Privacy Policy

1. About This Policy

Harrison Barratt Group Pty Ltd (ABN 81 638 914 824) ("HBG", "we", "us", "our") is committed to protecting the privacy of personal information we collect in the course of our business. This Privacy Policy outlines how we collect, hold, use, and disclose personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We may collect the following types of personal information:

• Full name, date of birth, and contact details (phone, email, address)
• Employment history, qualifications, tickets, licences, and certifications
• Right to work documentation (visas, citizenship, residency status)
• Tax file numbers and superannuation details (for payroll purposes)
• Work health and safety records, including injury reports and medical certificates
• References and background check information
• Website usage data, cookies, and analytics information
• IP addresses, browser type, device information, operating system, and referring URLs
• Geolocation data derived from IP addresses (city/region level, not precise location)
• Information provided through forms, surveys, and correspondence
• Uploaded documents — CVs, resumes, medical certificates, injury photos, and docket attachments

3. How We Collect Information

We collect personal information through:

• Direct interactions — registration forms, phone calls, emails, and in-person meetings
• Online platforms — our website, staff dashboard, candidate portal, and third-party job boards
• Referrals — from existing candidates, clients, or third parties with your consent
• Third-party providers — background check services, licensing bodies, and training providers
• Automated technologies — cookies, server logs, and analytics tools on our website
• File uploads — documents and images submitted through our website forms

4. How We Use Your Information

We use personal information to:

• Assess your suitability for employment or labour hire placements
• Match candidates to client workforce requirements
• Process payroll, superannuation, and workers' compensation
• Comply with workplace health and safety obligations
• Communicate job opportunities, availability updates, and company news
• Manage our client relationships and service delivery
• Meet legal and regulatory requirements (tax, employment law, licensing)
• Improve our website, services, and user experience

5. Disclosure of Information

We may disclose your personal information to:

• Our clients and host employers for the purpose of labour hire placements
• Government agencies (ATO, Fair Work, SafeWork, immigration authorities)
• Insurance providers for workers' compensation claims
• Payroll and superannuation service providers
• Background screening and verification providers
• Our professional advisers (lawyers, accountants, auditors)
• Related companies within the Harrison Barratt Group

We do not sell personal information to third parties. We will not disclose personal information overseas without your consent or unless required by law.

6. Data Storage and Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include secure data storage, access controls, staff training, and encryption of sensitive data during transmission.

6.1 Local Device Storage

Our staff dashboard uses your browser's local storage to save your profile information (name, email, phone, worker ID) on your device. This data stays on your device and is not transmitted to our servers unless you submit a form. You can clear this data at any time through your browser settings or by removing your profile in the staff dashboard.

6.2 Cloud Database

Form submissions and uploaded documents are stored securely in our cloud database hosted by Supabase (based in Australia). Data is encrypted in transit (TLS) and at rest. Access is restricted to authorised HBG personnel.

6.3 File Uploads

Documents uploaded through our website (such as CVs, medical certificates, or docket attachments) are stored securely in our cloud storage infrastructure. Files are retained for as long as necessary for the purpose they were collected and are deleted in accordance with our data retention schedule.

7. Cookies, IP Tracking, and Website Analytics

Our website uses cookies, IP address tracking, and similar technologies to enhance your browsing experience, maintain security, and gather analytical data.

7.1 IP Address Collection

We automatically collect your IP address when you visit our website or use our online services. We use IP addresses to:

• Detect and prevent fraud, abuse, and unauthorised access to our systems
• Enforce rate limits on form submissions to prevent spam and misuse
• Identify approximate geographic location (city/region level) for analytics and service delivery purposes
• Monitor and troubleshoot website performance and errors
• Maintain security audit logs of form submissions and portal access
• Comply with legal obligations, including workplace health and safety record-keeping

IP addresses may be stored alongside form submissions, audit logs, and session records. We do not use IP addresses to personally identify you unless required for security investigations or legal compliance.

7.2 Cookies

Our website uses cookies to remember your preferences, maintain authentication sessions, and improve functionality. Cookies we use include:

• Essential cookies — required for authentication, session management, and security (cannot be disabled)
• Functional cookies — remember your preferences such as dark mode, zoom level, and profile selections
• Analytics cookies — help us understand how visitors use our website (see section 7.3)

You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the website. For full details, see our Cookie Policy.

7.3 Google Analytics

We use Google Analytics to collect information about how visitors interact with our website. Google Analytics may collect your IP address, pages visited, time on site, referral source, browser type, and device information. This data is aggregated and used to improve our website and services. Google's privacy policy can be found at policies.google.com/privacy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7.4 Server Logs

Our web servers automatically record information including your IP address, the pages you request, the date and time of your visit, and the referring URL. These logs are used for security monitoring, performance analysis, and troubleshooting, and are retained for up to 90 days.

8. Access and Correction

You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate, out of date, or incomplete. To make a request, contact us at info@harrisonbarratt.com.au.

9. Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint by contacting us at info@harrisonbarratt.com.au. We will investigate all complaints and respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our handling of personal information, please contact us: