We may use personal information collected from you for the purpose of providing you with direct marketing material; however, if you do not wish to receive such information you can request not to receive it. Simply contact us by any of the methods detailed in this document. There is no cost for this request, however, please allow two weeks for your request to be actioned. 

HR Tactics adheres to the Spam Act 2003 (Cth), accordingly, we will:

• obtain your consent before sending an electronic message to you (this can be express or inferred);

• provide sender identification (so that you know who sent the message); and

• provide you with the option to unsubscribe.

Disclosing information to other parties

In order to provide our services, we may disclose your personal information to external parties, including, but not limited to:

• other countries, if that becomes necessary to deliver our services to you. This access is via secure internet connection or in some instances by email;

• from time to time, information may be loaded to the cloud for storage or access through programs such as Dropbox etc; and

• it is possible that product and services providers we recommend may outsource functions using overseas contractors or companies that process these services using offshore resources. Where this is a concern to you, we suggest that you carefully read their Privacy Policy to determine the extent to which they send information overseas.

We allow access to relevant personal information for external organisations that help us provide services. These organisations are bound by confidentiality arrangements. From time to time we may use service providers whose staff accesses our data outside of Australia to provide services. Where this is the case, these service providers have committed to adhere to the Australia Privacy Principles. These service providers may be located in a number of countries including the Philippines, India, Serbia, Vietnam and/or Sri Lanka.

Website, Social Media and Email

When you visit our website, details may be recorded about your visit, such as time and date, your computer IP address, pages accessed, time spent on page and type of browser. If you provide information on a social media platform, including, but not limited to, LinkedIn, Facebook, Twitter, and Instagram, we may hold, store, and disclose this information for the purposes of marketing or the provision of services to you. This information is used in an anonymous format for statistical purposes and as such cannot identify you individually, unless we have sought permission from you to do so. Where you don’t want this to happen, please notify us. When you log into the client section of our site, we may use cookies to identify who you are, while you are logged in for the session. The cookie is unique to that session, and the data within the cookie is encrypted. You must have cookies enabled to be able to use our site. Our website may contain links to other websites. When visiting these websites be sure to check the Privacy Policy as we are not responsible for privacy practices of those other parties. Where you chose to communicate with us by email, we will store your email, name and address with any other contact or personal details you have provided on our database.

Government Related Identifiers

We will not adopt as our own any identifiers that you may provide to us such as TFNs, Centrelink, Medicare numbers etc. If you have provided us signed consent, we may hold your identifiers on file so that we can provide ongoing services to you. If you chose not to provide this consent, we will not hold this information on file. The circumstances in which an organisation may use or disclose government related identifiers are narrower in scope than the circumstances in which an organisation may use or disclose other personal information. Government related identifiers will not be disclosed except in the following circumstances:

• where use or disclosure is reasonably necessary for the organisation to verify the identity of the individual for the purposes of the organisation’s activities or functions;

• providing access would be unlawful; 

• denying access is required or authorised by or under Australian law or by court/tribunal order; 

• HR Tactics has reason to suspect that unlawful activity, or misconduct of a serious nature, that relates to its functions or activities has been, is being, or may be engaged in, and giving access would be likely to prejudice the taking of appropriate action in relation to the matter;

• providing access is likely to prejudice actions being conducted by an enforcement agency; or

• providing access would reveal evaluative information generated within HR Tactics in conjunction with a commercially sensitive decision-making process.

In the event we refuse your request to access to your personal information; we will provide you with a written explanation for that refusal. We will endeavor to respond to any request for access within 14-30 days depending on the complexity of the information and/or the request. If your request is urgent please indicate this clearly.

Keeping your Information Secure

Your personal information is generally held in your client file and on our computer database. We will always seek to ensure that your personal information is protected from misuse, loss, unauthorised access, modification, or disclosure. At all times your personal information is treated as confidential and any sensitive information is treated as highly confidential. 

Our security measures include, but are not limited to:

• all hard copy files are stored in lockable cabinets/ rooms;

• access to our premises is controlled by only allowing authorised personnel to access those locations where personal information is stored; 

• all computer-based information is protected through the use of access passwords on each computer and screen saver passwords;

• client data is backed up each evening and stored securely off site; 

• encrypting data sent from your computer to our systems during internet transactions, and customer access codes transmitted across networks;

• employing firewalls, intrusion detection systems and virus scanning tools to protect against unauthorised persons and viruses from entering our systems;

• using dedicated secure networks or encryption when we transmit electronic data for purposes of outsourcing; and

• providing secure storage for physical records.

In the event you cease to be a client of this organisation, any personal information which we hold about you will be maintained in our secure storage facility for a period of 7 years in order to comply with legislative requirements. Where information we hold is identified as no longer needed for any purpose, we ensure it is effectively and securely destroyed.