Legal
Privacy Policy
Last updated: 22 July 2026
Workforce Directory
Privacy Policy
1. Introduction
Workforce Directory (“we”, “us”, or “our”) is an online directory of businesses that provide products and services within the human resources and workforce management sector in Australia. The Website is operated by Linq HR (ABN 39 763 620 696) (“Operator”) and developed by Credentials Pty Ltd (ABN 23 103 176 405) (“Developer”).
We understand that your privacy is important. This Privacy Policy explains how we collect, hold, use, disclose, and otherwise handle your personal information in connection with the Workforce Directory website located at www.workforcedirectory.com.au (“Website”) and the services we provide through it.
For the purposes of the Privacy Act, Linq HR (ABN 39 763 620 696) is the APP entity responsible for the collection, holding, use, and disclosure of personal information in connection with the Website. Linq HR determines the purposes and means of processing personal information and is accountable for compliance with the APPs. Credentials Pty Ltd (ABN 23 103 176 405) acts solely as a service provider to Linq HR, providing technical development and maintenance services for the Website. Credentials Pty Ltd processes personal information only on the instructions of Linq HR and does not independently determine the purposes for which personal information is used. Any privacy enquiries, access requests, or complaints should be directed to Linq HR using the contact details in clause 15 below.
We are committed to complying with the Privacy Act 1988 (Cth) (“Privacy Act”) and the Australian Privacy Principles (“APPs”) contained in Schedule 1 of the Privacy Act.
This Privacy Policy should be read together with our Terms and Conditions (including Part A and Part B where applicable) and our Cookie Policy, available on the Website at www.workforcedirectory.com.au/terms/ and www.workforcedirectory.com.au/cookies/ respectively. The Terms and Conditions incorporate this Privacy Policy and the Cookie Policy as constituent documents.
By accessing or using the Website, you acknowledge that you have read this Privacy Policy and understand how we handle your personal information. You do not have to provide personal information to us; however, if you choose not to, it may affect your ability to use certain features of the Website or the services we offer.
1.1 Collection Notice (APP 5)
In accordance with APP 5, we notify you of our collection of personal information at or before the time of collection, or as soon as practicable afterwards. Collection notices are provided: at the point of account registration, through our vendor sign-up forms; through on-screen notices and pop-ups when you submit enquiries or contact forms; via this Privacy Policy, which is prominently linked in the Website footer and on all registration and data collection pages; and by direct communication (such as email) when we create an Operator Created Listing (also referred to as an “Auto-Generated Listing” in the Terms and Conditions) containing personal information sourced from publicly available sources, where it is reasonable and practicable to do so.
2. Definitions
- APPs — Australian Privacy Principles contained in Schedule 1 of the Privacy Act 1988 (Cth).
- Auto-Generated Listing — A Listing created by the Operator using publicly available information for a business that has not yet registered on the Website. Also referred to as an “Operator Created Listing” in this Privacy Policy. See clause 4.3.
- Listing Content — All information forming part of a vendor's directory listing, including business name, description, service categories, contact details, logos, credentials, and other information, whether submitted by a vendor or sourced by the Operator from publicly available sources.
- Marketing Communications — Email or other electronic communications that promote the Website, new features, plans, or other marketing content, as defined in clause 32 of the Terms and Conditions.
- Operational Communications — Email or other electronic communications relating to a vendor's Account, Listing, subscription, billing, compliance, or Website operation, as defined in clause 32 of the Terms and Conditions.
- Operator — Linq HR (ABN 39 763 620 696), the entity responsible for operating the Website.
- Personal Information — Information or an opinion about an identified individual, or an individual who is reasonably identifiable (as defined in section 6 of the Privacy Act 1988 (Cth)).
- Privacy Act — Privacy Act 1988 (Cth), as amended from time to time.
- Spam Act — Spam Act 2003 (Cth), as amended from time to time.
- Vendor — A business or individual that registers, claims, or maintains a Listing on the Website (as defined in Part B of the Terms and Conditions).
- Website — The Workforce Directory website at www.workforcedirectory.com.au and all associated pages, features, and functionality.
3. Who This Policy Applies To
This Privacy Policy applies to all individuals who interact with the Website, including:
- General users: individuals who browse, search, or otherwise access the Website without creating an account.
- Vendor representatives: individuals who register for a vendor account, manage a vendor listing, or otherwise interact with the Website on behalf of a business listed in the directory.
- Individuals whose information appears in vendor listings: such as contact persons, directors, or staff members whose names or details are included in Listing Content.
- Enquiry contacts: individuals who contact us via email, phone, or through the Website.
4. Information We Collect
We collect different types of information depending on how you interact with the Website. Under APP 3, we only collect personal information that is reasonably necessary for our functions and activities.
4.1 Information You Provide to Us
When you register for a vendor account, submit a listing, contact us, or otherwise interact with the Website, you may provide us with your name, job title and role; business email and telephone number; business name, trading name and ABN; business address and website URL; a description of your products and services; logos, images, videos and other media; social media and video profile links; service category selections; Account login credentials (stored encrypted); payment information (processed by Stripe, not stored by us directly); and any other information you choose to provide.
