1. What we collect
We collect the information you provide when creating your profile: name, email, location (suburb only), disability and support information (participants), and business details (providers). We also collect usage data such as searches, contact requests, and messages.
2. How we use your data
Your data is used to match participants with providers, display relevant search results, send notifications, and ensure platform safety. We do not sell your data to third parties. We do not share participant personal information with providers without explicit consent.
3. Participant protections
Participants' names are displayed to providers as first name + last initial (e.g., Kate W.) to protect privacy. Your suburb and state are used for matching but your precise address is never shared. Providers cannot see, search for, or directly contact participants. You control if and when you choose to share further personal details.
4. Provider data
Provider business details (ABN, registration numbers, service areas) are displayed publicly on their profile as part of their service listing. Documents submitted for verification are stored securely and accessed only by authorised SupportCrush staff.
5. Compliance document storage
Providers must submit compliance documents (such as ABN, NDIS Worker Screening Check, insurance certificates, first aid and CPR certificates, and identity documents) as a mandatory condition of listing on SupportCrush. These documents are uploaded via private file storage and are never publicly accessible. No public URL is generated for compliance documents.
Access to compliance documents is restricted to the provider who submitted them and authorised SupportCrush compliance staff for the purpose of review and expiry monitoring. Documents are not shared with participants, other providers, or any third party. Admin reviewers access documents through time-limited signed URLs that expire automatically.
Compliance documents are retained while the provider's account is active and for a reasonable period after account closure to meet audit and regulatory obligations. Providers may request deletion of their compliance documents at any time, subject to any legal retention requirements. Document expiry dates are monitored by an automated system that sends renewal reminders approximately 90, 60 and 30 days before expiry.
6. Message privacy & safety monitoring
We do not access private messages unless a conversation is reported for safety concerns. In those cases, authorised SupportCrush staff may review the conversation to investigate the report and protect community safety.
We do not conduct routine or automated monitoring of private messages. Access is restricted to safety-related investigations only, and is logged for accountability.
7. Data retention
Your account data is retained while your account is active. Upon account deletion, personal data is removed within 30 days. Billing records are retained for 7 years as required by Australian law.
8. Your rights
You have the right to access, correct, or delete your personal data at any time. Contact us at hello@supportcrush.com.au to exercise these rights.
9. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.