Privacy.

Last updated: 23 May 2026

What we collect

When you sign the petition we collect your first name, last name, email address, and Australian postcode. When you submit a tip-off we collect the subject, the narrative you provide, and optionally a contact handle. Our server also records the IP address and basic browser information of each submission for fraud prevention.

How we use it

• Petition signatures are counted toward the public total and are used to send a one-time thank-you email.
• Tip-offs are reviewed by the NDIS Investigations team. If you provide an email contact, we may send a one-time receipt confirming we received the submission.
• We may use your email address to send occasional campaign updates. You can unsubscribe at any time from the link in any email we send.

Who we share it with

We use Supabase to store submissions and Brevo to send email. These vendors process data on our behalf under their own privacy terms. We do not sell or trade your information.

How we protect it

Database access is restricted to the NDIS Investigations team via authenticated admin tooling. Tip-offs are treated as confidential. We do not publicly disclose the names of petition signers — only the aggregate count.

Your rights

You may ask us to delete or correct your information at any time by emailing investigationsndis@gmail.com. We will action verified requests within a reasonable time.

Contact

Questions about this policy? Email investigationsndis@gmail.com.