Skip to content
Endura Therapy home
0415 070 893 Make a referral

Privacy policy

Your information, handled with care.

This policy explains how Endura Therapy collects, uses, stores and shares personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Last updated: October 2026 · Endura Therapy · ABN 51 356 610 276

What we collect

We collect the information we need to provide safe, effective physiotherapy and to manage your NDIS supports. This may include:

  • Your name, date of birth, address, phone and email
  • Your NDIS number, plan dates and funding details
  • Contact details for your emergency contact, nominee, support coordinator and plan manager
  • Health information, including medical history, diagnoses, reports from other health professionals, assessment results, treatment notes and goals
  • Details of your current supports, equipment and support workers

Health information is sensitive information, and we only collect it with your consent and when it is needed to provide our services.

How we collect it

Wherever possible, we collect information directly from you or your nominee. We also receive information from your support coordinator or other health professionals when you are referred to us, through our intake form, and through the referral form on this website. The website referral form collects the referrer's name, contact details, the participant's suburb, plan management type and a short description of goals. Please do not include NDIS numbers or medical details in the website form.

How we use it

  • To assess, plan and deliver your physiotherapy
  • To write progress updates, reports, care plans and service agreements
  • To communicate with you and the people involved in your care
  • To invoice your plan manager or you, and to keep accurate business records
  • To meet our legal, professional and NDIS obligations

Who we share it with

With your consent, we share relevant information with:

  • Your support coordinator
  • Your plan manager (for invoicing)
  • The National Disability Insurance Agency (NDIA), for example in reports for plan reviews
  • Other health professionals involved in your care, such as your GP, OT or prosthetist

We do not sell your information or use it for marketing. We will only disclose it otherwise where required or authorised by law, or in an emergency where there is a serious threat to someone's life, health or safety.

Storage & security

We store information electronically using secure, password-protected systems with two-factor authentication where available:

  • Splose: clinical records, appointments and invoicing. Splose stores Australian users' data in Australia, encrypted in transit and at rest.
  • Cloudflare: website hosting
  • Formspree: processing referral form submissions, which are forwarded to our email
  • Xero: invoicing and financial records
  • Gmail: email communication, including referral form submissions
  • Microsoft OneDrive: secure document storage

We choose providers with strong security and privacy protections and take reasonable steps to make sure your information is handled consistently with the Australian Privacy Principles. We do not disclose your personal information to anyone overseas.

Use of AI tools

We use artificial intelligence (AI) tools to help with clinical note-taking and with business administration, such as drafting documents and managing correspondence. This lets us spend more time on your care and less on paperwork.

  • Your physiotherapist reviews and is responsible for every clinical note, report and decision. AI tools do not make decisions about your care.
  • If an AI tool will listen to or record a session, we will ask for your consent first. You can say no at any time, and it will not affect your care.
  • We only enter the information needed for the task and use AI tools with appropriate privacy and security protections.

How long we keep records

We keep health records for at least 7 years after your last appointment, in line with Queensland requirements. Records for a child are kept until they turn 25, or for at least 7 years after their last appointment, whichever is longer. After this time, records are securely destroyed or de-identified.

Access & correction

You can ask to see the information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. Email enduratherapy@gmail.com and we will respond within 30 days. In limited circumstances the law allows us to refuse access, and if so we will explain why in writing.

Feedback & complaints

We welcome feedback about our services or how we handle your information. Please contact Nicholas Whimp:

Email: enduratherapy@gmail.com
Phone: 0415 070 893

We aim to acknowledge complaints within 2 business days and resolve them within 30 days. If you are not satisfied with our response, you can contact:

  • Office of the Australian Information Commissioner (privacy): oaic.gov.au · 1300 363 992
  • NDIS Quality and Safeguards Commission (NDIS supports): ndiscommission.gov.au · 1800 035 544
  • Office of the Health Ombudsman (Queensland health services): oho.qld.gov.au · 133 646