Privacy Policy

About this policy

Zenefit Assistive Technology Pty Ltd, trading as ZENEFIT ("we", "us", "our"), supplies assistive technology and mobility equipment to private customers, clinics and participants of the National Disability Insurance Scheme (NDIS).

Because we provide disability- and health-related services and hold health information, we are an "APP entity" bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles — regardless of our annual turnover (the small-business exemption in s 6D of the Act does not apply to health service providers). This policy is prepared to satisfy APP 1.3 and APP 1.4 and reflects the Act as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth).

What personal information we collect

Under APP 1.4(a), these are the kinds of personal information we collect and hold:

How we collect and hold it

Under APP 1.4(b):

• Directly from you — when you complete a quote, order or contact form, use the chat, or speak or correspond with us.
• Automatically — page-view and presence analytics are collected only after you consent via the cookie banner (see our Cookie Policy).
• From third parties — your NDIS plan manager may provide us your billing details at your direction.

Information is held on servers located in Australia, protected by HTTPS in transit, HttpOnly session cookies, salted irreversible IP fingerprints and access-controlled administration. We take the reasonable steps required by APP 11 to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Why we collect, use and disclose it

Under APPs 1.4(c) and 6, personal information is used and disclosed only for the purposes for which it was collected (or directly related purposes you would reasonably expect):

We do not sell personal information, and we do not use it for direct marketing without your consent. We disclose it only to: delivery and installation partners as strictly needed to fulfil your order; your plan manager where you ask us to bill them; and the AI chat provider described in section 5.

AI chat and overseas disclosure

Our chat assistant is powered by Moonshot AI (Kimi), a third-party artificial-intelligence provider. When you send a chat message, its content is transmitted from our server to Moonshot AI's API so that an answer can be generated. The recipient's servers are located outside Australia — likely in China (APP 1.4(f)–(g)).

Under APP 8 and s 16C of the Privacy Act, we remain accountable for personal information disclosed to this overseas recipient and take reasonable steps to ensure it is handled consistently with the APPs. The API credential never leaves our server, and messages are transmitted over encrypted connections.

Cookies and browser storage

We use one strictly-necessary session cookie and one optional, first-party analytics category, plus two small browser-storage entries. Full details — including how to change or withdraw your choice at any time — are in the Cookie Policy, or open the cookie settings.

How long we keep it

When information is no longer needed, we destroy it or de-identify it, as APP 11.2 requires.

Access and correction

You may request access to the personal information we hold about you (APP 12) and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13).

Requests are free of charge. Email info@zenefit.example from the address concerned (or otherwise verify your identity) and we will respond within 30 days. If we refuse a request on a ground permitted by the Act, we will explain why in writing and tell you how to complain.

Complaints

If you believe we have breached the APPs, APP 1.4(e) entitles you to know how to complain and how we will handle it:

• Step 1 — write to us. Section 40(1A) of the Act asks that complaints first be made to the entity. Email info@zenefit.example with "Privacy complaint" in the subject. We will acknowledge your complaint and respond within 30 days.
• Step 2 — the OAIC. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner: oaic.gov.au · 1300 363 992 · GPO Box 5288, Sydney NSW 2001.

Data breaches

We comply with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act. If we become aware of a suspected eligible data breach — one likely to result in serious harm — we will assess it within 30 days and, where the scheme requires, notify the OAIC and the affected individuals as soon as practicable, together with recommended steps to reduce harm.

Anonymity, changes and contact

Wherever practicable you may deal with us anonymously or under a pseudonym (APP 2) — for example when browsing the site or asking general chat questions. We will need your real details only when you ask us to prepare a quote or deliver an order.

We may update this policy from time to time; the current version is always on this page, and the effective date appears at the top. For any privacy question, request or complaint, contact our privacy officer at info@zenefit.example or .