Privacy Policy
1 About this policy
Connect Auz Pty Ltd and its related companies including CA Workforce Corporation and CA Workforce EMEA Limited ("CA Workforce", "we", "us", "our") value and respect the privacy of individuals and are committed to compliance with data protection legislation, including Australia's Privacy Act 1988 (Cth), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act 2018 (CCPA).
This Privacy Policy applies to your use of CA Workforce's workforce management solutions available online, via mobile and desktop applications, and any other CA Workforce services that reference this policy — including associated support services (together, the "Services").
This policy does not apply to third-party websites, applications, or software that integrates with the Services, or to Connect Auz employees, contractors, or job applicants, who are covered by a separate internal notice.
2 Who this policy applies to
CA Workforce's Services are mostly intended for use by employer organisations. If CA Workforce is providing the Services to your employer, we use your personal information to allow you to access and use the Services on behalf of your employer, making us a "processor" under the GDPR. In other circumstances — for example if you use the Services outside of your employment context — we may act as a "controller".
If your employer controls your instance of the Services, many privacy rights may be better directed to your employer in the first instance. CA Workforce will advise you accordingly if you contact us.
3 Information we collect
CA Workforce collects several types of personal information depending on how you use the Services:
| Type | Examples |
|---|---|
| Profile information | Name, signature, email address, postal address, phone number, date of birth, gender, profile photo |
| Financial information | Transaction history, credit card details, billing information; bank account details where Employee Onboarding is used |
| Employment information | Employer details, employment period, remuneration, job function; shift times and dates worked or scheduled |
| Sensitive information | Health information (where configured by your employer); biometric data such as facial or voice recognition (where a kiosk feature is enabled) |
| Geolocation data | Location collected when clocking in or out on a mobile device |
| Usage & activity | How the Service is accessed and used; usernames; records of interactions with us |
| Device information | Connection type, operating system, browser type, IP address, time zone, device identifiers, diagnostic data, cookies |
| Your content | Content submitted to CA Workforce websites or interactive features; information entered into the Services including via the Newsfeed |
| Preferences & opinions | Marketing preferences; feedback and opinions about the Services |
| Support information | Contact details, issue summaries, documents, images, and recordings provided to our support team |
Some personal information is required to provide the Services. If you do not supply required information, we may be unable to provide the Services in full.
4 How we collect your information
We collect personal information:
- Directly from you — when you register, use the Services, or contact us
- From your employer — who may provide your details to set up your account
- Automatically — via cookies, log files, and usage data when you interact with the Services
- From third parties — such as our related companies or service providers
If you provide us with information about another person, you must ensure that person is aware their information may be handled as described in this policy.
5 How we use your information
We use personal information for the following purposes:
- To provide, deliver, and improve the Services
- To authenticate your access and manage your account
- To process payments and manage billing
- To personalise and optimise your experience
- To provide customer support and respond to requests or complaints
- To communicate with you about the Services, including new features and training
- To conduct research, analytics, and product development
- To detect, prevent, and address fraud, security incidents, and technical issues
- To comply with legal obligations and defend legal claims
- To verify your identity and detect fraudulent payments or use
- To facilitate business transfers such as mergers or acquisitions
- For other purposes where you have given your express consent
6 Sharing and disclosure
We do not sell your personal information. We may share it with:
- Your employer organisation, as the controller of your CA Workforce instance
- Our related companies, for internal operations and service delivery
- Technology and infrastructure providers (cloud hosting, data storage, APIs, payment gateways)
- Social media platforms where you interact with our accounts
- Our lawyers, accountants, and professional advisors
- Third-party applications you or your employer connects to the Services
- Law enforcement and government agencies where required by law
- Any third party your employer directs us to share your information with
CA Workforce operates in Australia, New Zealand, USA, Canada, the United Kingdom, the EU, and the Philippines. Your data may be transferred to and processed in these countries.
7 International transfers
Where personal information is transferred outside your country of residence, we ensure the transfer complies with all applicable laws. For EU/UK transfers, we rely on Standard Contractual Clauses (SCCs) or other approved mechanisms to safeguard your data.
You may request details of the safeguards in place by contacting our Data Protection Officer (see Section 18).
8 Security
CA Workforce uses industry-standard technical and organisational measures to secure the personal information we store. For details of our security practices, visit connectauz.com.au/security-features.
No security system is impenetrable. Due to the nature of the internet, we cannot guarantee the absolute security of information during transmission. You are also responsible for maintaining the security of your account credentials.
