Learn how Kelpcare collects, stores, and protects your information.
Last Updated: January 2026
Kelpcare ('we', 'our', 'us') is a mobile and web application developed to support NDIS service providers, aged care organisations, and their employees in managing client service requests, job allocations, and timesheets. We are committed to protecting your privacy in accordance with the Privacy Act 1988, the Australian Privacy Principles, and NDIS data handling standards.
This policy applies across the Kelpcare website. It only covers information collected through the Kelpcare website and not information that we collect offline, through other websites, or through our subscription services. Kelpcare will use data from subscription services in accordance with the contractual agreement(s) between Kelpcare and that customer. This policy explains the practices Kelpcare uses regarding the collection, storage, use, and disclosure of data when your organisation uses our website, and the choices you have associated with that data. By using our website, you agree to the collection and use of data in accordance with this policy.
2.1 Personal Data — When using our website or app, you may provide us with personally identifiable data ('Personal Data'). Personal Data may include, but is not limited to: First name and last name; Work email address; Phone number; Company and role/title; Industry and organisation details; Payment information (processed securely via our payment provider).
2.2 Usage Data — We automatically collect information about how you interact with our platform, including: Pages visited and features used; Time spent on each section; Device type, browser, and operating system; IP address and approximate location.
We use your data to: Provide and improve the Kelpcare platform; Process payments and manage your subscription; Send important service notifications; Respond to support requests; Comply with legal obligations under the Privacy Act 1988 and NDIS requirements. We do not sell your personal data to third parties.
All data is stored in Australian data centres. We use industry-standard encryption (TLS in transit, AES-256 at rest). Access is restricted to authorised personnel only. We undergo regular security audits.
We retain your data for as long as your account is active and for up to 7 years after termination, as required by Australian record-keeping obligations. You may request deletion of your data at any time — requests will be processed within 30 days.
Under the Privacy Act 1988 and Australian Privacy Principles, you have the right to: Access the personal data we hold about you; Correct inaccurate data; Request deletion of your data; Opt out of marketing communications; Lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
We use carefully selected third-party services including: Stripe (payment processing); Intercom (customer support); Google Analytics (usage analytics, with anonymisation enabled). Each provider is bound by their own privacy policies and data processing agreements.
We may update this policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the platform after changes constitutes acceptance.
For privacy enquiries, contact our Privacy Officer at support@kelpcare.com or write to: Kelpcare Pty Ltd, Melbourne, VIC, Australia.