Privacy Policy

This Privacy Policy explains how SkillCare (operated by Hashim Rafique, ABN 23 647 651 364, based in Sydney NSW) collects, uses and protects personal information. SkillCare handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

“Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

We collect only what we need to respond to enquiries and deliver the program. Specifically:

When you submit the quote form

• First and last name
• Work email address
• Phone number
• Organisation (company) name and your role
• State, number of support workers, and any notes you provide

Collected automatically

• Your IP address and user-agent string at the time of submission, used to prevent abuse (rate limiting) and diagnose delivery issues
• Standard server logs from our hosting provider (timestamps, request paths, response codes)

We do not run third-party analytics, advertising trackers, or session-replay tools. We do not use cookies for tracking. The site uses only essential request handling required to serve pages.

We use the personal information you provide to:

• Respond to your quote request and follow up with a proposal
• Provide and operate the SkillCare program once you sign on
• Communicate with you about your engagement, including invoices and service updates
• Comply with our legal and tax obligations
• Improve the program based on direct feedback you provide

We do not sell, rent or trade your personal information. We do not use it for marketing to other parties.

We use a small number of trusted service providers (sub-processors) to operate the website and the program. They access personal information only to the extent necessary to provide their service to us, under written contract:

• Vercel Inc.(United States) — website hosting and serverless function execution
• Resend(United States) — transactional email delivery for quote-request notifications
• Google LLC(United States) — delivery of the Inter web font from Google Fonts (no cookies set; IP visible to Google during font load)

We may also disclose personal information where required by law (for example, to comply with a court order or NDIS Commission request), or to protect the rights, property or safety of SkillCare, our clients or others.

The sub-processors above are located in the United States. By submitting the form or engaging us, you acknowledge that your personal information may be stored or processed outside Australia. We take reasonable steps to ensure these providers handle personal information in a way consistent with the APPs.

Personal information is held in our email system and in business records relating to the engagement. We take reasonable steps to protect it from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include: TLS encryption in transit, access controls on email and business systems, and limiting who has access to the data on a need-to-know basis.

No internet-connected system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

We keep personal information only for as long as it is needed for the purpose it was collected, plus any period required by law (for example, the seven-year retention required for tax records).

• Quote requests that do not lead to an engagement are deleted within 24 months
• Records of an active or past engagement are retained for the duration of the engagement plus seven years, in line with Australian tax record-keeping obligations
• Server logs and rate-limit data are retained for no longer than 90 days

Under the Privacy Act and the APPs, you may:

• Request access to the personal information we hold about you
• Ask us to correct information that is inaccurate, out of date, incomplete or misleading
• Ask us to delete your information, subject to any legal retention requirements
• Withdraw consent to future communications at any time

To exercise any of these rights, email hashim.rafique.au@gmail.com. We will respond within a reasonable time, generally within 30 days.

If you believe we have breached the APPs or mishandled your personal information, please contact us first at hashim.rafique.au@gmail.com. We take complaints seriously and will respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

SkillCare is a service for NDIS providers and is not directed at children. We do not knowingly collect personal information from anyone under 18.

We may update this Privacy Policy from time to time. The current version, marked with a “Last updated” date, is always available at this URL. Material changes will be notified to active Clients by email at least 30 days before they take effect.

Privacy enquiries: email hashim.rafique.au@gmail.com. Operated by Hashim Rafique, Sydney NSW, ABN 23 647 651 364.