Privacy Policy & Candidate Data Collection Notice

Effective Date: September 2026

Operating Entity: Zinnaghl Boutique Pty Ltd (trading as NexusCareer)

Compliance Framework: Australian Privacy Principles (APPs), Privacy Act 1988 (Cth) & Fair Work Act 2009 (Cth)

Zinnaghl Boutique Pty Ltd ("NexusCareer", "we", "us", or "our") is dedicated to safeguarding the personal privacy of all job applicants, candidates, and individuals utilizing our recruitment and talent intake portal. We manage all personal and sensitive information in strict compliance with the Australian Privacy Principles (APPs) contained in Schedule 1 of the Privacy Act 1988 (Cth).

This Candidate Data Collection Notice explains how we collect, hold, utilize, evaluate, disclose, and securely retain your information throughout the pre-employment assessment and recruitment lifecycle.

When you interact with our candidate portal, save an application draft, or submit an employment application, we may collect and process the following categories of information:

• Contact & Legal Identification: Full legal name, residential address and suburb, personal email address, Australian mobile telephone number, and Australian Right-to-Work entitlements (e.g., Australian Citizen, Permanent Resident, or Visa category with VEVO verification authorization).
• Transport, Driving & Licencing Data: Driver’s licence status, state of issue, licence classification (including Class C Car, Light Rigid LR, Medium Rigid MR, Heavy Rigid HR, Heavy Combination HC, Multi-Combination MC), and disclosures regarding active driving suspensions, demerits, or disqualifications necessary for assessing logistical safety and operational duty requirements.
• Workplace Licences & Certifications: High-risk work licences (including Forklift LF, Order Picker LO), Construction Induction White Card, and job-relevant trade accreditations.
• Employment History & Availability: Current employment status, notice period constraints, start-date availability, shift flexibility (including early starts, late finishes, and weekend work), and voluntary disclosures regarding concurrent engagements (including secondary contracts or subcontracting).
• Psychometric & Behavioural Profile Responses: Responses to our 24 forced-choice behavioural indicators (DISC profiling) measuring workplace communication patterns, operational pace, resilience under pressure, and team alignment.
• Situational Challenge & Written Responses: Your written responses to role-specific situational scenarios designed to evaluate problem-solving methodologies, customer care, or logistics crisis resolution.
• Curriculum Vitae & Supporting Documentation: Uploaded digital resumes/CVs, educational credentials, written references, and professional certifications.
• Mutual Obligation & Agency Verification: For job seekers registered with Workforce Australia, Services Australia (Centrelink), or approved Employment Services Providers (ESPs), registration identifiers and mutual obligation proof receipts.
• Technical & Session Metadata: Temporary 6-digit draft recovery authentication tokens, submission timestamps, device/browser user-agent strings, and anonymous step-completion drop-off telemetry.

We collect and process your personal and sensitive data exclusively for legitimate recruitment, employment assessment, and statutory compliance purposes, including:

1. 1
   Candidate Suitability Assessment: Evaluating your professional competencies, practical experience, logistical suitability, and behavioural style against role benchmarks.
2. 2
   Work Entitlement Verification: Confirming your legal authority to work lawfully within the Commonwealth of Australia under the Migration Act 1958 (Cth).
3. 3
   Operational & Safety Compliance: Ensuring compliance with workplace health and safety legislation, transport chain of responsibility, and vehicle operational requirements.
4. 4
   Candidate Communications: Contacting you regarding application progress, interview invitations, status updates, and potential employment offers.
5. 5
   Mutual Obligation Documentation: Generating formal verification receipts for eligible job seekers fulfilling Centrelink or Workforce Australia job-search quotas.
6. 6
   Talent Pool Consideration: Assessing your suitability for alternate or upcoming employment opportunities within Zinnaghl Boutique Pty Ltd and client facilities (subject to your retention consent).