In the event of a data breach, we will notify the relevant data protection authority and affected individuals as required by law.
9 Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law (such as financial reporting obligations).
When personal information is no longer needed, we will either delete or anonymise it. Where immediate deletion is not possible, we will securely store and isolate it from further use until deletion is possible.
10 Cookies and online tracking
We use cookies and similar technologies to improve the Services and understand usage patterns:
- Session cookies — to maintain your login session (expire within 24 hours by default)
- Persistent cookies — to remember your registration and login details for future sessions
- Analytics tools — to understand how users interact with the Services
You can configure your browser to stop accepting cookies, though this may affect the functionality of some features. Our Services do not currently respond to "Do Not Track" browser signals.
11 Marketing
We may send you direct marketing communications about our Services by email, through the Services, or by mail, unless you opt out. You may opt out at any time by contacting us using the details in Section 18 or using the opt-out mechanism in our marketing messages.
12 Your rights
Subject to applicable law, you may have the right to:
- Access personal information we hold about you
- Know what information we collect and how it is used and shared
- Correct inaccurate or incomplete information
- Request deletion of your personal information ("right to be forgotten")
- Object to or restrict our processing of your information
- Receive your data in a portable format
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact our Data Protection Officer using the details in Section 18. We will verify your identity before processing your request and respond within applicable legal timeframes.
Where a request is made and information has been shared with third parties, we will take all reasonable steps to notify those third parties.
13 Account deletion
You have the right to request deletion of your account and all associated personal data at any time. To submit a deletion request, email us at casupport@connectauz.com.au with the subject line "Account Deletion Request", including your full name and the email address linked to your account.
We will confirm receipt within 24 hours and process the deletion within 30 days. Note that some data may be retained where required by law.
14 EU and UK residents
Lawful basis for processing
Where we act as a controller, we process your personal information on one or more of the following lawful bases:
- Contract — to perform our obligations under a contract with you
- Legitimate interests — to operate and improve our Services, ensure security, and communicate with you, where these interests are not overridden by your rights
- Consent — where you have opted in to specific activities such as marketing or third-party integrations
- Legal obligation — where required by applicable law or regulation
Automated decision-making
We will only subject your personal data to automated decision-making where we have notified you and given you 21 days to request reconsideration, where it is necessary to perform a contract with appropriate safeguards in place, or where you have given explicit written consent.
International transfers
For transfers outside the EEA or UK, we rely on Standard Contractual Clauses or adequacy decisions by the European Commission or UK Secretary of State.
EU representative
Pursuant to Article 27 of the GDPR, CA Workforce has appointed European Data Protection Office (EDPO) as its EU representative. You may contact EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium, or via EDPO's online request form.
Our UK representative is CA Workforce EMEA Limited, Herschel House, 58 Herschel Street, Slough, Berkshire, SL1 1PG, United Kingdom.
15 California residents
In the past 12 months, we have collected and disclosed (but not sold) personal information in the following CCPA categories: identifiers; customer records; protected classification characteristics; commercial information; biometric information; internet or electronic network activity; geolocation data; audio, electronic, visual, or similar information; professional or employment-related information; education information; and inferences drawn to create a profile.
You have the right not to be discriminated against for exercising your privacy rights under the CCPA.
California residents may contact us at privacy@connectauz.com.au or call 1-888-532-4785.
The entity responsible for this policy is Deputec Pty Ltd ACN 133 632 327, 4/1-3 Smail St, Ultimo, NSW 2007, Australia.
16 Complaints
We take privacy concerns seriously. If you have a complaint, contact us using the details in Section 18. We will confirm receipt, open an investigation where appropriate, and respond as soon as practicable.
If we are unable to resolve your complaint to your satisfaction, you may lodge a complaint with your local data protection authority:
- Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
- United Kingdom: Information Commissioner's Office — ico.org.uk
- EU: Your national data protection authority — edpb.europa.eu
- United States: Your state Attorney General's office (privacy is regulated at state level)
17 Changes to this policy
CA Workforce may update this Privacy Policy at any time. Where changes are material, we will notify you by email or via in-app notification. The latest version will always be available at connectauz.com.au/privacy-policy. Continued use of the Services after the effective date of any changes constitutes your acceptance of the updated policy.
18 Contact us
For privacy-related questions, requests, or complaints relating to CA Workforce:
Data Protection Officer
ConnectAuz Software Limited
600 Sneydes Road, Werribee
VIC 3030, Australia