Privacy Policy

1. Introduction

Vetted ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job board platform connecting security cleared professionals with vetted employers in Australia.

By using Vetted, you consent to the data practices described in this policy. If you do not agree with this Privacy Policy, please do not access or use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Register for an account (email, password, name, contact information)
• Create a job seeker profile (clearance level, skills, biography, resume/CV)
• Create an employer profile (company name, contact name, website, company size)
• Post job listings (job details, requirements, benefits)
• Apply for jobs (application materials, cover letters)
• Contact us or communicate through our platform

2.2 Information Collected Automatically

When you access our platform, we automatically collect certain information, including:

• IP address and device information
• Browser type and version
• Pages viewed and time spent on our platform
• Referring/exit pages
• Date and time stamps
• Usage patterns and preferences

2.3 Sensitive Information

We collect security clearance level information, which is essential for our service but is considered sensitive. We handle this information with the highest level of care and only use it for matching job seekers with appropriate opportunities. We do not collect clearance certificate numbers, sponsoring agencies, or other detailed clearance information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our job board services
• To facilitate connections between job seekers and employers
• To process job applications and employment opportunities
• To verify employer accounts and ensure platform quality
• To communicate with you about your account, applications, or job postings
• To send administrative information and service updates
• To respond to your inquiries and provide customer support
• To prevent fraud, abuse, and ensure platform security
• To comply with legal obligations and enforce our Terms of Service
• To analyze usage patterns and improve user experience
• With your consent, to send marketing communications about our services

4. Information Sharing and Disclosure

4.1 With Employers

When you apply for a job, we share your application materials (CV, cover letter, and contact information) with the employer posting that specific job. Employers can only see information for candidates who have applied to their jobs.

4.2 With Job Seekers

Job seekers can view employer company names, job details, and information that employers choose to include in job postings.

4.3 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Cloud hosting and storage providers
• Email delivery services
• Analytics providers
• Customer support tools

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.4 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and the choices you may have.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt)
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy. Specific retention periods include:

• Active accounts: Data is retained while your account is active
• Job applications: Retained for the duration of the recruitment process and as long as the employer maintains their account
• Closed accounts: Most data is deleted within 90 days of account closure, except where required for legal or compliance purposes
• Legal retention: Some information may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution)

7. Your Rights

Under Australian privacy law, you have the following rights regarding your personal information:

• Access: You can request access to your personal information we hold
• Correction: You can request correction of inaccurate or incomplete information
• Deletion: You can request deletion of your account and associated data
• Objection: You can object to certain uses of your information
• Data portability: You can request a copy of your data in a structured format
• Withdraw consent: Where we rely on consent, you can withdraw it at any time

To exercise these rights, please contact us at privacy@vetted.com.au. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our platform. Cookies are small data files stored on your device. We use:

• Essential cookies: Required for the platform to function (e.g., authentication, security)
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how users interact with our platform

You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

9. Third-Party Services

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

We use the following categories of third-party services: cloud infrastructure (AWS, Vercel), analytics, email delivery, and customer support. Each is selected based on their security standards and data protection practices.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our platform with a new "Last Updated" date
• Sending an email notification to registered users (for significant changes)
• Displaying a prominent notice on our platform

Your continued use of our services after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: