How OzAfe collects, uses and protects your personal information.
OzAfe (54 602 101 871) is committed to providing quality services to you, and this Privacy Policy outlines our ongoing obligations in respect of how we manage your Personal Information.
We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the "Privacy Act"). The APPs govern the way in which we collect, use, disclose, store, secure and dispose of your Personal Information.
A copy of the Australian Privacy Principles may be obtained from the website of the Office of the Australian Information Commissioner at www.oaic.gov.au.
Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect include names, email addresses, phone numbers, job titles and employer details.
This Personal Information is obtained in many ways, including through account registration, correspondence by email, via our website ozafe.com.au, and through your use of the OzAfe platform. We don't guarantee the policies of authorised third-party services we may link to.
We collect your Personal Information for the primary purpose of providing our Services to you. We may also use your Personal Information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure. You may unsubscribe from our mailing or marketing communications at any time by contacting us in writing at hello@ozafe.com.au.
Where appropriate and possible, we will explain to you why we are collecting your Personal Information and how we plan to use it at the time of collection.
Your Personal Information may be disclosed in the following circumstances:
We do not sell your Personal Information to third parties.
Your data, including Personal Information entered into the OzAfe platform, is stored on servers located in Australia (Sydney, AWS ap-southeast-2 region). We do not transfer your organisational data outside of Australia except as strictly necessary to provide the Services — for example, email delivery via our email service provider.
Your Personal Information is stored in a manner that reasonably protects it from misuse, loss, and unauthorised access, modification or disclosure. Our security measures include encryption in transit (TLS), row-level database security, and role-based access controls.
When your Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify it. Organisation data is retained for 30 days following account termination, after which it is permanently deleted from our systems. Backup copies may persist for up to 90 days following deletion.
You may access the Personal Information we hold about you and request that it be updated or corrected, subject to certain exceptions. If you wish to access your Personal Information, please contact us in writing at hello@ozafe.com.au.
OzAfe will not charge any fee for your access request but may charge a reasonable administrative fee for providing a copy of your Personal Information.
In order to protect your Personal Information, we may require verification of your identity before releasing the requested information.
If you use the OzAfe platform, you may also access and update much of your Personal Information directly within your account settings.
It is important to us that your Personal Information is up to date. We will take reasonable steps to ensure that your Personal Information is accurate, complete and current. If you find that the information we hold is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and continue to provide quality services to you.
Sensitive information is defined in the Privacy Act to include information or opinion about an individual's racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union or professional body, criminal record, health information, or biometric information.
Sensitive information will be used by us only:
Some organisations may use OzAfe to record worker screening information (such as NDIS Worker Screening Checks or Working with Children checks). This information is entered and managed by your organisation's administrators, not by OzAfe directly. You should refer to your organisation's internal privacy policies regarding how this information is handled within your workplace.
We define Other Data as information relating to your use of the OzAfe platform and services. This includes:
Where reasonable and practicable to do so, we will collect your Personal Information only from you. However, in some circumstances we may be provided with information by third parties — for example, when an organisation administrator creates an account on your behalf. In such cases, we will take reasonable steps to ensure that you are made aware of the information provided to us.
We use the following third-party services to help deliver OzAfe:
Each of these providers is bound by their own privacy policies and applicable data protection obligations.
If you have any queries or complaints about our Privacy Policy or how we handle your Personal Information, please contact us:
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.