法律信息 · 隐私
隐私政策
本政策说明 Zenefit Assistive Technology Pty Ltd 如何依据 1988 年《隐私法》（联邦）及该法附表一中的《澳大利亚隐私原则》（APP）管理个人信息。
About this policy
Zenefit Assistive Technology Pty Ltd, trading as ZENEFIT ("we", "us", "our"), supplies assistive technology and mobility equipment to private customers, clinics and participants of the National Disability Insurance Scheme (NDIS).
Because we provide disability- and health-related services and hold health information, we are an "APP entity" bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles — regardless of our annual turnover (the small-business exemption in s 6D of the Act does not apply to health service providers). This policy is prepared to satisfy APP 1.3 and APP 1.4 and reflects the Act as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth).
Zenefit Assistive Technology Pty Ltdtrading as ZENEFIT
36 Mozart Pl, Mackenzie QLD 4156, Australia
Email: info@zenefit.example
Phone:
What personal information we collect
Under APP 1.4(a), these are the kinds of personal information we collect and hold:
| Category | Examples | Sensitivity |
|---|---|---|
| Identity & contact details | Name, email address, telephone number, delivery address. | Personal information |
| Order & enquiry details | Products requested, quantities, funding pathway, message content, quote and invoice records. | Personal information |
| NDIS details | NDIS participant number, plan manager name and contact details. | Health information (s 6FA) — sensitive information, collected only with your consent (APP 3.3) |
| Chat content | Messages you send in the chat widget, including anything you choose to type. | Depends on what you enter — see section 5 |
| Referral code | The partner code from a referral link (?ref=…), stored with your visit and any enquiry. | Identifies the partner, not you |
| Salted IP fingerprint | An irreversible hash derived from your IP address, used for visit counting. | Not reasonably linkable to you |
How we collect and hold it
Under APP 1.4(b):
- Directly from you — when you complete a quote, order or contact form, use the chat, or speak or correspond with us.
- Automatically — page-view and presence analytics are collected only after you consent via the cookie banner (see our Cookie Policy).
- From third parties — your NDIS plan manager may provide us your billing details at your direction.
Information is held on servers located in Australia, protected by HTTPS in transit, HttpOnly session cookies, salted irreversible IP fingerprints and access-controlled administration. We take the reasonable steps required by APP 11 to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.
Why we collect, use and disclose it
Under APPs 1.4(c) and 6, personal information is used and disclosed only for the purposes for which it was collected (or directly related purposes you would reasonably expect):
| Purpose | Information used |
|---|---|
| Responding to enquiries and preparing quotes | Contact details, message content, product interest |
| Sizing, delivery and installation | Contact and delivery details, order details |
| NDIS claims and plan-managed billing | NDIS participant number, plan manager details — never used for any other purpose |
| Operating and improving the website | Consent-based analytics (salted fingerprint, page views) |
| Referral partner attribution | Referral code attached to a visit or enquiry |
We do not sell personal information, and we do not use it for direct marketing without your consent. We disclose it only to: delivery and installation partners as strictly needed to fulfil your order; your plan manager where you ask us to bill them; and the AI chat provider described in section 5.
AI chat and overseas disclosure
Our chat assistant is powered by Moonshot AI (Kimi), a third-party artificial-intelligence provider. When you send a chat message, its content is transmitted from our server to Moonshot AI's API so that an answer can be generated. The recipient's servers are located outside Australia — likely in China (APP 1.4(f)–(g)).
Under APP 8 and s 16C of the Privacy Act, we remain accountable for personal information disclosed to this overseas recipient and take reasonable steps to ensure it is handled consistently with the APPs. The API credential never leaves our server, and messages are transmitted over encrypted connections.
Important
Please do not enter sensitive health details — diagnoses, NDIS participant numbers, clinical information — into the chat. If your question involves health information, use the "Person" button in the chat widget to reach our team directly instead.
Cookies and browser storage
We use one strictly-necessary session cookie and one optional, first-party analytics category, plus two small browser-storage entries. Full details — including how to change or withdraw your choice at any time — are in the Cookie Policy, or open the cookie settings.
How long we keep it
| Record | Retention |
|---|---|
| Session cookie | Deleted when you close your browser. |
| Analytics & referral attribution | 30 days, then aggregated or destroyed. |
| Quote and order enquiries | Up to 2 years after your last contact, unless you ask us to delete them sooner. |
| Tax invoices & financial records | The statutory period — generally 5 years. |
| Chat transcripts | 1 year, for quality and support context. |
When information is no longer needed, we destroy it or de-identify it, as APP 11.2 requires.
Access and correction
You may request access to the personal information we hold about you (APP 12) and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13).
Requests are free of charge. Email info@zenefit.example from the address concerned (or otherwise verify your identity) and we will respond within 30 days. If we refuse a request on a ground permitted by the Act, we will explain why in writing and tell you how to complain.
Complaints
If you believe we have breached the APPs, APP 1.4(e) entitles you to know how to complain and how we will handle it:
- Step 1 — write to us. Section 40(1A) of the Act asks that complaints first be made to the entity. Email info@zenefit.example with "Privacy complaint" in the subject. We will acknowledge your complaint and respond within 30 days.
- Step 2 — the OAIC. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner: oaic.gov.au · 1300 363 992 · GPO Box 5288, Sydney NSW 2001.
Data breaches
We comply with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act. If we become aware of a suspected eligible data breach — one likely to result in serious harm — we will assess it within 30 days and, where the scheme requires, notify the OAIC and the affected individuals as soon as practicable, together with recommended steps to reduce harm.
Anonymity, changes and contact
Wherever practicable you may deal with us anonymously or under a pseudonym (APP 2) — for example when browsing the site or asking general chat questions. We will need your real details only when you ask us to prepare a quote or deliver an order.
We may update this policy from time to time; the current version is always on this page, and the effective date appears at the top. For any privacy question, request or complaint, contact our privacy officer at info@zenefit.example or .
↑ Back to the table of contents
Last updated: October 2026 · Zenefit Assistive Technology Pty Ltd