Legal
Privacy policy
Last updated: 14 August 2026. Operated by Leah Justyce Art Gallery ABN 73 658 665 321.
1. Who we are
Juste is operated by Leah Justyce Art Gallery (ABN 73 658 665 321). This privacy policy explains how we collect, use, store and protect your personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles.
2. Information we collect
We collect information you provide when creating an account or using the platform: name, email address, phone number, business name, ABN, NDIS registration number, suburb and state. Providers may also upload credentials, shift notes, invoices and expense records. Participants may upload profile details, schedule information and reviews. We collect usage data (pages visited, actions taken) to improve the platform.
3. How we use your information
We use your information to operate the Juste platform — including displaying provider listings in the directory, facilitating messaging between participants and providers, generating invoices and reports, and sending service notifications. We do not sell your personal information to third parties. We do not use your information for advertising.
4. Who we share information with
Provider profile information (business name, suburb, state, services, rating) is displayed publicly in the directory. Participant information is not displayed publicly. We share information with our service providers (Supabase for database hosting, Vercel for platform hosting, Stripe for payment processing) only to the extent necessary to operate the platform. Each provider is bound by their own privacy obligations.
5. Sensitive information
Juste may hold information that could be considered sensitive, including disability-related information about participants. We handle this information with care and do not disclose it except as described in this policy or as required by law.
6. Data storage and security
Your data is stored on Supabase infrastructure hosted in Australia or as otherwise described in Supabase's data processing terms. We use row-level security to ensure users can only access data they are authorised to see. We take reasonable technical and organisational measures to protect your information, but no system is completely secure.
7. Retention
We retain your information for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data by contacting us. Some information may be retained for legal or compliance purposes.
8. Your rights
You have the right to access, correct or request deletion of your personal information. To exercise these rights, contact us at hello@ndisconnect.org. We will respond within 30 days.
9. Cookies
Juste uses cookies and similar technologies to maintain your session and improve the platform experience. We do not use third-party advertising cookies.
10. Changes to this policy
We may update this privacy policy from time to time. We will notify active members of material changes by email. The current version is always available at ndisconnect.org/privacy.
11. Contact
For privacy questions or complaints, contact us at hello@ndisconnect.org. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.