privacy-policy
Last updated 8 September 2026
REMOTE SHIFTS GROUPS PTY LTD
ACN: 701 901 420
ABN: 61 701 901 420
Business Location: Sydney, New South Wales, Australia
Website: https://remoteshifts.com
Email: [email protected]
Telephone: (02) 9072 9454
Effective Date: 14 October 2026
Version: 1.0
1. Introduction and Our Commitment
REMOTE SHIFTS GROUPS PTY LTD ("Remote Shifts", "we", "our", or "us") is an Australian company providing information technology services, business process management, managed IT operations, software development, enterprise resource planning (ERP), customer relationship management (CRM), artificial intelligence (AI) integration, automation, IT consulting, technical support, project management, and remote staffing solutions.
We are committed to protecting personal information entrusted to us by our clients, employees, contractors, business partners, job applicants, website visitors, and other individuals. This Privacy Policy explains how we collect, use, store, disclose, protect, retain, and dispose of personal information in connection with our business activities.
We intend to manage personal information consistently with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), to the extent applicable to our operations.
We also recognise our obligations under other applicable laws, contractual confidentiality requirements, cybersecurity standards, and international data protection requirements where relevant.
2. Scope of This Policy
This policy applies to personal information handled through:
Our corporate website and online forms.
Client enquiries, consultations, quotations, and proposals.
Managed IT services and outsourced business processes.
ERP, CRM, HR, payroll, and business management platforms.
Software development and integration projects.
AI-powered business applications and automation services.
Cloud infrastructure, hosting, databases, and technical support.
Remote staffing and offshore operational teams.
Recruitment, employment, contractor management, and workforce administration.
Customer support, service tickets, communications, and collaboration systems.
Marketing, business development, and professional communications.
This policy covers personal information that Remote Shifts collects or controls. Where we process information solely on behalf of a client, the client's instructions, applicable contract, and any Data Processing Agreement may also govern our activities.
3. Types of Information We Collect
Depending on the relationship and services involved, we may collect:
3.1 Identity and Contact Information
Names, job titles, business names, telephone numbers, email addresses, business addresses, postal addresses, and professional contact information.
3.2 Business and Client Information
Company details, ABNs, authorised representatives, service requirements, commercial correspondence, project specifications, contracts, billing contacts, purchase orders, and support history.
3.3 Employment and Recruitment Information
Resumes, qualifications, professional experience, employment history, references, availability, work authorisations, remuneration arrangements, attendance records, leave information, and other information reasonably necessary for recruitment or workforce management.
Where permitted by law, additional information may be collected for payroll, taxation, superannuation, immigration, security, or employment compliance.
3.4 Technical and System Information
IP addresses, device identifiers, browser details, operating systems, access logs, authentication records, support diagnostics, system configurations, service tickets, error reports, and security events.
3.5 Project and Operational Data
Information provided through client-managed ERP, CRM, inventory, accounting, payroll, HR, customer service, and other business systems. This may include personal information about a client's customers, staff, suppliers, and other contacts.
3.6 Financial and Transaction Information
Billing addresses, invoices, payment references, transaction histories, and other information required to administer commercial relationships. Payment card details may be handled by authorised third-party payment providers rather than stored directly by Remote Shifts.
3.7 Communications and Collaboration Information
Emails, support requests, meeting records, messages, task updates, project correspondence, and recorded calls or meetings where lawful and appropriately notified.
3.8 Sensitive Information
We seek to avoid collecting sensitive information unless reasonably necessary and legally permitted. Where sensitive information is required, such as certain health, identity, or employment-related information, we will apply additional protections and obtain consent where required.
4. How We Collect Information
We may collect information:
Directly from individuals through enquiries, forms, applications, contracts, and correspondence.
From authorised representatives of business clients.
Through our website, cookies, analytics, and related technologies.
Through recruitment and employment processes.
Through authorised access to client systems and databases.
From service providers, business partners, and professional advisers.
From publicly available business and professional sources where lawful.
Through operational, technical, and security monitoring associated with services we provide.
Where reasonably practicable, we collect personal information directly from the individual concerned. We will provide appropriate collection notices where required, including information about the purposes of collection and relevant disclosures.
Individuals may contact us anonymously or using a pseudonym where lawful and practicable. However, certain services, contracts, employment arrangements, and security procedures require identity verification.
5. Purposes for Which We Use Information
We collect and use information for legitimate business and service-delivery purposes, including:
Responding to enquiries and preparing proposals.
Entering into and administering contracts.
Delivering managed IT and technical support services.
Building, operating, maintaining, and improving business software.
Providing ERP, CRM, automation, and AI solutions.
Coordinating projects, tasks, support tickets, and service requests.
Providing remote staffing and managed operational support.
Processing invoices, payments, and financial records.
Recruiting, onboarding, managing, and paying personnel.
Protecting systems against unauthorised access, misuse, and cyber threats.
