Privacy Policy

Nexus Rehab Pty Ltd (ABN 79 675 738 673) is an Australian company based in New South Wales. We are a SIRA-approved workplace (occupational) rehabilitation and injury-management provider, servicing all of NSW.

We coordinate rehabilitation and return-to-work for people injured at work or on the road, across the main NSW injury schemes — workers compensation, CTP and motor accident claims, and icare schemes including Lifetime Care & Support. Our role is to manage the claim and keep every party working to one plan.

This policy covers the personal information we handle when we deliver those services, and the information collected through this website. Because we work within the NSW workers compensation system, how we handle claim information also operates within the SIRA framework and the applicable Workers Compensation legislation. This policy is governed by the laws of New South Wales.

What we hold depends on the service and the scheme. Because we manage injury claims, much of it is sensitive — particularly health information about injured people. We collect what we reasonably need to do the job, and no more. This can include:

We collect personal information in a few ways.

Directly from you — through our online referral or contact form, by phone or email, in person, and during assessments and case management as your rehabilitation progresses.

From third parties — referrers, insurers and scheme agents, employers, and treating doctors often give us information about an injured person as part of a referral or an active claim. We collect from others where it isn't practical to ask you directly, or where the law authorises or requires it.

Where we collect information about you from someone else, we take reasonable steps to make sure you are told that we hold it and that this policy applies.

Where it's lawful and practical — for example, a general question sent through our website — you can deal with us without identifying yourself. In most of our work, though, we can't assess or manage a claim without knowing who you are.

We collect and use personal information to deliver and manage rehabilitation, and to meet our obligations to the schemes and the law. Specifically, we use it to:

Health information is sensitive information, and we handle it with extra care. We collect it only where it's reasonably necessary for your rehabilitation, and either with your consent or where the collection is authorised or required by law — for example, under the workers compensation and other injury schemes we work within.

When someone is referred to us and takes up our services, we rely on that engagement, together with any consent given as part of the referral, to collect and handle the health information we need to assess, plan and manage their rehabilitation. We use and disclose that information to deliver and manage the claim and to meet our scheme and legal obligations, or for a directly related purpose you would reasonably expect.

You can ask us at any time about the health information we hold, how it's being used, and who it has been shared with.

Managing a claim means keeping the right people informed. We disclose personal information only where it's needed to deliver the service, or where the law allows or requires it. Depending on the claim, this can include:

Our referral and contact forms are handled by a third-party form service, which forwards each submission to us by email (there is more detail in section 11).

We do not sell or rent personal information, and we don't use it for advertising or to send you marketing you haven't asked for.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

In practice, that means limiting access to the people who need it to do their work, holding records in secured systems, and using reputable providers for our IT and hosting. Our website is hosted on Amazon Web Services (AWS), and website form submissions reach us by email.

We keep personal information only for as long as we need it for the purpose it was collected, or for as long as the law requires. When we no longer need it, we take reasonable steps to destroy it or de-identify it.

If a data breach involving your personal information were to happen and it was likely to cause serious harm, we would respond in line with the Notifiable Data Breaches scheme under the Privacy Act — including notifying you and the Office of the Australian Information Commissioner where the scheme requires it.

Some of the providers we rely on — such as our hosting (AWS) and our online form provider — may store or process information on servers outside Australia, or may be accessed by their staff from overseas.

Where a provider handles information outside Australia, we take reasonable steps to ensure it's handled consistently with the Australian Privacy Principles. We aren't always able to confirm every country a provider may store data in; where that's the case, we tell you so honestly rather than overstate what we know.

If you'd like to know more about how a particular provider handles information overseas, contact us and we'll help where we can.

You have the right to ask for access to the personal information we hold about you, and to ask us to correct it if it's inaccurate, out of date, incomplete or misleading. These rights come from Australian Privacy Principles 12 and 13, and, for health records held in NSW, from the HRIP Act.

To make a request, email us at info@nexusrehab.com.au. We'll respond within a reasonable time. We may need to confirm your identity first, and in some limited situations the law allows us to decline access — if that happens, we'll explain why and how you can respond.

We don't usually charge to correct your information.

If you're concerned about how we've handled your personal information, tell us first. Email info@nexusrehab.com.au and set out what happened. We'll acknowledge your complaint and work with you to resolve it.

If you're not satisfied with our response, you can raise it with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

For a concern about health information held in NSW, you can also contact the NSW Information and Privacy Commission (IPC) at ipc.nsw.gov.au, which oversees the HRIP Act.

This is a marketing website. There are no user accounts, no logins, and no payments or online transactions on the site.

The site has two forms — a referral form and a contact form. Both are handled by a third-party form service (Web3Forms), which forwards your message to us by email. Our hosting provider may keep basic technical logs, such as IP addresses, to run and secure the site.

We don't currently run advertising or tracking cookies, or website analytics. If we add cookies or analytics in future — for example, to understand in aggregate how the site is used — we'll update this policy to say so and explain your choices. Where your browser lets you manage or block cookies, you're free to do that.

For any question about this policy or your personal information, contact us:

Nexus Rehab Pty Ltd (ABN 79 675 738 673). Email: info@nexusrehab.com.au. A phone number will be added here once it's live. We service all of NSW.

Email is the best way to reach us about a privacy matter, and we'll point you to the right person to help.

We may update this policy from time to time as our services, systems or legal obligations change. The current version is always the one published on this website.

When we make a change, we update the "last updated" date at the top. We encourage you to check back from time to time so you know how we handle your information.