Disability Support Pension Advocacy Australia (DSPAA)
Website: https://dspaa.com.au/
Email: admin@dspaa.com.au
ABN: 62 189 782 169
Last updated: 12 August 2026
1. About this Privacy Policy
Disability Support Pension Advocacy Australia (DSPAA) respects your privacy and is committed to handling personal information responsibly.
This Privacy Policy explains how DSPAA collects, uses, stores, protects and discloses personal information when you:
- visit or use our website;
- contact us;
- complete an online form or questionnaire;
- request or use our resources;
- download or use our documents, guides or other materials;
- request or receive one-on-one guided support; or
- otherwise provide personal information to DSPAA.
DSPAA aims to handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), to the extent that they apply to DSPAA.
This Privacy Policy should be read together with any privacy notice provided on our forms or at the time information is collected.
2. Who is responsible for your information?
For the purposes of this Privacy Policy, DSPAA, we, us and our refer to Disability Support Pension Advocacy Australia.
If you have questions about how your information is handled, want to request access to your information, or wish to make a privacy complaint, you can contact us:
Email: admin@dspaa.com.au
3. What personal information may we collect?
The information we collect depends on how you interact with DSPAA.
This may include:
Contact information
- name;
- email address;
- telephone number;
- address, where provided; and
- information contained in your enquiry or correspondence.
Information about your DSP matter
Where you choose to provide it, we may collect information about:
- your Disability Support Pension application or claim;
- a previous DSP decision or rejection;
- a review or appeal;
- your employment or work capacity;
- your functional limitations;
- information relevant to DSP medical eligibility;
- information about your circumstances; and
- information relevant to providing requested support.
Health and sensitive information
Depending on the service or information you provide, we may collect sensitive information, including health information.
This may include information about:
- disabilities;
- medical conditions;
- diagnoses;
- treatment;
- functional limitations;
- medical assessments;
- medical reports; and
- other supporting evidence you choose to provide.
You should only provide information that is relevant to your enquiry or the service you are requesting.
4. Sensitive and health information
Some of the information people choose to provide to DSPAA may constitute sensitive information, including health information.
Sensitive information receives additional protection under Australian privacy law.
Where DSPAA collects sensitive information, we will handle it in accordance with applicable privacy requirements and, where required, obtain your consent.
Our One-on-One Guided Support questionnaire contains a separate privacy notice explaining that sensitive or health information may be collected and how that information is handled.
You should only provide information that is reasonably necessary for your enquiry or requested support.
5. How do we collect personal information?
We may collect personal information directly from you when you:
- complete our Contact Us form;
- complete our One-on-One Guided Support questionnaire;
- send us an email;
- communicate with us about our services;
- request information or resources;
- provide documents or other supporting information; or
- otherwise voluntarily provide information to us.
Our online forms are provided using WPForms.
Where appropriate and practicable, we collect personal information directly from the individual it relates to.
In some circumstances, information may be provided by another person acting with your authority, such as a family member, support person or authorised representative.
6. Information collected through our online forms
DSPAA uses WPForms to operate its online Contact Us and One-on-One Guided Support forms.
Information submitted through these forms is sent to DSPAA’s designated email address:
Emails received at this address are automatically forwarded to:
The information may therefore be accessed through these DSPAA email accounts by authorised persons who require access to perform their role.
DSPAA also has WPForms Lite Connect enabled. This service provides a backup of form submissions associated with WPForms Lite.
Information submitted through our forms may therefore be retained by WPForms through its Lite Connect service in accordance with WPForms’ own terms and privacy practices.
7. Contact Us form
Our Contact Us form is intended for general enquiries, questions, feedback and requests for information.
Please avoid including detailed medical or other sensitive information in the Contact Us form unless it is necessary for your enquiry.
The Contact Us form contains a separate privacy notice explaining how information submitted through the form is handled.
8. One-on-One Guided Support questionnaire
Our One-on-One Guided Support questionnaire may request information that is personal or sensitive in nature.
The information provided may be used to:
- review your request for one-on-one support;
- understand the circumstances relevant to your request;
- determine whether DSPAA can provide the requested support;
- provide agreed one-on-one assistance; and
- administer and manage the service.
The questionnaire contains a separate privacy notice and consent statement.
Please only provide information that is relevant to your request and that you are comfortable providing.
Completion of the questionnaire does not automatically guarantee acceptance for one-on-one support.
