Privacy Policy

1. Who we are

CORE People & Safety Pty Ltd ("CORE", "we", "us", "our") is an Australian integrated HR and workplace health and safety (WHS) consultancy. This policy applies to personal information collected through our website (corepeopleandsafety.com), our CORE Hub platform, CORE AI assistant, our Business Health Check tool, our forms, email, and phone or in-person interactions, and applies to visitors, prospective clients, current clients and their personnel.

We are bound by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles that govern the collection, use, storage and disclosure of personal information in Australia.

2. Information we collect

The personal information we collect depends on how you interact with us, and may include:

• Contact details — name, business name, email address, phone number and postal address, provided when you make an enquiry, book a Discovery Call, or subscribe to our resources.
• Business Health Check responses — answers you provide through our Business Health Check assessment, including information about your industry, team size, and current HR and WHS practices.
• Client and engagement information — information provided during the course of an engagement, which may include employment records, incident reports, policies, organisational charts and other workplace documentation necessary to deliver our services.
• Website usage data — pages visited, referral source, device and browser type, and approximate location, collected automatically via cookies and analytics tools.
• Communications — records of emails, calls, forms and CORE AI chat interactions between you and CORE.

We do not intentionally collect sensitive information (such as health information, criminal history, or union membership) unless it is necessarily provided by a client in the course of an HR or WHS engagement (for example, a workers' compensation matter), and where we do, we handle it with an additional degree of care consistent with APP 3.

3. How we collect information

We collect personal information directly from you wherever reasonably possible — through website forms, our booking calendar, phone calls, email, our CORE AI assistant, and in-person or virtual meetings. Where you access services through CORE Hub, information may also be collected through your use of that platform.

Occasionally, and only where relevant to delivering a service (for example, a workplace investigation), we may collect information about an individual from a third party such as an employer, colleague or referee — always with appropriate authority to do so.

4. How we use your information

We use personal information to:

• Respond to enquiries and provide requested quotes, resources or Business Health Check results;
• Deliver, administer and improve our HR and WHS consulting services, CORE Hub, CORE AI, CORE Learn, CORE Tools, CORE Docs and CORE Advice offerings;
• Communicate with you about your engagement, including scheduling, invoicing and follow-up;
• Send newsletters, guides or marketing communications, where you have opted in (you may unsubscribe at any time);
• Meet our legal, regulatory and professional obligations, including under the Fair Work Act 2009 and WHS legislation where we are assisting a client with compliance; and
• Maintain the security and proper functioning of our website and systems.

5. Disclosure to third parties

We may disclose personal information to trusted service providers who help us operate our business, including:

• Our website, hosting and CRM platform providers (used to operate corepeopleandsafety.com and CORE Hub);
• Payment processors, where you make a payment to us;
• Email and calendar scheduling providers, used to manage enquiries and bookings; and
• Professional advisors (such as our accountant or lawyer), where reasonably necessary.

Each of these providers is only given the information necessary to perform their function, and is required to handle it securely. We may also disclose information where required by law, or to protect the rights, safety or property of CORE, our clients, or the public.

6. CORE AI and automated tools

Our CORE AI assistant is designed to provide general people and safety guidance, and to help businesses develop bespoke policies, procedures and templates based on the information you provide. Information you enter into CORE AI is used to generate the requested output and to improve the quality and relevance of our tools. We do not use client-identifiable inputs to train third-party public models, and we do not disclose the content of your CORE AI conversations to other clients.

Guidance produced by CORE AI is general in nature and does not replace formal advice from a CORE consultant for complex or high-risk matters — see our Terms of Service for further detail.

7. Cookies and website analytics

Our website uses cookies and similar technologies to remember your preferences, understand how visitors use our site, and improve its performance. This may include analytics tools that record aggregated, non-identifying usage statistics. You can control or disable cookies through your browser settings; doing so may affect some website functionality, such as saved form progress.

8. Storage and security

We store personal information using reputable cloud-based platforms with industry-standard security safeguards, including encryption in transit, access controls and restricted staff access. Physical records, where they exist, are kept in locked storage. While we take reasonable steps to protect your information, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this policy, or as required by law (including record-keeping obligations under Fair Work and WHS legislation), after which it is securely deleted or de-identified.

9. Access, correction and complaints

You may request access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date or incomplete. To make a request, contact us using the details below — we will respond within a reasonable timeframe, generally within 30 days.

If you believe we have breached the Australian Privacy Principles, please contact us first so we can investigate and respond. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Overseas disclosure

Some of the cloud service providers we use to operate our website, CORE Hub and CORE AI platforms may store or process data on servers located outside Australia, including in the United States. Where this occurs, we take reasonable steps to ensure those providers apply data handling practices consistent with the Australian Privacy Principles.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The updated version will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.