Privacy collection notice
This is a working draft, not the final wording. It will be reviewed and replaced with HR/legal-supplied text before applicant go-live (see the project's cutover checklist). It exists now so the application form's consent checkboxes have something real to link to and agree to.
What we collect and why
When you apply for a role with together², we collect your contact details, work history, referee details, and the answers you give on the application form, so that we can assess your application and get in touch with you about it. If your application progresses, we collect further information — including screening check results, right to work evidence, and (if relevant to the role) an NDIS Worker Screening Check or Aged Care worker screening outcome — because together² is legally required to hold these records for anyone working in a risk-assessed role, whether paid or volunteer.
Screening and referee checks
We contact the referees you nominate, and (depending on the role) verify screening outcomes directly with the NDIS Worker Screening Database, the Office of the Children's Guardian, or the Department of Home Affairs' VEVO service. We only do this for applications that reach that stage, and only for the purpose of assessing your suitability for the role.
Where your information is stored
Application data is stored using Cloudflare's infrastructure, with an Oceania region preference where Cloudflare's platform supports one. This is a best-effort regional preference, not a guarantee that your data never leaves Australia — Cloudflare's own documentation describes it that way, and we are disclosing that plainly here rather than implying a stronger guarantee than exists.
How long we keep it
If your application is unsuccessful or withdrawn, your application and any screening documents are deleted within 6 months. If you decline an offer, we keep it for 12 months. If you are engaged as a worker or volunteer, we are required to keep screening and employment records for 7 years after your engagement ends, under the Fair Work Act and NDIS/Aged Care Commission requirements. These windows are enforced automatically on a daily basis, except where we are required to keep a record for longer for a specific legal reason — a dispute, an investigation, or a subpoena — in which case deletion is put on hold until that reason no longer applies.
Payroll information
We never collect or store your tax file number, bank account details, or superannuation choice ourselves. If you are offered and accept a paid role, you provide these directly to our payroll provider (Xero) through their own secure self-onboarding process.
Questions or a request to access or correct your information
Contact careers@together2.org.au.