Privacy Policy

Go To Connexa is operated as an Australian business. For the purposes of this policy, references to "we", "us" and "our" mean the operator of the Go To Connexa platform, contactable at [email protected].

The type of personal information we collect depends on how you use the Platform:

We do not intentionally collect sensitive information (as defined by the Privacy Act, e.g. health information, criminal record, or racial or ethnic origin) unless you choose to include it in a resume, profile, or message you submit. Please avoid including sensitive information unless it is necessary and you consent to us handling it for the purpose you provided it.

We collect personal information directly from you when you register for an account, complete your profile, post or respond to a requirement, job listing, or quote, upload a document, send a message, contact our support team, or subscribe to a paid plan. We may also collect information automatically through your use of the Platform (such as log data and device information), and from third parties such as our payment processor (Stripe) and SMS provider (Twilio) where they provide us with confirmation of a transaction or verification event.

We collect, hold, and use personal information for the following purposes:

• To create and administer your account, and to verify your identity and mobile number.
• To operate the marketplace: matching venues with suppliers and job seekers, displaying requirements, quotes, listings, and applications to the relevant parties.
• To enable messaging and communication between users of the Platform in connection with a marketplace transaction.
• To process subscription payments, manage billing, and administer supplier subscription plans through Stripe.
• To send transactional communications, including SMS verification codes, account notifications, and updates about activity relevant to your account (e.g. a new quote, application, or message).
• To send service-related and, where you have not opted out, marketing communications about features, offers, or updates relevant to your account type.
• To maintain the security, integrity, and performance of the Platform, including detecting and preventing fraud, abuse, or breaches of our Terms of Service.
• To comply with our legal obligations and to respond to lawful requests from regulators or law enforcement.

We disclose personal information in the following circumstances:

• Other users of the Platform, as necessary for the marketplace to function. For example: a venue's requirement and business name are visible to suppliers who may respond with a quote; a job seeker's profile and application are visible to the venue they applied to; quote pricing between a venue and a supplier is visible only to those two parties.
• Service providers who help us operate the Platform, including our cloud hosting provider (Vercel), database provider (MongoDB Atlas), SMS verification provider (Twilio), and payment processor (Stripe). These providers are only permitted to use your information to provide services to us.
• Professional advisers, such as our legal, accounting, or technical consultants, where reasonably necessary.
• Regulators, courts, or law enforcement, where required or authorised by law.
• A purchaser, in the event of a sale, merger, or restructure of our business, subject to that party agreeing to handle your information consistently with this Privacy Policy.

We do not sell your personal information to third parties.

Some of our service providers store or process data outside Australia, including in the United States (for example, Stripe, Twilio, MongoDB Atlas, and Vercel may process or store data on servers located overseas). Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles, including relying on the providers' contractual privacy and security commitments.

We use a strictly necessary, HTTP-only authentication cookie to keep you signed in and to secure your session; this cookie does not track you across other websites. We do not currently use third-party advertising or analytics tracking cookies. Your browser may also store limited data locally (such as a display preference) to improve your experience. You can control cookies through your browser settings, though disabling essential cookies may prevent you from logging in.

We send SMS messages for account verification (one-time passcodes) as a necessary part of registering and securing your account. Where we send you marketing messages by email or SMS, we will only do so in accordance with the Spam Act 2003 (Cth) — with your consent (which may be inferred from your account relationship with us) and a functional unsubscribe/opt-out mechanism in every message. You can opt out of marketing communications at any time via the link in the message, your account notification settings, or by emailing [email protected]. You cannot opt out of essential transactional messages (such as verification codes or security alerts) while you maintain an active account.

We take reasonable technical and organisational steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include encrypting passwords using industry-standard hashing, restricting administrative access to personal information on a need-to-know basis, using encrypted connections (HTTPS/TLS) between your device and our servers, and relying on reputable infrastructure providers with their own security certifications. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as your account is active and for a reasonable period afterwards, to meet legal, accounting, dispute-resolution, or record-keeping obligations. When you delete your account, we deactivate and mark your account as deleted; some information may be retained in backups or archived records for a limited period, or where we are required to keep it by law (for example, financial records relating to subscription payments). You may request deletion or de-identification of your personal information at any time by contacting us — see "How to contact us" below — and we will action your request unless we have a legal basis to retain the information.

You have the right under APP 12 and APP 13 to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, out of date, incomplete, irrelevant, or misleading. Most account and profile information can be updated directly within your account settings. For any other access or correction request, contact us at [email protected] and we will respond within a reasonable period, generally within 30 days. We may need to verify your identity before actioning a request, and there is no charge for making a request.

The Platform is intended for users aged 16 and over. If you are between 16 and 18 years of age, you must have the consent of a parent or guardian to create an account and use the Platform, particularly where you are applying for hospitality roles as a job seeker. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us so we can delete it.

If we experience a data breach that is likely to result in serious harm to individuals whose personal information is involved, we will comply with our obligations under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

If you have concerns about how we have handled your personal information, please contact us first at [email protected] with details of your complaint. We will investigate and respond within a reasonable time, generally within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au or by calling 1300 363 992.

We may update this Privacy Policy from time to time to reflect changes to our practices or legal obligations. We will post the updated policy on this page with a revised "Last updated" date, and where changes are material, we will take reasonable steps to notify you (for example, by email or an in-app notice). Your continued use of the Platform after an update constitutes acceptance of the revised policy.

For any questions, requests, or complaints about this Privacy Policy or our handling of your personal information, please contact us at [email protected].