Meeting legal, regulatory, taxation, and contractual obligations.
Maintaining business continuity and operational records.
Sending relevant business communications and marketing where permitted.
Investigating complaints, security incidents, and contractual disputes.
We will not use or disclose personal information for unrelated purposes unless permitted or required by law, or the individual has provided appropriate consent.
6. Client Data and Data Processing Responsibilities
Remote Shifts may process personal information on behalf of clients when providing managed services, software support, remote staffing, and business process management. Where a client determines the purposes and means of processing, that client generally retains responsibility for its own privacy notices, collection authority, and instructions. Remote Shifts will:
Process client data only for authorised service purposes.
Restrict access according to operational requirements.
Require personnel to observe confidentiality obligations.
Apply reasonable technical and organisational safeguards.
Avoid unauthorised disclosure or secondary use.
Assist clients with reasonable data protection requests as agreed.
Notify relevant clients of identified security incidents in accordance with applicable contractual and legal requirements.
Return, delete, or securely retain information at the end of an engagement in accordance with the contract and applicable law.
Client data remains subject to the client's applicable rights and contractual arrangements. Remote Shifts does not acquire ownership of client business data merely by providing services.
7. Overseas Processing and Remote Staffing
Remote Shifts is based in Australia and may use authorised overseas personnel, related businesses, contractors, and technology providers to deliver services. Our offshore delivery operations may include personnel located in Pakistan. Depending on the relevant project, authorised providers or recipients may also be located in other countries. Personal information may be accessible to authorised overseas recipients where necessary for:
Remote technical support.
Software development and testing.
Managed business operations.
Project coordination.
Helpdesk and customer support.
Infrastructure administration.
Remote staffing services.
Cloud hosting and third-party integrations.
Before disclosing personal information overseas, we will assess applicable legal obligations and take reasonable steps required by Australian Privacy Principle 8 where it applies.
Depending on the circumstances, safeguards may include confidentiality agreements, data processing contracts, restricted access, encryption, multifactor authentication, security training, and contractual requirements governing onward disclosure. Overseas recipients may be subject to laws different from those in Australia.
Where Remote Shifts is accountable under Australian privacy law for the conduct of an overseas recipient, that accountability is not removed merely because processing occurs outside Australia. We will identify relevant overseas processing arrangements to clients where required by law or contract.
8. Data Hosting and Storage Locations
Information may be stored in:
Australian or international cloud infrastructure.
Client-selected hosting environments.
Authorised business software platforms.
Managed databases and backup systems.
Secure document management systems.
Approved business communication platforms.
Data hosting locations depend on the services purchased, client requirements, and the relevant service provider. Remote Shifts does not guarantee Australian-only data residency unless expressly agreed in writing.
Where a client requires Australian data residency, dedicated infrastructure, restricted international access, or additional security controls, those requirements must be documented in the applicable service agreement.
9. Information Security
We aim to implement reasonable security measures appropriate to the sensitivity of information and the risks associated with the services provided. These may include:
Role-based access controls.
Multifactor authentication.
Encryption in transit and, where supported and appropriate, at rest.
Secure credential management.
Network security and firewall controls.
System monitoring and access logging.
Security updates and vulnerability management.
Controlled software deployment procedures.
Backup and recovery arrangements.
Staff confidentiality and security training.
Access revocation following employment or contractual changes.
Incident investigation and response procedures.
Restrictions on unauthorised downloading, copying, and disclosure of client data.
Security arrangements may vary according to the services, systems, and infrastructure controlled by Remote Shifts or the client. No internet-based system can be guaranteed completely secure. We do not represent that every system is immune from cybersecurity threats, outages, or unauthorised activity.
10. Data Breaches and Incident Response
Remote Shifts will maintain procedures for identifying, assessing, containing, investigating, and responding to suspected information security incidents. Where a suspected eligible data breach arises, we will assess applicable obligations under the Notifiable Data Breaches scheme and other relevant laws.
Where legally required, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC). Where an incident involves information processed on behalf of a client, we will coordinate with that client in accordance with applicable contracts and legal responsibilities. We may engage cybersecurity specialists, legal advisers, infrastructure providers, or relevant authorities to investigate and respond to incidents.
11. Artificial Intelligence and Automated Processing
Remote Shifts may develop, configure, integrate, or operate AI-assisted tools for business automation, customer service, analytics, document processing, workflow management, and technical support. Where personal information is processed using AI systems, we will seek to:
Limit processing to authorised purposes.
Apply appropriate access and confidentiality controls.
Consider privacy and security risks before implementation.
Use approved technology providers.
Avoid unnecessary disclosure of sensitive information.
Provide appropriate human oversight for consequential decisions.
Inform clients of material third-party AI processing arrangements where required.
We will not intentionally use confidential client data to train public or third-party AI models without appropriate authorisation and a lawful basis. AI outputs may be inaccurate or incomplete and should be reviewed before use in important business, employment, legal, financial, or other consequential decisions.
