Privacy Policy

1. Introduction

Employment Compass Pty Ltd (ABN 52 621 421 112) ("we", "us", "our") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, disclose, and safeguard personal information through our client portal and advisory services.

2. Information We Collect

We may collect the following categories of personal information:

• Identity information: Name, position title, date of birth
• Contact information: Email address, phone number, business address
• Employment information: Employee records, contract details, pay rates, leave balances, qualifications
• Account information: Login credentials (hashed), role assignments, portal activity
• Financial information: Billing details, payroll data (where applicable)
• Technical information: IP address, browser type, device information, usage analytics
• Documents: Uploaded files including contracts, policies, certificates, and WHS records

3. How We Collect Information

We collect personal information through:

• Account registration and onboarding
• Portal forms and document uploads
• Advisory consultations (phone, email, video)
• Integration with third-party payroll systems (Xero, MYOB, KeyPay) with your authorisation
• Cookies and analytics for portal performance

4. How We Use Information

We use your information to:

• Provide HR advisory services and portal access
• Generate compliance reports, contracts, and policy documents
• Monitor award compliance and employment obligations
• Process billing and manage your subscription
• Send service notifications and important updates
• Improve our services through anonymised analytics
• Comply with legal obligations and regulatory requirements

5. Data Sharing & Disclosure

We do not sell personal information. We may share information with:

• Your organisation: Authorised users within your business can access relevant employee data
• Service providers: Hosting (Vercel), payment processing (Stripe), email delivery — under strict data protection agreements
• Payroll integrations: Only with your explicit authorisation and API credentials
• Legal requirements: Where required by law, regulation, or court order

6. Data Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, role-based access controls, rate limiting, input validation, Content Security Policy headers, and regular security reviews. Access to personal information is restricted to authorised personnel only.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide services. Employment records are retained for a minimum of 7 years as required by the Fair Work Act 2009. You may request deletion of non-mandatory records at any time.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Request deletion of non-mandatory records
• Withdraw consent for optional data processing
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

9. Cookies

Our portal uses essential cookies for authentication and session management. We also use analytics cookies to understand portal usage and improve our services. You can manage cookie preferences through your browser settings.

10. Contact Us

For privacy enquiries, data access requests, or complaints:

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified through the portal or via email. Your continued use of the portal after changes constitutes acceptance of the updated policy.