We are committed to ethical AI transparency and responsible algorithmic governance:

• Situational Scenario Formulation: Generative Artificial Intelligence (Google Gemini) may be utilized on-the-fly to generate realistic, role-specific situational challenges based on current logistics and customer service scenarios.
• Stylometric & Forensic Analytics: Candidate written submissions are analyzed using automated language processing tools to assess word count compliance, stylistic coherence, topical focus, and potential automated/synthetic script generation.
• Psychometric Indicator Scoring: Algorithmic calculation of DISC dimension ratios (Dominance, Influence, Steadiness, Conscientiousness) based on your selected questionnaire responses.
• STRICT HUMAN-IN-THE-LOOP GUARANTEE: Automated systems, psychometric scoring, and AI stylometrics operate exclusively as administrative decision-support aids for our hiring team. No candidate is automatically rejected, disqualified, or hired solely on the basis of an automated score or algorithmic output. Every application is subjected to human review and evaluation by our qualified recruitment team prior to any hiring decision.

We maintain strict technical and administrative safeguards to protect your personal information against unauthorized access, loss, misuse, modification, or disclosure:

• Security Standards: All data in transit is protected using Transport Layer Security (TLS 1.3), and all stored database records and uploaded documents are encrypted at rest using enterprise AES-256 encryption. Access is restricted to authenticated hiring personnel via multi-factor authentication.
• Lifecycle Expiration Windows:
• Incomplete Draft Applications: Drafts saved using our 6-digit email recovery code automatically expire and are irrevocably purged from active storage after forty-eight (48) hours.
• DISC Assessment Invitation Links: Dynamic assessment tokens sent to applicants remain valid for forty-eight (48) hours from issuance.
• Unprocessed Application Review Window: Unactioned applications are maintained in the active intake queue for an operational validity window of fourteen (14) days before archiving.
• Anonymous Abandonment Telemetry: Aggregated candidate drop-off metrics are retained for thirty (30) days before permanent automated deletion.
• Candidate Profiles & Uploaded Resumes: For unsuccessful candidates, application records, resumes, and psychometric scores are retained for a maximum of twelve (12) months from the date of submission for talent pooling and audit compliance, after which digital files are permanently deleted, unless a longer retention period is mandated by Australian taxation, workplace, or statutory record-keeping regulations.

We do not sell, rent, commercialize, or trade candidate personal information to any third parties. Your information is disclosed strictly on a confidential need-to-know basis to:

• Internal Hiring Managers & Operational Leadership: Authorized managers and interview panellists within Zinnaghl Boutique Pty Ltd.
• Secure Cloud Infrastructure Providers: Enterprise cloud database and hosting providers (e.g., Supabase, Google Cloud Platform, Vercel) operating with strict data processing covenants aligned with Australian Privacy Principle 8 (Cross-border disclosure).
• Employment Services Agencies & Government Authorities: Workforce Australia providers or Services Australia (Centrelink) upon formal candidate request or legal compliance.
• Background Checking Services: Accredited screening providers for National Police Checks or VEVO visa status checks, conducted exclusively with your prior written consent.

Under the Privacy Act 1988 (Cth), you possess enforceable legal rights regarding your personal information:

• Right to Access (APP 12): You have the right to request a copy of the personal information, assessment summaries, and documents we hold about you.
• Right to Correction (APP 13): If you discover that personal information we hold is inaccurate, out-of-date, incomplete, irrelevant, or misleading, you may request prompt rectification.
• Right to Erasure / Application Withdrawal: You may withdraw your application at any time prior to an employment offer and request that your candidate record, psychometric results, and resume be securely deleted from our databases.

If you have questions regarding this Privacy Policy, wish to exercise your statutory privacy rights, or wish to lodge a complaint regarding our management of your personal information:

• Primary Privacy Officer: privacy@zinnaghl.com
• Recruitment Operations: recruitment@zinnaghl.com
• Mailing Address: Privacy Officer, Zinnaghl Boutique Pty Ltd, NexusCareer Talent Operations, Adelaide SA 5000, Australia
• Response Commitment: We will acknowledge receipt of your complaint or enquiry within five (5) business days and provide a comprehensive written resolution within thirty (30) calendar days.

External Escalation to the OAIC

If you are dissatisfied with our response or believe your privacy has been breached under the Australian Privacy Principles, you have the right to lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001