1. Overview

This Privacy Notice outlines how Expr3ss! collects, uses, stores, discloses, retains and protects personal information.

Expr3ss! Pty Ltd ("we", "us") is committed to protecting personal information in accordance with applicable privacy laws, including the Australian Privacy Act 1988 (Cth), the New Zealand Privacy Act 2020 and, where applicable, the European Union General Data Protection Regulation (GDPR).

2. Personal Information

We collect data directly from you or via third parties (with your consent or as permitted by law).

Expr3ss! collects only personal information that is reasonably necessary to support recruitment, hiring, compliance and related employment activities requested by employers.

Personal information may be collected directly from individuals or indirectly through employers, recruiters, referrals, job boards and other lawful sources.

Types include name, address, employment history, and sensitive data like health or cultural background when required.

3. Lawful Basis for Processing

• Legitimate interests: service provision, IT maintenance, analytics.

• Consent: required only for processing sensitive data such as health or visa status when legally necessary or not otherwise covered by legitimate interest or legal obligation.

• Legal obligations: compliance with Corporations Act or immigration law.

• Vital interests: emergency health or safety issues.

4. Data Use & Disclosure

We use data to:

• Provide and manage our recruitment services.

• Communicate with job applicants and employers.

• Improve site functionality and assess engagement.

We may also analyse assessment responses using statistical, algorithmic and AI-assisted models to generate recruitment insights.  These insights are intended to support human decision-making and do not automatically determine hiring outcomes.

Expr3ss! may use de-identified and aggregated information to improve platform functionality, assessment models, reporting, analytics and recruitment services.  This information is not used to identify individual applicants.

Disclosure may occur to:

• Technology service providers engaged by Expr3ss! solely to deliver and support our recruitment platform (under binding agreements).

• Employers you've applied to.

• Regulatory authorities if required.

5. Cross-Border Disclosures

Personal data may be transferred overseas, including to the United States, United Kingdom, and New Zealand.

Where personal information is transferred across borders, Expr3ss! takes reasonable steps to ensure it is protected in accordance with applicable privacy laws and contractual safeguards.

For EU residents, transfers occur only to jurisdictions with GDPR adequacy, or where suitable safeguards (e.g., SCCs) are in place.

6. Data Retention

Expr3ss! retains personal information only for as long as necessary to provide recruitment services, comply with legal obligations and support customer requirements.

Where a customer ceases using Expr3ss!, customer data is removed from active systems approximately 30 days unless a longer retention period is required by law or agreed with the customer.

Applicants may request access to, correction of, or deletion of their personal information.  Where an applicant requests deletion, Expr3ss! will work with the relevant employer to assess and process the request in accordance with applicable privacy laws and the employer's legal obligations.

Customers may also request deletion of applicant data held within their Expr3ss! environment, subject to any applicable legal or regulatory requirements.

After applicable retention requirements have been satisfied, information is securely deleted, anonymised or de-identified.

7. Data Security

• Encryption at rest and in transit.

• Password-protected access for authorised users.

8. Data Breaches

Handled per the Notifiable Data Breaches (NDB) Scheme and GDPR requirements. Individuals will be notified if a breach is likely to cause serious harm.

9. Rights of Individuals

All users may request access to, correction of, or deletion of their personal information, subject to applicable legal requirements.  Where applicable, additional rights may apply under local privacy laws, including the GDPR and the New Zealand Privacy Act 2020.

10. Cookies

Expr3ss! uses cookies and similar tracking technologies to enhance your browsing experience and gather usage data for internal analytics purposes. Cookies are small text files stored on your device when you visit our site.

We use cookies to:

• Maintain secure user sessions.

• Enable basic functionality of the site.

• Collect anonymised data about user interactions to help improve website performance, navigation, and content relevance.

• Remember user preferences (e.g., email address for future logins, if you enable that feature).

These analytics cookies do not collect information that personally identifies you. However, they may collect information about your browser type, device, pages visited, and actions taken on the site.

Cookie Choices

You may manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, although doing so may impact the functionality of our site.

11. Contact

Expr3ss! Privacy Officer
Expr3ss! Pty Ltd, Registered Office, Level 7, Aurora Place, 88 Phillip Street, Sydney NSW 2000 Australia
Gadigal, Eora Nation
Or use the contact form on our website at https://expr3ss.com/contact-us.