Call:  1300 770 986
Join or Switch to Us
Viber Arrow Icon

Aspect Plan Management Pty Ltd (ABN 16 622 628 666), trading as Aspect NDIS (“Aspect”, “we”, “us”, “our”)

Last updated: 02-09-2026

1. Introduction

Aspect Plan Management Pty Ltd is a registered NDIS Plan Manager (Provider Number 4050064402). We are committed to protecting the privacy of the personal information we collect from participants, nominees, family members, NDIS providers, and other individuals who interact with us.

This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and relevant NDIS Commission requirements.

By using our services, our website, or our client portal, you agree to the collection and handling of your information as described in this policy.

2. What Personal Information We Collect

Depending on your relationship with us, we may collect:

  • Identity information: name, date of birth, address, phone number, email address
  • NDIS-related information: NDIS participant number, plan dates, plan budgets, support categories, plan management type
  • Nominee and contact details: name, relationship to participant, contact information, authority to act
  • Financial information: bank account details, invoice and payment records, reimbursement claims, provider payment details
  • Health and disability information: information relating to your disability, support needs, or circumstances, where relevant to plan management and invoice processing
  • Communications: records of phone calls, emails, forms, and portal messages
  • Technical information: IP address, browser type, device information, and website usage data collected via our website and portal

Health and disability-related information is sensitive information under the Privacy Act and is handled with additional care, and only collected and used where necessary to provide plan management services.

3. How We Collect Personal Information

We collect personal information:

  • Directly from you, via our sign-up forms, phone calls, emails, or the client portal
  • From your nominee, guardian, or authorised representative, where applicable
  • From the National Disability Insurance Agency (NDIA), Local Area Coordinators (LACs), or NDIS partners, where relevant to managing your plan
  • From NDIS providers submitting invoices on your behalf
  • From our technology partner, Gobbill, which powers our client portal, payment processing, and fraud protection systems
  • Through our website, including via cookies and forms

Where practical, we collect personal information directly from the individual concerned.

4. Why We Collect and Use Personal Information

We collect and use personal information to:

  • Provide NDIS plan management services, including budget tracking, invoice processing, and reimbursements
  • Verify and process payments to NDIS providers and participants
  • Detect and prevent fraud, in conjunction with our Gobbill platform
  • Provide access to the online client portal
  • Communicate with you about your plan, payments, or account
  • Meet our reporting obligations to the NDIA and the NDIS Quality and Safeguards Commission
  • Respond to enquiries, complaints, and feedback
  • Comply with legal and regulatory obligations, including audit requirements
  • Improve our services and website

We do not use your personal information for direct marketing without your consent, and you may opt out of marketing communications at any time.

5. Disclosure of Personal Information

We may disclose personal information to:

  • The NDIA and relevant government bodies, as required for plan management
  • NDIS providers, to process and confirm invoice payments
  • Gobbill, our technology partner, for portal hosting, payment processing, and fraud prevention
  • Your nominee or authorised representative, where you have provided consent or where they are legally authorised to act on your behalf
  • Our auditors (GCC Auditors) for compliance and quality assurance purposes
  • Professional advisers, such as accountants or lawyers, where necessary
  • Law enforcement or regulatory bodies, where required by law

We do not sell personal information to third parties. Any overseas disclosure (for example, where a service provider stores data offshore) is made only where reasonable steps have been taken to ensure that information is handled consistently with the Australian Privacy Principles.

6. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. This includes:

  • Secure storage of records, both physical and electronic
  • Restricted access to personal and financial information on a need-to-know basis
  • Fraud protection and payment integrity measures via Gobbill
  • Regular review of our security practices

While we take security seriously, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Access and Correction

You have the right to request access to the personal information we hold about you, and to request correction if it is inaccurate, out of date, incomplete, or misleading.

To request access or correction, contact us using the details below. We will respond within a reasonable timeframe and may need to verify your identity before releasing information. In some circumstances permitted by law, we may decline a request for access, and if so, we will explain our reasons.

8. Complaints

If you have a concern about how we have handled your personal information, please contact us in the first instance using the details below. We will investigate and respond to your complaint within a reasonable time.

If you are not satisfied with our response, you may lodge a complaint with:

Office of the Australian Information Commissioner (OAIC) Website: www.oaic.gov.au Phone: 1300 363 992

You may also raise concerns relating to NDIS service delivery with the NDIS Quality and Safeguards Commission (1800 035 544).

9. Cookies and Website Data

Our website may use cookies and similar technologies to improve functionality and understand how visitors use our site. You can control or disable cookies through your browser settings; however, this may affect the functionality of the website.

10. Retention of Information

We retain personal information for as long as necessary to provide our services and to meet our legal, regulatory, and audit obligations, including NDIS Commission record-keeping requirements. When information is no longer required, we take reasonable steps to securely destroy or de-identify it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be posted on our website with a revised “last updated” date.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Aspect Plan Management Pty Ltd Level 4, 152 Elizabeth Street, Melbourne VIC 3000 Phone: 1300 770 986 Email: contact@aspectndis.com.au