1. About this policy
This Privacy Policy (“Policy”) describes how EIR Australia Pty Ltd (“EIR”, “we”, “us”, “our”) collects, holds, uses, discloses and protects personal information in connection with:
- our website at eirlabourhire.com.au;
- the EIR mobile application (the “App”), available on Google Play and the App Store; and
- our labour hire services, including recruitment, onboarding, rostering, timesheets and payroll (together with the website and the App, the “Services”).
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). By using the Services you agree to the handling of your personal information as described in this Policy. If you do not agree, please do not use the Services.
2. Information we collect
The types of information we collect depend on how you interact with us. We only collect what is reasonably necessary for our labour hire functions and activities.
2.1 Information you provide directly
- Identity and contact details: full name, date of birth, email address, phone number, postal and residential address, emergency contact details.
- Right-to-work and identity documents: passport, driver’s licence, visa status, citizenship, proof of age, photo ID.
- Employment information: work history, references, qualifications, tickets and licences (e.g. White Card, forklift, EWP), trade skills, availability, preferences, resume/CV.
- Payroll and tax information: Tax File Number (TFN), bank account details, superannuation fund details, pay rate, timesheet data.
- Health and safety information: medical questionnaires, pre-employment medicals, drug and alcohol test results, injury reports, vaccination status where required by a client site.
- Account credentials: username, password (stored hashed, never in plain text), security questions.
- Communications: messages you send us through forms, email, SMS, or the App’s in-app messaging.
2.2 Information collected automatically
- Device and usage information: device model, operating system and version, unique device identifiers (e.g. Android advertising ID where available), mobile network, app version, time zone, language, crash logs and diagnostics.
- Log data: IP address, browser type, pages viewed, referring/exit pages, date/time of access, actions taken in the Services.
- Approximate and precise location (App only, and only with your permission) — see Section 3.
- Cookies and similar technologies on the website — see Section 7.
2.3 Information we receive from third parties
With your consent, we may receive information from:
- referees you have nominated, past employers, and recruitment partners;
- background-check, police-check and Working-with-Children-check providers;
- medical assessors and drug-and-alcohol testing providers;
- client sites where you have been placed, in relation to attendance, conduct, performance and incidents;
- government agencies where required or permitted by law (e.g. ATO, Services Australia, state labour-hire regulators).
We do not buy personal information from data brokers.
3. EIR mobile app permissions
The EIR App requests the following device permissions. Each is optional — you can grant, deny or later revoke any permission through your device settings. Denying a permission may prevent related features from working.
| Permission | Why we use it | Required? |
|---|---|---|
| Location (approximate & precise) | To confirm site attendance when you clock in/out, to show nearby jobs, and to match you to shifts within reasonable travel distance. | Optional |
| Camera & photos | To let you upload a profile photo, licences, tickets, identity documents and site photos (e.g. incident reports). | Optional |
| Notifications | To send shift offers, timesheet reminders, payroll confirmations and messages from your recruiter. | Optional |
| Network / internet | To communicate with EIR servers. Required for the app to function. | Required |
We do not collect contacts, SMS messages, call logs, calendar data, or on-device files outside photos you explicitly select.
The App does not track your location in the background when the App is closed.
4. How we use your information
We use personal information to:
- create and manage your worker, client or recruiter account;
- assess your suitability for labour hire placements and match you to jobs;
- verify your identity, qualifications, tickets, right to work and safety inductions;
- roster you to shifts, send job briefs, collect timesheets and process pay and superannuation;
- communicate with you about shifts, jobs, payroll, policy updates and workplace safety;
- provide customer and site-support services to our clients;
- maintain safety on client sites, investigate incidents, and meet our WHS obligations;
- operate, secure, troubleshoot and improve the website and the App (including crash diagnostics and analytics);
- prevent and detect fraud, misuse and security incidents;
- meet our legal and regulatory obligations (e.g. labour-hire licensing, tax, workers’ compensation, anti-money laundering);
- establish, exercise or defend legal claims.
We only process your information where we have a lawful basis to do so — typically to perform a contract with you, to comply with a legal obligation, with your consent, or for our legitimate business interests in running a labour hire service.
6. Third-party services and SDKs
The EIR App and website use the following third-party services. Each provider is bound by its own privacy policy, linked below.
| Service | Purpose | Data shared | Policy |
|---|---|---|---|
| Google Firebase (Analytics, Cloud Messaging, Crashlytics) | App analytics, push notifications, crash and performance diagnostics. | Device and app identifiers, app events, crash logs, approximate IP-derived location. | firebase.google.com/support/privacy |
| Google Maps Platform (Maps, Places) | Show maps, job locations, directions and address lookup. | Approximate or precise location when using map features; search queries you enter. | policies.google.com/privacy |
| Cloud hosting and infrastructure providers | Hosting our website, App backend, databases and backups in Australia where possible. | All Service data, processed under contractual confidentiality and security obligations. | Available on request. |
We do not use advertising SDKs, and the App is not monetised through ads.