9. Why do we collect personal information?
DSPAA may collect and use personal information to:
- respond to enquiries;
- provide information and resources;
- provide requested one-on-one guided support;
- understand information relevant to a person’s request for support;
- assist people to understand DSP medical eligibility requirements;
- assist with questions relating to DSP applications, reviews or appeals within the scope of our services;
- communicate with you about an enquiry or service;
- administer our services;
- maintain appropriate records;
- manage invoices and payments;
- respond to privacy requests or complaints;
- improve our website, resources and services;
- maintain website security; and
- meet legal or regulatory obligations where applicable.
We will not use personal information for an unrelated purpose unless permitted or required by law.
10. How we use and disclose personal information
We may use or disclose personal information to:
- authorised DSPAA personnel who need the information to perform their role;
- technology and service providers that assist us in operating our website, forms, email or related services;
- professional advisers where reasonably necessary;
- NDIS Plan Managers where necessary to administer or reconcile an invoice or payment;
- government agencies or other organisations where you have authorised us to communicate with them, where applicable;
- law enforcement or regulatory authorities where required or permitted by law; or
- another person or organisation where disclosure is otherwise authorised or required by law.
We do not sell your personal information.
We aim to limit disclosure of personal information to what is reasonably necessary for the relevant purpose.
11. Payment and billing information
DSPAA accepts payment by bank transfer and may issue invoices for services.
Where necessary to administer payments and invoices, we may collect or receive information such as:
- name;
- invoice details;
- service or billing information;
- payment amount;
- payment date;
- bank remittance information;
- NDIS Plan Manager details; and
- information contained in payment or remittance records.
Where an NDIS Plan Manager pays an invoice, the Plan Manager may provide DSPAA with information necessary to identify and reconcile the payment.
DSPAA does not process credit or debit card payments through the website.
Banking and financial records may be retained where reasonably necessary for accounting, business, legal or regulatory purposes.
12. Third-party service providers
DSPAA uses third-party technology and service providers to operate parts of its website and services.
These currently include:
- WPForms, which provides our online forms; and
- WPForms Lite Connect, which provides backup functionality for submissions made through WPForms Lite.
Our email services are used to receive and manage enquiries and form submissions.
Third-party providers may process or store information outside Australia.
Third-party providers operate under their own terms and privacy policies.
Where required by applicable privacy law, DSPAA will take reasonable steps in relation to the handling of personal information by overseas recipients.
13. Overseas disclosure and storage
Some technology and service providers used by DSPAA may store or process information outside Australia.
This may include providers associated with online forms, email or other website technologies.
Because the location of servers and processing facilities may change, DSPAA cannot guarantee that personal information will always be stored or processed only within Australia.
Where applicable, DSPAA will take reasonable steps to comply with Australian privacy requirements relating to overseas disclosure of personal information.
You can contact us if you would like further information about the providers used by DSPAA and the handling of personal information by those providers.
14. Website information, cookies and technical data
When you visit our website, information may be collected automatically through the website, hosting environment or standard web technologies.
This may include:
- IP address;
- browser type;
- device type;
- operating system;
- pages visited;
- date and time of access;
- referring website; and
- other technical information necessary for website operation, security or administration.
Our website may use cookies or similar technologies where required for website functionality or other legitimate purposes.
You can manage or disable cookies through your web browser settings. Some website functions may not operate correctly if certain cookies are disabled.
DSPAA does not use personal information collected through the website to sell or rent personal information to third parties.
15. Documents, downloads and resources
DSPAA provides information, guides, templates, forms, documents and links to other resources.
Simply viewing or downloading a DSPAA resource does not necessarily require you to provide personal information.
However, if you complete a document and then provide it to DSPAA, information contained in that document may become personal or sensitive information held by DSPAA.
Where a DSPAA resource links to an external website, form or service, information submitted through that external service may be handled according to that organisation’s privacy policy.
16. Third-party websites and links
Our website contains links to websites and services operated by other organisations, including government agencies, advocacy organisations and other information providers.
These websites operate under their own privacy policies and terms.
DSPAA is not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policy of any external website before providing personal information.
17. How we protect personal information
DSPAA takes reasonable steps to protect personal information from:
- misuse;
- interference;
- loss;
- unauthorised access;
- unauthorised modification; and
- unauthorised disclosure.
Security measures may include:
- password protection;
- access controls;
- limiting access to authorised persons;
- secure website connections;
- security measures associated with our technology providers; and
- securely deleting or de-identifying information when it is no longer required, where appropriate.
