SNDY Tracks Pty Ltd
SNDY Tracks collects sensitive personal and health information about young people and their families. This page explains how we handle it. It summarises our full Privacy and Confidentiality Policy, available on request.
Only the information needed to provide safe, appropriate supports: contact and identity details, emergency contacts, NDIS plan details, reported diagnoses and presentations, medical conditions, medications and allergies relevant to participation, risk information, session records, and consent records. Information is collected through intake forms, service agreements, session notes, and communication with families and authorised stakeholders. Because SNDY Tracks provides health services, the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Health Records and Information Privacy Act 2002 (NSW) apply to everything we hold.
Client records are kept in our secure practice management system with individual worker logins. Paper forms are scanned into the client record and the originals stored securely or destroyed once digitised. Devices used for SNDY Tracks work are passcode protected, and client information is not stored on personal devices outside approved systems. Records are retained in line with NSW health record requirements: for adults, at least 7 years after the last service; for participants under 18, until the person turns 25.
Your information is used to plan and deliver supports, write session notes, communicate with authorised contacts, bill correctly, and meet legal obligations. It is only shared where:
We check the consent record before sharing information with schools, support coordinators, plan managers or other providers.
We explain confidentiality and its limits to participants in age appropriate language at the start of supports: what is discussed stays private, except where we are worried about the participant's safety, someone else's safety, or the law requires disclosure. We do not promise absolute secrecy. Information shared with parents and carers is balanced against the young person's developing autonomy and therapeutic trust; we generally share themes and progress rather than session detail, and discuss this approach with families at intake.
Photos or videos of participants are only taken with written consent recorded at intake, are stored in approved systems, and are never posted to social media or marketing without separate, specific, current consent from the participant and their guardian.
Any privacy breach is contained, assessed and, where required, notified to affected people under the Notifiable Data Breaches scheme. Participants and authorised representatives can ask to access or correct their information at any time; requests go to the Director and are answered within 30 days.
This website runs on Squarespace, which collects standard visitor information such as IP address, browser type, pages visited and cookies, including basic analytics. Anything you submit through a form on this site comes to us and is handled under this policy. Some of our service providers, including our website platform, may store data on servers outside Australia; we only use reputable providers with appropriate privacy protections.
Contact Sam Duke, Director, at info@sndytracks.com.au or +61 417 386 246. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Last updated July 2026. This page summarises SNDY Tracks policy POL-02, Privacy and Confidentiality.
