Privacy Policy

View Full Width
Reception desk at Spiire's Melbourne office.

Spiire Australia Limited is committed to providing quality services and this policy outlines our ongoing obligations in respect of how we manage internal and external Personal Information.

Spiire has adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the Privacy Act), which govern the way in which we collect, use, disclose, store, secure and dispose of Personal Information.

A copy of the Australian Privacy Principles may be obtained from the website of The Office of the Australian Information Commissioner at https://www.oaic.gov.au/.

What is personal information and why do we collect it?

Personal Information is information or an opinion that identifies an individual. Examples of Personal Information we collect includes names, addresses, email addresses, phone numbers and career information.

External Personal Information includes data obtained from:

  • Interviews, job applications & related correspondence
  • seeking employment or contractor opportunities with us
  • telephone calls / emails
  • interaction with Spiire online or via our website www.spiire.com.au
  • attending a Spiire event
  • subscribing to our mailing list

We collect external Personal Information for the primary purpose of providing our services, providing information to our clients and marketing, as well as part of the recruitment process.

We may also use Personal Information for secondary purposes closely related to the primary purpose, in circumstances where such use or disclosure would be reasonable expected.

An option to unsubscribe from our mailing/marketing lists is available at any time by contacting us in writing.

Spiire does not guarantee website links or policies of any authorised third parties.

When we collect Personal Information, we will, where appropriate and where possible, provide information as to why we are collecting the information and how we plan to use it.

By accessing the Spiire website located at www.spiire.com.au or otherwise providing personal information, the terms of this Privacy Policy are deemed to be accepted.

Internal Personal Information includes data obtained from:

  • Employment records
  • Employee CVs
  • Performance review & development plans & records
  • Performance management records
  • Confidential staff survey data
  • Staff medical or pre-existing medical condition records
  • Grievance / whistleblower related records
  • Safety injury / incident records & reports
  • Salary information / banking details

The above listed information is sensitive in nature and is stored in online secured portals that are only accessible by authorised Spiire personnel using multifactor authentication. These portals follow all required security protocols based on common HRIS and CRMS systems.

Sensitive Information

Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive information will be used by us only:

  • For the primary purpose for which it was obtained
  • For a secondary purpose that is directly related to the primary purpose
  • With consent, or where required or authorised by law.

Third Parties

Where reasonable and practicable to do so, we will collect Personal Information only from individuals themselves. However, in some circumstances we may be provided with information by third parties. In such a case we will take reasonable steps to ensure that those individuals are made aware of the information provided to us by the third party.

Disclosure of Personal Information

Personal Information may be disclosed in a number of circumstances including the following:

  • To third parties, where consent to the use or disclosure; and the information is used in accordance with its primary purpose as originally intended
  • Where required or authorised by law.
  • Third party agents (e.g. contractors acting on our behalf such as designers and developers linked to providing website management related services)

Security of Personal Information

Personal Information is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification or disclosure.

This includes:

  • Having robust physical security of our premises and databases / records
  • Taking measures to restrict access to only personnel who need that personal information to effectively provide the required services (e.g. access to emails or other correspondence which may contain personal information)
  • Having technological measures in place (e.g. anti-virus software, firewalls, Disaster Recovery)
  • Ongoing monitoring of the security of our data using the latest standards and analysis tools, including Essentials Eight and Maturity Assessment data risk management frameworks.

When Personal Information is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify any Personal Information.

However, most Personal Information is or will be stored in client files which will be kept by us for a minimum of 7 years.

Online activity

Cookies:

The Spiire website uses cookies. A cookie is a small file of letters and numbers the website puts on an individual’s device if allowed. These cookies recognise that this device has visited our website(s) before, so we can distinguish it from other devices accessing the website. This improves the user experience and the Spiire website. We do not use cookies to identify individuals, just to improve your experience on our website. If individuals choose not to use the cookies, they can amend the settings on their internet browser so it will not automatically download cookies.

However, if cookies are removed or blocked, please be aware that that the browsing experience and our website’s functionality may be affected.

Website analytics:

Our website uses Google Analytics to help us better understand visitor traffic, so we can improve our services. Google Analytics collects first-party cookies, data related to the device/ browser, IP address and on-site activities to measure and report statistics about user interactions on the website. Although this data is mostly anonymous, it is possible that under certain circumstances, we may connect it to specific individuals or devices.

Direct marketing:

We may send individuals direct marketing communications and information about our services, opportunities, or events that we consider may be of interest if they have requested or consented to receive such communications.

These communications may be sent in various forms, including mail, SMS and email, in accordance with applicable marketing laws, such as the Australian Spam Act 2003 (Cth) only if consent has been received for us to send direct marketing communications by any of those methods. If a preference has been selected for method of communication, we will endeavour to use that method whenever practical to do so. There is an option of opting-out of receiving marketing communications from us at any time by following the instructions to “unsubscribe” set out in the relevant communication / contacting us using the details set out in the “How to contact us” section below.

In addition, we may also use Personal Information or disclose personal information to third parties for the purposes of advertising, including online behavioural advertising, website personalisation, and to provide targeted or retargeted advertising content to you (including through third party websites).

Access to your Personal Information

Internal Staff have access to secured online portals protected by Multifactor Authentication (MFA) and are able to access and update their own personal information.

Anyone outside of the business (External people) may request access to their Personal Information in order to update, correct or delete it, subject to certain exceptions. A request to access Personal Information must be made in writing.

Spiire will not charge any fee for requests or changes to the status to Personal Information kept but, in order to protect an individual’s Personal Information, we may require identification before releasing the requested information.

Maintaining the Quality of your Personal Information

It is important to us that any Personal Information is up to date. We will take reasonable steps to make sure that any Personal Information is accurate and complete. If the information we have is not up to date or is inaccurate, individuals can advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services.

Policy Updates

This Policy may change from time to time.

Privacy Policy Complaints and Enquiries

If you have any queries or complaints about our Privacy Policy please contact us at:

Integrated Management Systems Manager
Spiire Australia Limited ACN 050 029 635
PO Box 16084 Melbourne VIC 8007 Australia
Email: melbourne@spiire.com.au
Phone: 03 9993 7888