SiteCrew ID – Privacy Policy & User Consent Agreement
Effective date: 01.09.2026
Last updated: 01.09.2026
About SiteCrew ID
SiteCrew ID is a digital workforce credential platform designed to allow workers to securely store, manage, present and share work-related licences, cards, qualifications and credentials with employers, principal contractors, recruiters, site operators and other authorised organisations.
SiteCrew ID is operated by SiteCrew ID Pty Ltd ACN 701 297 243, ABN 64701 297 243 (“SiteCrew ID”, “we”, “us” or “our”).
We are committed to protecting the privacy and security of the personal information entrusted to us.
We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.
Information We May Collect
Account and identity information may include full name, date of birth, address, email, mobile num
ber, profile photograph, login and authentication information, and other information required to establish or verify identity.
Workforce credentials may include White Card details, High Risk Work Licence details, licence or credential numbers, issuing authority, licence classes, issue and expiry dates, training qualifications, tickets and competencies, certificates, industry accreditations, site-related qualifications, and copies or digital representations of relevant cards, licences or certificates.
Employment and company information may include current or prospective employer, labour hire company, contractor or subcontractor, worksite, position or occupation, employment or contractor relationship, and company representatives authorised to view particular credentials.
Verification information may include whether a credential has been verified, the source and date of verification, changes in credential status, expiry information and verification history.
Technical information may include device information, IP address, browser and operating system information, application usage information, login activity, security events, audit logs, sharing activity and diagnostic and performance information.
Why We Collect This Information
We may collect and use personal information where reasonably necessary to create and manage accounts, store and display credentials, assist workers to demonstrate qualifications and licences, enable authorised companies to view credentials, verify identity and credentials where available, assist with onboarding and mobilisation, provide workforce credential visibility, notify users about expiry or renewal, maintain security, prevent fraud, maintain audit records, provide support, improve the service, meet legal requirements, and protect the legitimate interests of users and SiteCrew ID.
Worker Control and Sharing With Companies
A core principle of SiteCrew ID is that workers should be able to use their credentials across employers and worksites without unnecessarily supplying new copies of the same documents each time.
Where the platform allows it, a worker may authorise an employer, recruiter, contractor, principal contractor, site operator or other organisation to access specified credential information.
The information available to that organisation will depend on the permissions granted by the worker, the company’s access rights, the purpose for which access is provided, and any legal or regulatory requirements applying to the credential.
SiteCrew ID may maintain an audit record showing when credentials were viewed, shared, verified or updated.
Where technically available, workers may withdraw or modify future sharing permissions. Withdrawal of access will not necessarily remove information that an organisation has already lawfully obtained, downloaded or is required to retain.
Government-Issued Licence and Credential Numbers
Some information stored within SiteCrew ID may constitute a government-related identifier, including certain government-issued licence or credential numbers.
SiteCrew ID does not intend to adopt a government-issued credential number as its own universal identifier for a worker.
SiteCrew ID will only use or disclose government-related identifiers where permitted by applicable law, including where reasonably necessary for identity or credential verification or another legally permitted purpose.
A user’s consent does not override any legal restriction applying to the use or disclosure of a government-related identifier.
SiteCrew ID may assign its own internal account or user identifier for administration of the platform.
Credential Verification
SiteCrew ID may provide functionality that allows a credential to be uploaded by a worker, recorded from information supplied by a worker, confirmed by an authorised organisation, checked against an available authoritative source, or otherwise marked with a verification status.
Where applicable, SiteCrew ID will distinguish between information that has been provided by a user and information that has been independently verified.
SiteCrew ID does not guarantee that a credential remains valid merely because a copy is stored in the platform.
Workers remain responsible for maintaining any licence, qualification, card or credential required to perform their work.
Companies remain responsible for satisfying their own legal, workplace health and safety, employment, contractor management and site-access obligations.
Accuracy of Information
Users must take reasonable steps to ensure information supplied to SiteCrew ID is accurate, complete and current.
Workers should update SiteCrew ID when a licence or credential expires, is renewed, suspended, cancelled or replaced, or when relevant details change.
Where SiteCrew ID becomes aware that information may be inaccurate or out of date, we may request further information, flag the credential, restrict its display or take other reasonable action.
How We Store and Protect Information
SiteCrew ID takes reasonable technical and organisational measures to protect personal information against unauthorised access, misuse, interference, loss, alteration and unauthorised disclosure.
Security measures may include encryption, secure cloud infrastructure, authentication controls, role-based permissions, access logging, monitoring, backup systems, security testing and internal access controls.
No online system can be guaranteed to be completely secure. Users should also protect their login credentials and immediately notify SiteCrew ID of suspected unauthorised access.
Disclosure to Third Parties
SiteCrew ID may disclose personal information to employers authorised to access a worker’s credentials, labour hire businesses, contractors and principal contractors, authorised worksite operators, credential or training providers, government or regulatory bodies where permitted or required, identity or credential verification providers, cloud hosting and IT providers, security providers, professional advisers, payment providers where applicable, and other service providers required to operate SiteCrew ID.
We require service providers handling personal information on our behalf to manage that information appropriately.
We do not sell workers’ personal information to data brokers or unrelated third parties for their independent marketing purposes.