12. Website Cookies and Analytics
Our website may use cookies and similar technologies for essential functionality, security, preferences, performance analysis, and marketing. These technologies may collect information about website interactions, devices, browsers, and referral sources. Where legally required, we will obtain consent before using non-essential tracking technologies.
Visitors may control cookies through their browser settings and any consent controls made available on our website. Disabling certain cookies may affect website functionality. We will provide additional information about specific analytics and advertising technologies where appropriate.
13. Marketing Communications
We may use business contact information to communicate about services, proposals, business developments, and relevant promotional offers. Electronic commercial messages will be sent in accordance with applicable Australian laws, including the Spam Act 2003 (Cth). Where required, marketing communications will identify the sender and provide a functional unsubscribe mechanism.
Individuals may opt out of direct marketing by contacting [email protected] or following applicable unsubscribe instructions. We will respect lawful requests to stop direct marketing.
14. Third-Party Service Providers
We may engage third-party providers for hosting, communications, payments, analytics, recruitment, collaboration, security, accounting, and software infrastructure. Providers may include cloud platforms, email services, development platforms, AI providers, and other software vendors.
We will assess relevant privacy and security requirements and use appropriate contractual safeguards where necessary. Third-party websites and platforms may operate under their own privacy policies. We encourage users to review those policies.
15. Employee and Contractor Information
We collect and manage workforce information for recruitment, engagement, administration, remuneration, attendance, performance management, compliance, and business security. Personnel may be subject to lawful and appropriately notified monitoring of company systems, business communications, access logs, and work-related activities.
Workplace monitoring will be conducted consistently with applicable laws, including relevant NSW workplace surveillance requirements. The employee records exemption under Australian privacy law may apply to certain employment records, but does not automatically cover all applicant, contractor, or client-related information. We will manage employment information in accordance with applicable privacy, employment, and recordkeeping obligations.
16. Retention and Disposal
We retain personal information only for as long as reasonably required for authorised business purposes, legal obligations, dispute management, security, and contractual requirements. Retention periods may vary according to the type of information and applicable law.
When information is no longer required, and no legal or contractual obligation requires retention, we will take reasonable steps to destroy or de-identify it securely. Backup copies may remain temporarily in controlled systems in accordance with documented retention and recovery processes.
17. Access to and Correction of Personal Information
Individuals may request access to personal information held about them or request correction of information that is inaccurate, incomplete, irrelevant, misleading, or out of date. Requests should be submitted to:
Email: [email protected]
Subject: Privacy Access or Correction Request
We may require reasonable identity verification before disclosing or changing information. We will respond within a reasonable period and explain any lawful reason for refusing a request. Where information is processed solely on behalf of a client, we may direct the request to the responsible client or coordinate an appropriate response.
18. Privacy Complaints
Individuals who believe their personal information has been mishandled may submit a written complaint to:
Privacy Officer
REMOTE SHIFTS GROUPS PTY LTD
Email: [email protected]
Please provide sufficient information to identify the concern and allow us to investigate. We aim to acknowledge privacy complaints within five business days and provide a substantive response within 30 calendar days where reasonably practicable. Complex matters may require additional time, in which case we will communicate relevant updates. If a complaint remains unresolved, individuals may be entitled to contact the Office of the Australian Information Commissioner:
Website: https://www.oaic.gov.au
19. International Privacy Requirements
Where Remote Shifts processes personal information subject to privacy laws outside Australia, additional requirements may apply. These may include the European Union General Data Protection Regulation, the United Kingdom GDPR, or other applicable privacy legislation.
Any additional requirements concerning lawful processing, data subject rights, international transfers, retention, or processor obligations will be addressed where applicable through contractual arrangements and operational controls. This policy does not imply that every international privacy regime applies to every Remote Shifts engagement.
20. Children and Vulnerable Individuals
Our services are primarily intended for businesses and professional users. We do not knowingly seek to collect personal information directly from children through our corporate website unless legally permitted and necessary for an authorised service. Where client systems contain information relating to children or vulnerable individuals, we will apply appropriate contractual, privacy, and security protections.
21. Changes to This Policy
We may update this policy to reflect changes in legislation, business operations, technology, or privacy practices. The current version will be published on our website with its effective date. Where material changes require additional notice or consent under applicable law, we will take appropriate steps.
22. Governing Law
This policy is governed by applicable laws of the Commonwealth of Australia and New South Wales, without limiting mandatory privacy protections that apply in other jurisdictions.
23. Contact Information
For privacy questions, requests, complaints, or information about our data handling practices, please contact:
REMOTE SHIFTS GROUPS PTY LTD
ACN: 701 901 420
ABN: 61 701 901 420
Sydney, New South Wales, Australia
Email: [email protected]
Phone: (02) 9072 9454
Website: https://remoteshifts.com
End of Privacy Policy — Version 1.0