Mandatory and voluntary information: name, business name, ABN, business email address, business phone number, and a description of your services are mandatory for account creation. All other information is voluntary.
4.2 Information We Collect Automatically
When you access the Website, we may automatically collect the following information. Some or all of it may be personal information where it relates to an identified individual or an individual who is reasonably identifiable, including where it can be linked with information held by us or a third party:
- Your Internet Protocol (IP) address.
- Your browser type, version, and language preferences.
- Your operating system and device information.
- The pages you visit, the links you click, and the time and duration of your visit.
- Your search queries and directory interactions.
- Referring and exit URLs.
- General geographic location data (city or region level only — we do not collect precise GPS location data); and
- Cookie data and similar tracking identifiers (see clause 8 below).
4.3 Information We Collect from Publicly Available Sources
As described in our Terms and Conditions (clause 31), we may collect, aggregate, and incorporate publicly available information about businesses operating in the HR and workforce management sector, including from the Australian Business Register (ABR), ASIC registers, the business's own website and social media, industry directories, and press releases. Most of this is business information, not personal information. Where personal information about an identifiable individual is incidentally captured (for example, a director's or key contact's name), we take reasonable steps to notify the individual, including via the Website's “Claim this listing” function, periodic review of listings, and this Privacy Policy.
4.4 Information We Receive from Third Parties
We may receive personal information about you from our cloud hosting and infrastructure providers, our payment processor (Stripe), third party business reporting agencies (such as CreditorWatch, Equifax, or Dun & Bradstreet), and analytics providers (such as Google Analytics).
4.5 Sensitive Information
We do not intentionally collect sensitive information (as defined in section 6 of the Privacy Act). You should not submit sensitive information through the Website. If sensitive information is ever necessary, we will not collect it without your explicit, informed consent, or unless required or authorised by law. Inadvertently provided sensitive information will be de-identified or destroyed unless you provide explicit consent to retain it.
5. How We Use Your Information
We use your information to provide and operate the Website; maintain and improve the directory; process payments; communicate with you (Operational and Marketing Communications); for analytics and service improvement; for AI and automated technologies; for business verification; for security and fraud prevention; for legal compliance; and to enforce these Terms.
5.1 Email Communications and Consent
By completing vendor registration, you expressly consent to receive Operational Communications and Marketing Communications, in accordance with the Spam Act and clause 32 of the Terms and Conditions. Marketing Communications identify the sender, include a functional unsubscribe mechanism, and unsubscribe requests are honoured within five business days. General users who subscribe to the newsletter via the footer form provide express consent at that time.
5.2 AI and Automated Technologies — Further Detail
We use AI assisted tools for listing verification, listing generation and enrichment, search enhancement, enquiry assistance, misuse detection, and content quality review. No automated decision has a legal or similarly significant effect on any individual. You may request human review of an automated decision by contacting help@workforcedirectory.com.au (response within 10 business days).
6. Disclosure of Your Information
6.1 Vendor Listing Content
If you are a vendor, the Listing Content identified at collection may be displayed publicly for the directory purposes described in the relevant notice. If you submit another individual’s personal information, you must have authority to provide it and must give that person the relevant collection notice. Linq HR remains independently responsible for complying with the APPs and does not rely solely on the vendor’s warranty.
6.2 Third Party Service Providers
- VentraIP — Australian web hosting; primary infrastructure; data stored in Australia.
- Amazon Web Services (AWS) — backup and disaster recovery.
- Stripe — subscription payment processing (we do not receive or store full card numbers).
- Google Analytics — may receive online identifiers, device and browser information, page and event data, search interactions and coarse location information. Although we do not intentionally send names or direct contact details to Google Analytics, analytics data may be personal information under the Privacy Act where an individual is reasonably identifiable by us or Google. We configure the service to minimise collection and use it only in accordance with clauses 7 and 8 and the Cookie Policy.
6.3 Business Reporting Agencies
Where we conduct business verification checks, we may disclose limited business information to agencies such as CreditorWatch, Equifax, or Dun & Bradstreet, at the entity level only.
6.4 Professional Advisers
We may disclose personal information to our lawyers, accountants, and auditors where necessary.
6.5 Law Enforcement and Regulatory Bodies
We may disclose personal information where required or authorised by law, including to the OAIC, the ACCC, or other regulators or law enforcement.
6.6 Business Transfers
In a merger, acquisition, or sale of assets, personal information may transfer to the acquiring entity, which will be required to handle it in accordance with the APPs.
6.7 With Your Consent
We may disclose personal information for another purpose with your specific, informed consent, obtained separately for each new purpose and not bundled with other consents or terms.
6.8 No Sale of Personal Information
We will not sell, rent, or trade your personal information to third parties for their own marketing purposes without your express consent.