Because no electronic system or method of transmission can be guaranteed to be completely secure, we cannot guarantee absolute security of information transmitted electronically.
We encourage you to take reasonable precautions when sending personal or sensitive information electronically.
18. How long do we keep personal information?
DSPAA retains personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide services, maintain appropriate records, resolve disputes, meet legal or regulatory obligations, or otherwise protect our legitimate interests.
Retention periods may vary depending on the type of information and the reason it was collected.
When personal information is no longer required, DSPAA will take reasonable steps to securely destroy or de-identify it, subject to any legal or other requirement to retain the information.
Information held by third-party providers, including WPForms Lite Connect, may be subject to the provider’s own retention periods and policies.
19. Accessing your personal information
You may request access to personal information that DSPAA holds about you.
To request access, contact:
Please provide enough information to allow us to identify you and locate the information requested.
We may need to verify your identity before providing access.
In some circumstances, access may be refused or limited where permitted or required by law.
If we refuse access, we will provide an explanation where required.
20. Correcting your personal information
If you believe that personal information DSPAA holds about you is inaccurate, incomplete, out-of-date or misleading, you may ask us to correct it.
Requests can be made by contacting:
We may need to verify your identity before making changes.
21. Anonymous or pseudonymous enquiries
Where lawful and reasonably practicable, you may choose not to identify yourself or may use a pseudonym when making a general enquiry.
However, anonymity or pseudonymity may not be practical where we need to identify you to:
- provide personalised support;
- respond to a specific matter;
- issue or administer an invoice;
- process a payment; or
- meet a legal or other obligation.
22. Direct marketing
DSPAA may contact you in relation to an enquiry, service or information that you have requested.
If DSPAA introduces newsletters, mailing lists or other promotional communications, these communications will be managed in accordance with applicable privacy and spam laws.
You may opt out of promotional communications at any time where an opt-out facility is provided.
23. Privacy complaints
If you believe DSPAA has mishandled your personal information, please contact us first so that we can investigate and attempt to resolve your concern.
Privacy complaints can be sent to:
Please provide, where possible:
- your name;
- your contact details;
- a description of your concern;
- relevant dates or information; and
- the outcome you are seeking.
We will consider and investigate privacy complaints and respond within a reasonable period.
24. External privacy complaints
If you are not satisfied with our response, or if you believe your privacy concern has not been adequately resolved, you may contact the Office of the Australian Information Commissioner (OAIC).
The OAIC is Australia’s independent privacy regulator.
Information about making a privacy complaint is available from:
https://www.oaic.gov.au/privacy/privacy-complaints
25. Data breaches
DSPAA takes reasonable steps to protect personal information against unauthorised access, use or disclosure.
If a data breach occurs that is subject to Australia’s Notifiable Data Breaches scheme, DSPAA will take the steps required by applicable law, including notifying affected individuals and/or the OAIC where required.
If you believe your personal information may have been compromised, please contact us as soon as possible at:
26. Children and young people
DSPAA’s services and resources are primarily directed towards people seeking information or support concerning Disability Support Pension eligibility.
We do not intentionally seek unnecessary personal or sensitive information from children or young people.
Where a child or young person provides personal information, DSPAA will handle that information in accordance with applicable privacy requirements.
Where appropriate, we encourage parents, guardians or support persons to assist children and young people when completing forms or providing information.
27. Services Australia and Centrelink
DSPAA is an independent organisation.
DSPAA is not Services Australia or Centrelink and is not part of the Australian Government.
Information provided to DSPAA is separate from information held by Services Australia.
If you provide personal information directly to Services Australia or Centrelink, that information is subject to Services Australia’s own privacy arrangements.
28. Changes to this Privacy Policy
DSPAA may update this Privacy Policy from time to time to reflect changes to:
- our services;
- our website;
- our forms and questionnaires;
- our technology or service providers;
- privacy laws or regulatory requirements; or
- the way we collect, use or store personal information.
The current version will be published on this page with an updated Last updated date.
We recommend checking this page periodically for changes.
29. Contact us about privacy
If you have questions about this Privacy Policy, want to request access to or correction of your personal information, or wish to make a privacy complaint, please contact:
Disability Support Pension Advocacy Australia (DSPAA)
Email: admin@dspaa.com.au
ABN: 62 189 782 169
Website: https://dspaa.com.au/
DSPAA is committed to handling personal information responsibly and to making our privacy practices as clear, accessible and understandable as possible.