Privacy Policy

2.1 Information You Provide

We collect personal information that you voluntarily provide when using our Service, including:

• Account Information: Name, email address, phone number, job title, and company details
• Profile Information: User preferences, profile photos, and account settings
• Payment Information: Billing address and payment details (processed securely by third-party payment processors)
• Communications: Information you provide when contacting customer support or communicating with us
• Workplace Safety Data: Incident reports, risk assessments, inspection records, compliance documentation, and other safety-related information you enter into the Service

2.2 Information Automatically Collected

When you access or use our Service, we automatically collect certain information, including:

• Usage Data: Information about how you interact with the Service, including features used, actions taken, and time spent
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Location Data: General location information based on IP address (not precise geolocation unless explicitly authorized)
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies (see Section 8)
• Log Data: Server logs, error reports, and technical diagnostic information

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Authentication providers (if you use single sign-on services)
• Payment processors and financial institutions
• Business partners and service providers
• Publicly available sources

We use the personal information we collect for the following purposes:

3.1 Provide and Maintain the Service

• Create and manage your account
• Process transactions and send transaction notifications
• Provide customer support and respond to inquiries
• Enable core functionality of the workplace safety platform
• Store and manage your workplace safety data

3.2 Improve and Develop the Service

• Analyze usage patterns and trends
• Develop new features and functionality
• Conduct research and testing
• Improve user experience and platform performance

3.3 Communications

• Send service-related announcements and updates
• Provide technical notices and security alerts
• Respond to your comments and questions
• Send marketing communications (with your consent, and you may opt out at any time)

3.4 Security and Compliance

• Detect, prevent, and address fraud, security issues, and technical problems
• Enforce our policies
• Comply with legal obligations and regulatory requirements
• Protect the rights, property, and safety of SafeWork Tech, our users, and the public

3.5 Legal Basis for Processing (if applicable)

We process your personal information based on:

• Your consent
• Performance of our contract with you
• Compliance with legal obligations
• Our legitimate business interests

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers (e.g., Supabase, AWS)
• Payment processors
• Email and communication service providers
• Analytics and performance monitoring services
• Customer support tools

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Team Members

If you use a team account, certain information may be visible to other authorized members of your team, including safety data, reports, and user activity within your shared workspace.

4.3 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (e.g., subpoenas, court orders)
• Requests from government authorities or regulators
• Investigations of potential violations of our policies
• Situations involving potential threats to public safety or security

4.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

4.6 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, or marketing purposes.

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and testing
• Access controls and authentication requirements
• Secure cloud infrastructure with industry-leading providers
• Regular backups and disaster recovery procedures
• Employee training on data protection and security

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods vary depending on the type of information:

• Account Information: Retained while your account is active and for a reasonable period after account closure
• Workplace Safety Data: Retained while your organisation uses Salus, and for as long as applicable workplace safety regulations require
• Transaction Records: Retained for at least 7 years to comply with Australian tax and financial record-keeping requirements
• Usage and Analytics Data: Typically retained for 2 years
• Marketing Communications: Retained until you opt out or withdraw consent

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention and deletion policies.

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights:

7.1 Access and Correction

You have the right to access your personal information and request corrections if it is inaccurate, out-of-date, incomplete, or misleading. You can access and update most information directly through your account settings.

7.2 Data Portability

You can export your data from the Service at any time using our data export features.

7.3 Account Deletion

You can request deletion of your account and associated personal information by contacting us. We will delete your information subject to any legal retention requirements.

7.4 Marketing Opt-Out

You can opt out of marketing communications at any time by clicking the “unsubscribe” link in our emails or by updating your communication preferences in your account settings.

7.5 Cookie Preferences

You can manage your cookie preferences through your browser settings or our cookie consent tool.

7.6 Complaints

If you have concerns about how we handle your personal information, please contact us first. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

We use cookies and similar tracking technologies to collect information about your browsing activities and to provide, maintain, and improve our Service.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly (e.g., authentication, security)
• Performance Cookies: Help us understand how users interact with the Service
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Collect information about usage patterns and performance
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

8.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. However, disabling cookies may limit your ability to use certain features of the Service.

Our Service may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Your information may be transferred to and processed in countries other than Australia, including countries that may not have the same data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

Our primary cloud infrastructure is provided by Supabase, which may store data in various global locations. We ensure all data transfers comply with Australian privacy law requirements.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Updating the “Last Updated” date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

SafeWork Tech Pty Ltd
Privacy Officer
Email: privacy@safeworktech.com
Address: 92 Rundle St, Kent Town, SA 5067

We comply with the 13 Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth), which regulate how we collect, use, disclose, and store personal information, and how individuals can access and correct their personal information.

As a workplace safety platform, we recognize that the data you store in our Service may be sensitive and subject to various workplace safety regulations. We are committed to:

• Maintaining the confidentiality and security of workplace safety records
• Enabling you to comply with relevant workplace health and safety legislation
• Providing tools to manage access controls and data retention in accordance with your legal obligations
• Supporting your compliance with state and federal workplace safety requirements

You remain the data controller for workplace safety information you store in the Service and are responsible for ensuring compliance with applicable workplace safety laws and regulations.

In the event of a data breach that is likely to result in serious harm to affected individuals, we will comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth) and notify:

• The Office of the Australian Information Commissioner (OAIC)
• Affected individuals

We maintain an incident response plan and will take immediate steps to contain, assess, and remediate any data breach.

By using our Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Where required by law, we will obtain your explicit consent before processing sensitive information or using your information for purposes not covered by this policy.

You may withdraw your consent at any time by contacting us, subject to legal or contractual restrictions and reasonable notice.