7. Overseas Disclosure
Workforce Directory is Australian focused and stores personal information within Australia wherever reasonably practicable. Primary hosting (VentraIP) is in Australia. AWS backup data is stored in Australia where available, though ancillary services may involve the United States or other jurisdictions. Stripe may process data in the United States or other jurisdictions. Google Analytics processes data on Google's global infrastructure, which may include servers in the United States. Before overseas disclosure, we take reasonable steps consistent with APP 8, including contractual arrangements, assessing substantially similar overseas protections, due diligence, and, as a last resort, obtaining your informed consent with full disclosure of the consequences.
8. Cookies and Tracking Technologies
8. COOKIES AND TRACKING TECHNOLOGIES — We use cookies and similar tracking technologies on the Website, described in full at www.workforcedirectory.com.au/cookies/, which forms part of this Privacy Policy. The categories we use are Essential, Analytics, Marketing, and Experience. Essential cookies keep the Website secure and functioning and cannot be disabled. Analytics, Marketing, and Experience cookies are switched off by default: none of them is set until you actively opt in. On your first visit, and at any later time via the “Cookies” link in the Website footer or at www.workforcedirectory.com.au/cookies/, you can choose which optional categories (if any) to allow. You can withdraw consent or change your preferences at any time using the preference panel on the Cookie Policy page, through your browser settings, or (for Google Analytics) using Google's opt-out tool at tools.google.com/dlpage/gaoptout.
9. Data Security
We implement reasonable technical and organisational measures, including TLS/SSL encryption in transit, access controls and authentication, regular security monitoring, staff training, and reputable Australian hosting (VentraIP) with AWS backup infrastructure. Transmission via the internet is not completely secure and any transmission is at your own risk.
10. Data Retention
- 10.1 Vendor Account Data — retained for the duration of the account, then 90 days post-termination for export, after which it is deleted or de-identified.
- 10.2 Operator Created Listing Data — retained while the listing remains live; removal actioned within 10 business days of a valid request.
- 10.3 Browsing and Analytics Data — server/access logs: max 12 months; Google Analytics data: max 26 months (per Google's own retention settings); security logs: max 24 months; backup data: max 90 days.
- 10.4 Legal Retention Obligations — tax and financial records for a minimum of 5 years; records required by the Privacy Act or OAIC; litigation hold records; and other records required under Commonwealth, State, or Territory legislation.
11. Your Rights
- 11.1 Right of Access (APP 12) — respond within 30 days.
- 11.2 Right of Correction (APP 13).
- 11.3 Right to Request Deletion, subject to legal retention obligations.
- 11.4 Right to Withdraw Consent at any time.
- 11.5 Right to Opt Out of Marketing Communications, without affecting Operational Communications.
- 11.6 Correction of Operator Created Listings — actioned within 10 business days.
- 11.7 Data Export for registered vendors — within 20 business days, in a machine readable format where practicable.
12. Notifiable Data Breaches
We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act, including containment, assessment (targeting completion within 30 days), OAIC notification, and notification to affected individuals where an eligible data breach is likely to result in serious harm.
13. Children's Information
The Website is a B2B directory not directed at children under 18. We do not knowingly collect personal information from children; if inadvertently collected, we will delete it as soon as practicable.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. For material changes that significantly affect how we collect, use, or disclose personal information, we will use reasonable efforts to provide at least 21 days' advance notice before the changes take effect. Continued use after publication constitutes acceptance.
15. Complaints
Complaints can be made using the contact details below. We acknowledge within 5 business days and aim to resolve or otherwise respond within 30 days. If you are not satisfied with our response, or if we have not responded within 30 days, you may then lodge a complaint with the OAIC (www.oaic.gov.au, 1300 363 992, enquiries@oaic.gov.au, GPO Box 5218, Sydney NSW 2001). The OAIC generally expects a complainant to raise the issue with us first and to allow us a reasonable opportunity (up to 30 days) to respond before it will investigate.
16. Third Party Websites
The Website may link to third party websites, including vendor websites. We are not responsible for their privacy practices.
17. Governing Law and Document Hierarchy
17.1 Governing Law
This Privacy Policy is governed by the laws of Victoria, Australia, with non-exclusive jurisdiction of the Victorian courts and the Federal Court of Australia sitting in Victoria. National laws (including the Privacy Act and APPs) apply in accordance with their terms.
17.2 Document Hierarchy
This Privacy Policy, the Cookie Policy and the Terms and Conditions must be read together. For personal information generally, this Privacy Policy prevails over an inconsistent provision of the Terms. For the technical operation, categories, providers, duration and controls for cookies and similar technologies, the Cookie Policy prevails, but only to the extent it is consistent with this Privacy Policy and applicable law. The Terms govern contractual matters not addressed by the privacy documents. No hierarchy clause limits a statutory privacy, consumer or communications right.
Contact Us
Linq HR (ABN 39 763 620 696) — help@workforcedirectory.com.au — 1300 234 566 — www.workforcedirectory.com.au. Postal: The Privacy Officer, c/o Linq HR, 25 Claremont Street, South Yarra, Victoria, Australia.