For Client's Employees

In most instances we provide our services as an agent for your employer or other customer entity under a limited agency solely for purposes of delivering our services. We only collect Personal, Credit, Health, Sensitive and Employee Information that is reasonably necessary to provide your employer with the services they have requested.

This may include:

• Personal Information such as your name, email, residential and postal addresses, telephone and fax numbers;

• Health Information such as allergies and vaccination status;

• Credit Information, such as your tax file number and financial credit checks;

• Employee Information such as employee records; and

• Sensitive Information such as criminal record checks

(collectively referred herein as Personal Information).

We may also be required to collect confidential and sensitive organisational information such as company financials, meeting minutes, recruitment records, policies and procedures, contracts, investigation reports and other such business information that may be deemed sensitive and/or confidential (Company Information).

From You

We will, if reasonable and practicable to do so, collect your Personal Information directly from you.

For example, when you:

• Attend an interview with us

• Speak to us on the phone

• Write to us

Information collection may take place face-to-face, through the completion of documents such as administrative forms or electronic forms, by way of emails, telephone calls, surveys, through our websites, through the use of our vendors' websites, or through the use of apps on mobile devices.

From Third Parties

We may collect Personal Information about you, from another individual or organisation.

For example:

• from our client (i.e. your employer)

• from our client's subcontractors (e.g. recruitment agencies, IT service providers, business partners)

• Equifax (background check agency)

When collecting Personal Information about you from another individual or organisation, we will endeavour to only collect and hold that information if it was lawfully collected, and when the collector’s disclosure of that information to Honestally is integral to one of Honestally’s functions.

From Publicly Available Sources

We also collect Personal Information from publicly available websites, directories and databases including, but not limited to Google, Twitter and other social media.

Client information is stored with our authorised vendors.

Primarily (but not limited to):

• Google Workspace (for primary data storage, corporate email and other productivity tools)

• Zoho One (for your contact details, communication records, project planning and limited/ secondary data storage)

Please refer to Storage and Protection for full details.

The storage of Personal Information through these providers is subject to the Privacy Policies of these entities.

Yes. We will be required to share your Personal Information with our client (your employer) and/or their subcontractors as part of our engagement to provide our services. We do not share your Personal Information with anyone else without your consent unless legally required to do so.

We retain information you provide to us and which we collect about you, including Personal Information and Personal Data:

• for as long as legally required; and/or

• for so long as we continue to provide services to your employer or reasonably expect to do so; and/or

• specifically until such time as your employer requests we delete your Personal Information and Personal Data.

You may contact us to request deletion or amendment of your Personal Information at any time. We will consider all requests, having regard to our legal obligations.