Privacy Policy

Last updated: October 20, 2026

Care Cube is operated by M & M Resources Pty Ltd T/A Care Cube AU. In this policy, “Care Cube”, “we”, “us” and “our” refer to that entity.

We respect your privacy and are committed to protecting your personal and health information. This policy explains how we collect, use, hold and disclose information when you visit our website, contact us, make a referral or receive our services.

We handle information under applicable Australian privacy laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles and, where applicable, the Health Records Act 2001 (Vic). (OAIC)

1. Information we collect

We collect information reasonably necessary for our services and activities. Depending on your interaction with us, this may include:

Your name, date of birth, address and contact details.
Details of authorised representatives, carers and emergency contacts.
Relevant NDIS plan, funding and participant information.
Your support needs, goals, preferences and service arrangements.
Health, disability, medication, care plan and other sensitive information needed to provide appropriate support.
Records of services, invoices, payments, enquiries, feedback and complaints.
Technical information about website visits, as described below.

Please avoid sending detailed medical or other sensitive information through a general website enquiry form. Contact us to discuss an appropriate way to provide it.

2. How we collect information

We usually collect information directly from you through enquiries, forms, conversations, assessments and service delivery.

Where appropriate and lawful, we may collect relevant information from an authorised representative, referrer, support coordinator, plan manager, health professional or another service provider. We seek your consent where required.

You can make a general enquiry anonymously or use a different name where lawful and practical. We may need to identify you to arrange services, verify funding or provide safe support. If necessary information is not provided, we will explain how this affects the services we can offer.

3. Why we use information

We use information to:

Respond to enquiries and referrals.
Assess needs and arrange, deliver and review services.
Communicate with you and people authorised to act for you.
Coordinate relevant supports and manage service agreements.
Process invoices, payments and funding claims.
Address feedback, complaints, incidents and safety concerns.
Meet legal, regulatory, reporting and recordkeeping obligations.
Maintain and improve our services and website.

We use or disclose information for the purpose it was collected, or another purpose permitted by law. (OAIC)

4. Consent and your choices

We generally seek consent before collecting sensitive information, such as health or disability information, unless the law permits or requires collection without consent. (OAIC)

Where consent is required, we explain the purpose and give you an opportunity to ask questions. You can contact us to withdraw consent for future handling that relies on that consent. We will explain any effect on your services and any obligations that require us to retain or disclose information.

Being a family member or carer does not automatically give someone access to your information. We check consent or other lawful authority before sharing it.

We seek separate permission before publishing identifiable participant photographs, stories or testimonials.

5. Who we may share information with

Where necessary for the purposes above and permitted by law, we may share relevant information with:

Workers and contractors involved in your support.
Representatives or other people you have authorised.
Health professionals, support coordinators, plan managers and service providers involved in your care.
The NDIA, NDIS Commission, government bodies or other authorities where required or authorised.
Providers of necessary technology, administration or professional services.

We limit sharing to information relevant to the purpose and require appropriate privacy and confidentiality protections from service providers.

We do not sell your personal information.

6. Website information and cookies

Our website may collect technical information such as your IP address, browser type, pages visited and the date and time of access.

Cookies are small files stored on your device. Depending on the website’s configuration, they may support essential functions, security, preferences or analytics.

You can manage cookies through your browser settings. Blocking some cookies may affect website functions. External websites linked from our website have their own privacy policies.

7. Overseas storage and disclosure

Where we disclose personal information overseas, we take the steps required by applicable privacy laws to protect it. This includes reasonable steps to ensure recipients handle information consistently with applicable Australian privacy requirements, unless a lawful exception applies. (OAIC)

8. Security and retention

We take reasonable technical and organisational steps to protect information against misuse, loss and unauthorised access, alteration or disclosure. Access is limited to people who need information for authorised purposes.

We retain records for as long as needed for their purpose and to meet applicable health record, NDIS and other legal obligations. When information is no longer needed and retention is not required, we take reasonable steps to securely destroy it or permanently remove identifying details. (OAIC)

We assess suspected privacy breaches and notify affected people and regulators where required by law.

9. Accessing and correcting information

You or an authorised representative can contact us to request access to, or correction of, your personal information.

We may reasonably verify identity and authority before responding. We handle requests within applicable legal timeframes and discuss accessible ways to provide information.

There is no charge for making an access request or for requesting or making a correction. Any lawful fee for providing access will be explained beforehand and comply with applicable limits.

If we cannot provide access or make a requested correction, we explain the decision and available complaint options in writing, except where the law permits otherwise. If a correction is refused, you may ask us to attach a statement recording your disagreement. (OAIC)

10. Marketing communications

If you opt in to newsletters or promotional updates, you can unsubscribe using the instructions provided or contact us directly.

We do not use sensitive information for direct marketing without consent. Opting out of marketing does not stop necessary communications about services you receive.

11. Privacy enquiries and complaints

Care Cube | Privacy enquiries
Email: services@carecube.com.au
Phone: +61 473 795 773

Please explain your concern, when it occurred and the outcome you are seeking. You can ask someone you trust to help you make a complaint.

We will acknowledge and assess your complaint, investigate as appropriate and explain the outcome. We aim to respond within 30 days. If more time is needed, we will explain why and keep you updated.

If you are dissatisfied with our response, or have not received one within 30 days, you can raise a privacy complaint with the Office of the Australian Information Commissioner. (OAIC)

For concerns about health information handled in Victoria, you can also contact the Health Complaints Commissioner.

Privacy concerns involving the quality or safety of NDIS supports can be raised with the NDIS Quality and Safeguards Commission. (www.ndiscommission.gov.au)

12. Updates and accessible copies

We may update this policy when our practices or legal requirements change. The current version will be available on our website with its update date.

Let’s Talk About Your Support

Exploring disability support for the first time or considering a change of provider? Tell us about your goals and we can discuss how Care Cube may be able to help.

Call: +61 473 795 773

Or Get in touch online →