Privacy Policy

Our commitment

Kmart handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Information we hold

We hold the recruitment information described in our Privacy Collection Notice, together with technical records such as the time of your submission and a hashed value derived from your network address, which we use only for rate limiting and abuse prevention.

Security

• Encryption in transit (TLS) and at rest.
• Row-level security, with access granted on a least-privilege basis.
• Multi-factor authentication required for all administrator accounts.
• Logging of administrator access to candidate records.
• Rate limiting, bot protection, and file type, size and content checks on uploads.

Data breach response

We maintain an incident response process. If an eligible data breach occurs, we will contain and assess it, notify affected individuals, and notify the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

Access, correction and complaints

You can request access to, correction of, or deletion of your personal information through our data request page. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Overseas handling

We use Australian hosting regions wherever our infrastructure provider supports them. If any processing occurs outside Australia, we require contractual protections consistent with the Australian Privacy Principles.