, education or service information, and details needed for payment and service delivery. We seek only information reasonably needed to assess fit or provide the service.
Do not send health records through the public form or ordinary email. After we review the initial request, we provide instructions for securely submitting forms and documents.
How information is used
- Responding to an enquiry and considering whether Embark is a suitable fit
- Screening, assessment, reporting, follow-up and other agreed services
- Scheduling, communication, payment and professional record keeping
- Quality, safety, complaint management and legal or professional obligations
Sharing information
Information is shared only as needed with authorised Embark team members and technology providers required to operate the service. Clinical information is sent to a referrer, school, the NDIS, another professional or service only with consent, or where use or disclosure is permitted or required by law.
Clinical records and documents are stored in secure, access-controlled electronic storage. Non-clinical website forms may be delivered to Embark’s administration email through an email delivery provider. Email notifications will not contain sensitive health content.
Storage and security
We use controls proportionate to the information, including access limitation, account and device protection, secure transmission and backup. Retention follows applicable legal, professional, insurance and service requirements. No digital system is risk-free; applicable notification duties are followed if an eligible breach occurs.
Free checks and third-party information
The free Support Coordinator check accepts de-identified summaries only. Do not enter a participant name, date of birth, NDIS number, address or case file. If you provide information about another person, you must have the appropriate authority and consent.
Cookies and analytics
The initial site does not use third-party analytics or advertising cookies. This notice and an appropriate consent mechanism will be updated before such tools are added.
Access, correction and privacy complaints
Contact us to request access or correction, withdraw consent where applicable, or raise a privacy concern. Identity verification may be required to protect the information.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).