Privacy Policy

GRC Talent respects your privacy and is committed to protecting the personal information we collect from candidates, clients, and website visitors. This Privacy Policy explains how we handle your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and upcoming reforms to Australian privacy law.

1. What personal information we collect

We may collect the following types of personal information:

• Candidates: CVs, employment history, qualifications, referees, contact details, salary expectations, work rights, and any other details you choose to provide.

• Clients: Contact details of hiring managers, role requirements, feedback on candidates.

• Website visitors: Information you provide via forms, and technical data (such as IP addresses or cookies).

We do not usually collect sensitive information (such as health) unless it is directly relevant to a role and you have consented.

2. How we collect your information

• Directly from you when you apply for a role, send us your CV, or contact us.

• From third parties you have authorised, such as referees.

• From publicly available sources (e.g. LinkedIn) where it is reasonable to do so.

• From our website when you submit forms or interact with us online.

3. Why we collect and use your information

We use your personal information for the following purposes:

• To assess your suitability for current or future roles.

• To communicate with you about opportunities, updates, or outcomes.

• To provide recruitment and talent advisory services to our clients.

• To meet legal or regulatory obligations.

• To improve our services and website.

We will never send your CV to a client without your explicit consent.

4. Legal basis for handling your information

We rely on:

• Your consent (e.g. when you apply for a role).

• Our legitimate interest in providing recruitment services.

• Our legal obligations (e.g. record-keeping or regulatory reporting).

5. Storing and protecting your information

Your personal information is stored securely in our recruitment database, which is powered by JobAdder, a third-party applicant tracking system (ATS).

• JobAdder hosts data in secure cloud servers located in Australia and other jurisdictions.

• We have data processing agreements in place with JobAdder to ensure compliance with privacy obligations.

• We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Some information may be stored or processed overseas by JobAdder or other cloud-based service providers. Where this occurs, we ensure appropriate safeguards are in place.

6. How long we keep your information

We keep personal information only for as long as it is reasonably necessary for recruitment purposes. If you are not successful in a role, we may retain your details to consider you for future opportunities, unless you ask us to delete them sooner.

We review our database annually. If we have had no updates or correspondence from you within a 24-month period, your information will either be securely deleted, or we may contact you to request renewed consent to retain it. If we do not receive a response within 30 days of our request, we will delete your information.

7. Your rights

You have the right to:

• Request access to the personal information we hold about you.

• Request correction if the information is inaccurate or incomplete.

• Request deletion of your information at any time.

• Withdraw consent where processing is based on consent.

To exercise these rights, please contact us (see Section 10 below).

8. Cookies and website data

Our website may use cookies or similar technologies to improve functionality and understand how visitors use our site. You can manage or disable cookies through your browser settings.

9. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve the issue. If you are not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

www.oaic.gov.au

10. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

GRC Talent

Email: hello@grctalent.com.au

Phone: +61401480030

Website: www.grctalent.com.au

‍