How we
handle your
information.

This Privacy Policy is issued by Peopleology (ABN 92 397 706 507) (“Peopleology”, “we”, “our”, “us”). We are a real estate business consultancy and recruitment firm based in Victoria, Australia, operating nationally.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy sets out how we comply with those obligations.

The personal information we collect depends on your relationship with us. We only collect information that is reasonably necessary for our functions and activities. This may include:

• Identity and contact details — name, email, phone, company, role
• Professional information — CV, employment history, qualifications, references, salary expectations, work rights and licence details
• Client information — agency details, brief requirements, hiring history and remuneration data
• Communications — emails, messages, meeting notes and any information you choose to share with us
• Website data — IP address, device, browser type, referring URL, pages viewed and cookies (see section 8)
• Sensitive information — only where you provide it voluntarily and with your consent (e.g. accessibility needs for a workshop)

We collect personal information directly from you — through our website forms, phone calls, emails, meetings, and any documents you send us. In limited circumstances we may collect information from third parties (e.g. reference checks, public professional profiles like LinkedIn, previous employers) but only where it is relevant to a recruitment engagement and, where required, with your consent.

We use personal information for the primary purposes for which it was collected, which include:

• Providing our consulting, recruitment and speaking services
• Matching candidates to suitable roles with client agencies
• Responding to enquiries and communicating with you
• Managing our client and candidate relationships
• Improving our services and website
• Complying with our legal and regulatory obligations
• Direct marketing (only where you have opted in — you can opt out at any time)

We treat your information as confidential. We may disclose personal information to:

• Prospective employers — for candidates, only after we have discussed and agreed the role with you
• Referees — with your permission, as part of a reference check
• Third-party service providers — who help us run our business, including cloud hosting (MongoDB Atlas), email delivery (Resend), analytics, and productivity tools. These providers are contractually required to protect your information and only use it for the services they provide to us
• Professional advisers — lawyers, accountants and insurers, where necessary
• Regulators, courts and law enforcement — where required or authorised by law

We do not sell your personal information to anyone.

Some of our service providers store or process data outside Australia — typically in the United States, the European Union, or other regions where reputable cloud infrastructure is hosted. Before disclosing information overseas, we take reasonable steps to ensure the recipient is bound by privacy protections substantially similar to the APPs, or your consent to the disclosure.

We store personal information in secure, access-controlled cloud systems and, where necessary, in encrypted local files. We use industry-standard security measures including encryption in transit and at rest, access controls, password protection, and monitored infrastructure.

No system is ever completely secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

Our website uses a small number of cookies and similar technologies to operate correctly and understand how visitors use the site. These may include strictly necessary cookies (session, security) and analytics cookies (to measure page visits and traffic sources).

You can disable cookies through your browser settings. If you do, some parts of the website may not work as intended.

We only keep personal information for as long as we need it for the purposes we collected it, or as required by law. Typically:

• Candidate records — kept while you are registered with us and for up to 7 years after our last meaningful contact, unless you ask us to delete earlier
• Client records — kept for the duration of the engagement and for 7 years after (for tax, insurance and accounting purposes)
• Website enquiries — kept for up to 2 years unless a relationship develops

Under Australian privacy law you have the right to:

• Ask what personal information we hold about you
• Ask us to correct information that is inaccurate, out of date or incomplete
• Ask us to delete your information (subject to any legal retention obligations)
• Withdraw consent to marketing at any time
• Complain to us, and — if unresolved — to the OAIC at oaic.gov.au

To make a request, email hello@peopleology.co. We will respond within 30 days.

Our services are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe we have collected information from a minor, please contact us and we will delete it.

We may update this Privacy Policy from time to time. The current version, and the effective date, will always be published on this page. Material changes will be flagged prominently on our website.

Questions, requests or complaints about privacy should be sent to:

Peopleology
Privacy Officer
hello@peopleology.co
Geelong · Melbourne · Greater Victoria