8. How long we keep your information
We keep personal information only for as long as we need it for the purposes described in this Policy, or for as long as the law requires. Typical retention periods include:
- Active worker, client and recruiter accounts: for the life of the account and while we have a legitimate reason to keep it (e.g. future placements you have opted in to).
- Payroll, tax and employment records: at least 7 years after the end of the employment relationship, as required by the Fair Work Act 2009 (Cth) and the Income Tax Assessment Act.
- WHS and incident records: as required by state/territory work-health-and-safety laws (typically 5–30 years depending on the type of record).
- Inactive App accounts: we may delete or de-identify inactive accounts after a prolonged period of inactivity.
When we no longer need your information, we securely delete or de-identify it. Where deletion is not immediately possible (for example, because the information is held in backups), we isolate it from further processing until deletion is possible.
9. How we keep your information safe
We take reasonable steps to protect your personal information from misuse, loss and unauthorised access, modification or disclosure. Our safeguards include:
- encryption of data in transit between your device and our servers using HTTPS/TLS;
- encryption of sensitive data at rest in our production databases;
- role-based access controls — only staff who need access to do their job receive it, and access is logged;
- multi-factor authentication on administrative accounts;
- regular backups, patching and monitoring of our systems;
- confidentiality obligations for staff, contractors and service providers;
- an incident response process including mandatory notification of eligible data breaches under the Notifiable Data Breaches scheme.
No system is 100% secure. You also play a role — keep your password confidential, enable device PIN or biometric lock, and tell us immediately if you suspect your account has been compromised.
10. Children and minors
Our Services are intended for adults. We do not knowingly collect personal information from people under 18 years of age without the consent of a parent or guardian. If you believe we hold information about a minor without appropriate consent, please contact us and we will delete it.
11. Your rights under Australian law
Under the Australian Privacy Principles you have the right to:
- Access the personal information we hold about you;
- Correct information that is inaccurate, out-of-date, incomplete or misleading;
- Request deletion of your personal information — see Section 12;
- Withdraw consent for processing that relies on your consent (this does not affect processing already carried out);
- Opt out of marketing communications at any time — every marketing email and SMS contains an unsubscribe link;
- Complain to us, and if we don’t resolve your complaint, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
We respond to verified requests within 30 days. We may need to verify your identity before acting on a request, and some information may be exempt from disclosure under the Privacy Act (e.g. where it would impact the privacy of others or investigations).
12. Account and data deletion
12.1 Stop using the App
You can uninstall the EIR App from your device at any time. Uninstalling the App removes it from your device and stops any further data collection through the App, but it does not delete the account or personal information we already hold on our servers. To have that data deleted, you must also send us a deletion request as set out below.
12.2 Request deletion of your account and data
To delete your EIR account and the personal information we hold about you, send an email from the address linked to your account to [email protected] with the subject line “Account deletion”. Please include your full name and, if known, the mobile number associated with your account.
We will verify your identity, deactivate your account, and delete your personal information within 30 days, subject to the legal retention requirements in Section 8. We will confirm by email once this is complete.
12.3 What is deleted and what we must keep
Deleted: profile, contact details, availability, app-generated data, login credentials, and messages with recruiters.
Kept, and why: payroll and tax records, timesheets, invoices, WHS incident reports, and other records we are legally required to keep under Australian employment, tax and safety laws (see Section 8). We also keep minimal records to prevent fraud, enforce our terms, and defend legal claims. These records are access-controlled and used only for those purposes.
13. Overseas disclosure
We store personal information in Australia where practicable. However, some of our service providers (including Google Firebase and Google Maps Platform) process data on servers located outside Australia, including in the United States and other countries where Google operates. We take reasonable steps to ensure these providers handle your information in a way consistent with the Australian Privacy Principles.
14. Updates to this policy
We may update this Policy from time to time. The “Last updated” date at the top of the page shows when it was last revised. If we make material changes, we will notify you through the App, by email, or by posting a prominent notice on the website. Continued use of the Services after an update means you accept the revised Policy.
15. How to contact us
For any privacy question, complaint or request, please contact our Privacy Officer:
Haidee Keegan — Privacy Officer
EIR Australia Pty Ltd
24 Springfield Street, Potts Point NSW 2011, Australia
Email: [email protected]
Phone: 1300 788 834
You can also reach our team via the contact page.