Overseas Storage and Disclosure
Some technology or service providers used by SiteCrew ID may store or process information outside Australia.
Current hosting/storage locations: Australia only.
Where personal information may be disclosed to an overseas recipient, SiteCrew ID will take reasonable steps required under applicable Australian privacy law in connection with that disclosure.
Notifications
SiteCrew ID may send operational notifications concerning credential expiry, credential verification, account security, company access requests, changes to credentials, platform functionality and other matters necessary to provide the service.
Marketing communications will be handled separately from essential operational notifications, and users will be provided with an appropriate way to opt out of marketing communications.
Automated Processing
SiteCrew ID may use software to assist with identifying credential expiry dates, detecting missing information, identifying potential inconsistencies, generating reminders, organising credentials and detecting security or fraud risks.
SiteCrew ID uses automated processing to verify certain user credentials and qualifications. The information processed may include identity information and details contained in or associated with construction industry credentials, including White Cards, High Risk Work Licences, qualifications, licences, tickets, competencies, issuing authority information, credential numbers, issue and expiry dates, and verification information obtained from issuing or authorised organisations.
Automated processing may be used to determine whether a credential can be verified as valid, current, expired, cancelled, suspended, unable to be verified, or otherwise meeting the applicable verification requirements.
The outcome of this automated verification may be displayed to the user and, where authorised by the user or otherwise permitted by law, to employers, prospective employers, labour hire providers, principal contractors or other organisations using SiteCrew ID.
SiteCrew ID's automated credential verification does not itself determine whether a person will be offered employment or engagement, terminated from employment, or permitted to enter or work at a particular workplace. Those decisions remain the responsibility of the relevant employer, contractor or other organisation.
Unless expressly stated otherwise, an automated flag or status within SiteCrew ID should not be treated as a substitute for a company’s own legally required assessment.
Data Retention
SiteCrew ID will retain personal information only for as long as reasonably necessary for providing SiteCrew ID, maintaining appropriate credential and audit records, security and fraud prevention, resolving disputes, complying with legal obligations and other permitted business purposes.
Where information is no longer required and there is no legal requirement to retain it, we will take reasonable steps to destroy or de-identify it.
Closing a SiteCrew ID account may not result in immediate deletion of all information where retention is reasonably required by law, security requirements, dispute resolution or legitimate recordkeeping requirements.
Accessing and Correcting Your Information
Users may request access to personal information SiteCrew ID holds about them and may request correction of information that is inaccurate, incomplete or out of date.
Many details may also be updated directly through the SiteCrew ID application.
Requests may be made by contacting:
Privacy Officer – SiteCrew ID Pty Ltd
We may need to verify identity before providing access to or changing personal information.
Data Breaches
SiteCrew ID maintains processes for identifying and responding to suspected data breaches.
Where a breach meets the legal requirements for notification under the Australian Notifiable Data Breaches scheme or another applicable law, SiteCrew ID will take the steps required by that law, which may include notifying affected individuals and the relevant regulator.
Complaints
If you believe SiteCrew ID has mishandled your personal information, please contact our Privacy Officer.
We will acknowledge your complaint, investigate it appropriately, respond within a reasonable timeframe and take appropriate corrective action where required.
If you are dissatisfied with our response and the Privacy Act applies, you may have the right to raise the matter with the Office of the Australian Information Commissioner (OAIC).
Changes to This Policy
SiteCrew ID may update this Privacy Policy when the platform changes, new credentials or functionality are introduced, our information handling practices change, or legal or regulatory requirements change.
The current version will display its effective date.
Where a change materially affects the way we use or disclose existing personal information, we will provide appropriate notification and obtain additional consent where required.
USER PRIVACY CONSENT
By creating and using a SiteCrew ID account, I acknowledge that:
-
I have been provided with access to the SiteCrew ID Privacy Policy.
-
I understand the types of personal and credential information SiteCrew ID may collect and hold.
-
I understand that SiteCrew ID may use my information to provide, secure and administer the credential platform.
-
Where I choose to share credentials with a company, I authorise SiteCrew ID to make the selected information available to that organisation in accordance with my permissions and applicable law.
-
I understand that certain government-issued credential numbers are subject to legal restrictions and will only be used or disclosed by SiteCrew ID where legally permitted.
-
I understand that withdrawing company access may not require a company to destroy information it has already lawfully obtained or is legally required to retain.
-
I understand that storing a credential within SiteCrew ID does not itself guarantee that the credential remains valid, current or sufficient for a particular job or worksite.
-
I understand that employers and other organisations remain responsible for their own compliance, verification and site-access decisions.
-
I understand that SiteCrew ID may contact me regarding credential expiry, account security, verification and other operational matters.
-
I may contact SiteCrew ID to request access to or correction of my personal information or to raise a privacy complaint.
By accessing or using the SiteCrew ID website and/or APP, you acknowledge that you have read and understood, and agree to be bound by, the SiteCrew ID Terms of Use. Your use of the website and/or APP also acknowledges your understanding of and acceptance of the SiteCrew ID Privacy Policy and the authorisations described above, to the extent applicable. If you do not agree to these terms or authorisations, you should not access or use the SiteCrew ID website and/or APP.