Privacy Policy
Effective Date: 14 July 2025 Last Updated: 14 July 2025
Carey is a service provided by New Horizon Code PTY LTD (ABN 61 634 659 804) (“Carey,” “we,” “our,” or “us”). We are committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. What Information We Collect
We may collect the following types of information:
a. Personal Information
Name, email address, phone number
Job title, organisation, and business details
User credentials and access permissions
Support requests or communications
b. Sensitive Information
If required for NDIS, disability, or community services management:
Health information
Case notes or client interactions
Financial support documentation
We only collect sensitive information where required and authorised.
c. Technical and Usage Data
IP address, browser type, device data
Access logs, timestamps, feature usage
Crash reports and diagnostic data
d. Third-Party Integrations
If you connect third-party services (e.g., Xero, Google, Zoom):
Authorised tokens or API keys
Data necessary for syncing (e.g., invoice records, email addresses)
e. AI-Generated Outputs
Carey may generate summaries or insights using AI models based on your uploaded content. These outputs are not stored unless explicitly saved by you.
2. How We Collect Information
We collect information via:
User registration forms
Platform usage and logs
Third-party API integrations
Support or onboarding interactions
Voluntary submissions (e.g., feedback forms)
We do not engage in unsolicited scraping or collection of personal data.
3. How We Use Your Information
We use your information to:
Provide and maintain the Carey platform
Support user onboarding and account management
Generate reports and workflows (including AI summaries)
Process payments and manage subscriptions
Improve our services, conduct audits, and prevent abuse
Meet legal or regulatory obligations
We never sell your data.
4. Use of Artificial Intelligence (AI)
Carey’s AI features assist in summarising documents, identifying patterns, and suggesting actions. AI models process information in-memory only. No data is stored, reused, or used to train external models. AI outputs are optional, and always subject to your review and control. AI tools are disabled by default and must be explicitly enabled by a user with administrative access.
5. Legal Basis for Processing
We collect and process your personal information based on:
Your consent
A contract or service agreement
Our legitimate interests (e.g., service improvement, troubleshooting)
Compliance with legal obligations
6. Who We Share Information With
We may share data with:
Service providers who support Carey operations (e.g., cloud infrastructure, email providers)
Payment processors like Stripe
Communication providers (e.g., Zoom, Intercom)
Third-party integrations you authorise
All third-party vendors must comply with confidentiality and data handling agreements aligned with Australian privacy standards. We will never share or disclose sensitive or personal information without a lawful basis.
7. Data Storage and Security
Data is hosted on secure cloud infrastructure with encryption at rest and in transit. Access is restricted using industry-standard controls and role-based access systems. We regularly review our data protection practices and conduct audits. If we become aware of a data breach that is likely to result in serious harm, we will notify affected users and report it to the Office of the Australian Information Commissioner (OAIC) as required.
8. Data Retention
We retain your personal information:
For as long as your organisation or account remains active
As required for compliance with legal, tax, or reporting obligations
Until you request erasure (unless legally restricted)
You may request deletion at any time by contacting us. Some anonymised or aggregated data may be retained.
9. International Data Transfers
Your data may be processed in countries outside of Australia (e.g., via infrastructure providers such as AWS or Cloudflare). Where this occurs, we ensure adequate protection by:
Hosting data in jurisdictions with similar privacy laws, or
Enforcing contractual obligations (e.g., standard contractual clauses)
10. Your Rights
Under Australian privacy law, you have the right to:
Access personal information we hold about you
Request correction or deletion of your data
Withdraw consent for optional features
Lodge a complaint with the OAIC if you believe your rights have been infringed
To exercise any of these rights, email us at support@carey.app.
11. Children’s Privacy
Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via the platform or email. Continued use of Carey constitutes acceptance of the revised policy.
13. Contact Us
New Horizon Code PTY LTD Suite 121 Level 14, 167 Eagle Street Brisbane, QLD, Australia