1. Who we are
This Privacy Policy applies to UMBRELLA TALENT Pty Ltd ("Umbrella Talent", "we", "us", "our"), an Australian-incorporated business with its principal office at Level 4, Heritage Lanes, 80 Ann Street, Brisbane QLD 4000, Australia.
Umbrella Talent provides business process outsourcing services. We handle personal information about three main groups: our clients (Australian businesses engaging our services), our talent (remote team members placed with clients), and visitors to our website at umbrellatalent.com.au.
2. The Australian Privacy Principles
We are bound by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy explains how we comply with each APP in our day-to-day operations.
3. What information we collect
From clients and prospects
- Name, role title, work email, phone, and company.
- Information about your business needs you share during a discovery call or assessment.
- Billing and engagement contract details once we begin work together.
From candidates and team members
- Contact details, identity documents, work history, references, qualifications, and CV.
- Bank and tax information necessary for payroll once engaged.
- Performance and HR records during your engagement with us.
From website visitors
- Aggregate analytics (page views, country, referrer) via Cloudflare Web Analytics — no individual identifiers.
- Information you voluntarily submit through forms (assessment, salary guide, contact, candidate application).
- Email engagement metrics if you opt in to our mailing list.
4. How we use it
- Service delivery: matching talent to client needs, payroll, HR, and ongoing engagement support.
- Communications: responding to enquiries, sending requested resources (e.g. the Salary Guide), and operational updates.
- Improvement: de-identified analytics to understand which content is useful and which isn't.
- Compliance: meeting our legal, regulatory, and audit obligations.
We do not sell personal information. We do not use behavioural advertising trackers that follow you across the web.
5. Where your information is stored
Personal information collected through this website and through our service operations is held primarily in Australian-hosted infrastructure. This is a deliberate architectural decision — we operate as a data-sovereignty-first business.
Some of our service providers operate from other jurisdictions (for example, HubSpot for CRM and email automation). Where personal information is processed by a service provider outside Australia, we ensure they are bound by contractual terms requiring at least equivalent protections under their own privacy regime.
Our infrastructure is independently audited under SOC 2 Type II and ISO/IEC 27001.
6. How we share information
We share personal information only in the following circumstances:
- With your explicit consent.
- With our staff and contractors on a need-to-know basis to deliver the services you've engaged us for.
- With trusted service providers (e.g. payroll, email delivery, CRM) under contractual confidentiality.
- Where required by Australian law, court order, or regulatory authority.
7. Cookies and analytics
Our website uses minimal cookies. We rely on Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors. Where we embed third-party widgets (such as a HubSpot meeting scheduler), those services may set their own cookies — refer to those providers' privacy policies.
8. How we keep your information secure
- Encryption in transit (TLS 1.2+) for all communications with our systems.
- Encryption at rest for personal information and CVs.
- Active Directory authentication and MFA for all internal access.
- Audit logging on every administrative action.
- Independent annual security audits (SOC 2 Type II, ISO/IEC 27001).
9. How long we keep it
We keep personal information only as long as we need it for the purposes set out above, or as required by Australian law.
- Client records: for the duration of the engagement plus seven years (tax and audit retention).
- Candidate records: up to two years after the last contact, unless you ask us to remove them sooner.
- Marketing contacts: until you unsubscribe, then permanently removed within 30 days.
10. Your rights
Under the Privacy Act 1988 you have the right to:
- Request access to the personal information we hold about you.
- Request correction of any inaccurate information.
- Request that we delete information we no longer need.
- Complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Contacting us
For any privacy enquiry — including requests to access, correct, or delete information — please contact our Privacy Officer:
Privacy Officer
Umbrella Talent Pty Ltd
Level 4, Heritage Lanes, 80 Ann Street
Brisbane QLD 4000, Australia
privacy@umbrellatalent.com.au
1300 557 770
12. Changes to this policy
We may update this policy from time to time. When we do, we update the "Last updated" date at the top. Material changes will be communicated to active clients and team members by email.