Privacy policy

1. Purpose and scope

This Privacy Policy explains how Camp Connect Pty Ltd (ACN 630 513 996), trading as Co Connect App (Co Connect, we, us, our), handles personal information. It applies to our public website, business and marketing activities, customer support, events and the Co Connect platform.

We handle personal information in accordance with applicable privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply. This Policy is written to reflect the way a workplace technology platform operates; it does not remove a Customer's own privacy obligations.

2. Our role: platform information versus our own information

When an organisation subscribes to the platform, that organisation normally decides why and how information about its workforce, contractors, residents or other users is collected and used. In that context, the organisation is generally responsible for the information it places in the platform and Co Connect processes it on the organisation's documented instructions and under the applicable customer agreement (Platform Data).

Co Connect acts in its own right when we collect information about website visitors, prospective customers, our contacts, event attendees, suppliers and our own personnel. We may also handle limited account, security, billing and support information to administer the Services.

If you use the platform through an employer or other organisation, direct privacy questions about its purpose, workplace rules, access requests or use of your information to that organisation first. We will reasonably assist the organisation where required by our agreement or law.

3. Personal information we collect

The information we collect depends on how you interact with us and the features your organisation enables. It may include:

• Contact and business information: name, work title, employer, email address, phone number and site or business location.
• Account and platform information: account identifier, role, login and audit information, profile details, device information, support requests and preferences.
• Information entered into platform features: content, forms, reports, comments, images, documents, event registrations, feedback, acknowledgement records and other information authorised users provide.
• Workplace and operational information: site, roster or shift-related details, team or contractor status, work location or emergency-response details, where a Customer chooses to use those features.
• Location and journey information: current or historical location, route, check-in, destination and timing information, but only if the relevant feature is enabled and you or your device supplies that information.
• Technical and usage information: IP address, browser and device type, operating system, app version, log records, pages or functions used, crash data and cookies or similar technologies.
• Marketing and event information: enquiry details, communication preferences, survey responses and event registrations.
• Sensitive information: only where a Customer configures a workflow or you provide it, such as information concerning health, wellbeing, race or ethnicity, union membership, religious belief, criminal record, sexual orientation or other sensitive information. We do not ask individuals to provide sensitive information through the public website unless it is necessary and we have clearly explained why.

We may receive information directly from you, from a Customer or administrator, through your use of the Services, from our service providers or from publicly available sources. Customers are responsible for giving their users appropriate collection notices and obtaining any required authority or consent before entering Platform Data.

4. Why we collect, use and disclose information

We use personal information only where reasonably necessary for our functions and activities, including to:

• provide, operate, secure, support and improve the Services;
• create and administer accounts and respond to enquiries, feedback and support requests;
• enable the Customer-configured features you or the Customer choose to use;
• communicate service, security, billing, policy and operational notices;
• analyse performance, troubleshoot faults, prevent fraud and protect our systems and users;
• meet legal, regulatory, audit and record-keeping obligations;
• send marketing communications where permitted by law and in accordance with your preferences; and
• manage our business, personnel, suppliers and corporate transactions.

We do not sell personal information. We do not use Platform Data for unrelated advertising or marketing to a Customer's individual users.

5. Who we disclose information to

Depending on the circumstances, we may disclose personal information to:

• the relevant Customer and its authorised administrators;
• our related bodies corporate and personnel who need it for their roles;
• service providers that help us host, support, secure, analyse, communicate, back up or operate the Services;
• professional advisers, insurers, auditors and financing or corporate-transaction participants, subject to appropriate confidentiality safeguards;
• regulators, law enforcement, courts and government agencies where required or authorised by law; and
• another person where you have authorised the disclosure or it is otherwise permitted by law.

For Platform Data, we disclose information only as needed to provide the Services, on the Customer's instructions, or as required by law.

6. Overseas disclosures and service providers

Our primary application hosting is designed to be in Australia. Some service providers, support tools, communications networks, analytics tools or back-up arrangements may handle information outside Australia or make it accessible from another country.

Where an overseas disclosure occurs, we take reasonable steps to ensure the recipient handles personal information consistently with applicable privacy requirements and our contractual obligations.

7. Cookies and similar technologies

We use necessary cookies and similar technologies to make the website and platform work, keep sessions secure, remember settings and understand technical performance. We may also use optional analytics or marketing technologies where enabled. Our Cookie Notice explains the categories, choices and how to manage them.

8. Direct marketing

We may send business contacts and people who request information communications about Co Connect, events and related services where permitted by law. You can opt out at any time by using the unsubscribe link in the message or contacting us at privacy@coconnectapp.com. Opting out does not stop essential non-marketing communications, such as security, account or service notices.

9. Security and data incidents

We use reasonable technical, organisational and physical safeguards designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. No system is completely secure. You should protect your account credentials and device.

We maintain procedures to assess and respond to suspected data incidents. If an eligible data breach occurs, we will comply with applicable notification obligations and, where we process Platform Data, work with the relevant Customer in accordance with our contractual and legal responsibilities.

10. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide the Services, meet legal or contractual obligations, resolve disputes and enforce agreements. Platform Data retention, return and deletion are governed by the Customer's agreement and applicable law. When information is no longer required, we take reasonable steps to delete or de-identify it, subject to back-up cycles, legal retention requirements and technical limitations.

11. Access and correction

You may ask to access or correct personal information we hold about you by contacting privacy@coconnectapp.com. We may ask for proof of identity and will respond within a reasonable period. We may refuse an access request only where permitted by law and will explain the reason where required.

If the request concerns Platform Data, we may refer you to the relevant Customer because it controls that information. We will assist the Customer where appropriate.

12. Privacy complaints

To make a privacy complaint, email privacy@coconnectapp.com with your name, contact details and a clear description of the issue. We will acknowledge your complaint, investigate it and provide a written response within a reasonable period. If we cannot resolve the complaint, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

13. Changes and contact

We may update this Policy as our practices or legal obligations change. The current version will be published on our website with its effective date. Material changes will be notified where appropriate.

Privacy contact: privacy@coconnectapp.com
Post: Privacy Officer, Co Connect App, 7/191 St Georges Terrace, Perth WA 6000