Privacy Policy

1. Information We Collect

We collect personal information that you provide to us directly and information that is automatically collected when you use the App.

1.1 Information You Provide

For All Users:

• Account Information: Name, email address, password, phone number
• Profile Information: Profile photo, bio, location preferences (state/city)
• Communication Data: Messages sent through the App, support inquiries, feedback

For Professionals (Radiologists, Sonographers, Radiographers, Nurses):

• AHPRA Registration: AHPRA registration number, registration type, expiry date
• Professional Details: Qualifications, certifications, years of experience, specialties, modalities
• Work Preferences: Preferred locations, availability, shift patterns, employment type preferences (locum, part-time, permanent)
• Employment History: Previous employers, positions held, dates of employment (optional)
• References: Contact details for professional referees (optional)

For Businesses (Practices and Imaging Centres):

• Business Details: Business name, ABN/ACN, address, contact person, business type
• Job Listings: Job descriptions, requirements, locations, compensation details
• Payment Information: Billing details for Ad Credits (processed securely by third-party payment providers)

1.2 Automatically Collected Information

When you use the App, we may automatically collect:

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: Pages viewed, features used, time spent on the App, search queries, clicks
• Location Data: Approximate location based on IP address or device settings (only if you grant permission)
• Log Data: IP address, browser type, access times, crash reports, error logs

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 To Provide and Improve the App

• Create and manage your account
• Display your profile to relevant users (Professionals to Businesses and vice versa)
• Enable job listings, applications, and matching between Professionals and Businesses
• Facilitate in-app messaging and communication
• Process payments for Ad Credits
• Provide customer support and respond to inquiries
• Improve App functionality, features, and user experience
• Conduct analytics and research to understand how users interact with the App

2.2 For Verification and Safety

• Verify AHPRA registration and professional credentials (for Professionals)
• Verify business legitimacy (for Businesses)
• Detect, prevent, and investigate fraud, abuse, or violations of our Terms and Conditions
• Ensure compliance with legal obligations and regulatory requirements

2.3 To Communicate With You

• Send notifications about job matches, applications, and messages
• Provide updates about the App, new features, or changes to policies
• Send marketing communications (only with your consent, and you may opt out at any time)

2.4 For Legal and Compliance Purposes

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, and safety, and that of our users
• Resolve disputes and enforce our Terms and Conditions

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

3.1 With Other Users

• Professionals: Your profile (name, photo, professional details, AHPRA registration, experience, preferences) is visible to Businesses searching for or receiving applications from you.
• Businesses: Your business profile and job listings are visible to Professionals searching for opportunities.
• Messages: Messages sent through the App are shared with the intended recipient.

3.2 With Service Providers

We engage third-party service providers to help us operate the App. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information. Service providers include:

• Supabase: Cloud hosting, database management, authentication, and backend services
• Payment Processors: Secure processing of Ad Credit purchases (e.g., Stripe, PayPal)
• Email Services: Sending account-related and transactional emails
• Analytics Providers: App performance monitoring and usage analytics
• Cloud Storage: Secure storage of profile photos and documents

3.3 For Legal Reasons

We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect the rights, property, or safety of Aria Infotech Pty Ltd, our users, or the public
• Investigate and prevent fraud, security breaches, or illegal activity
• Respond to claims of violation of third-party rights

3.4 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and provide you with choices regarding your information.

3.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4. Data Security

We implement reasonable technical, administrative, and physical safeguards to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest (via HTTPS and database encryption)
• Secure authentication and password hashing
• Regular security audits and vulnerability assessments
• Access controls limiting employee and contractor access to personal information
• Monitoring for suspicious activity and unauthorised access attempts

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

5. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

5.1 Active Accounts

While your account is active, we retain your profile information, messages, job listings, and application history to provide you with ongoing services.

5.2 Closed or Deleted Accounts

If you delete your account, we will:

• Remove your profile from public view immediately
• Delete your personal information within 90 days, except where retention is required by law
• Retain certain information (e.g., transaction records, legal claims, fraud prevention) as necessary for compliance and business purposes

5.3 Legal and Compliance Retention

We may retain certain information longer if required to:

• Comply with legal, accounting, or regulatory requirements (e.g., tax records, employment records)
• Resolve disputes or enforce our agreements
• Prevent fraud or abuse

6. Your Privacy Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the following rights regarding your personal information:

6.1 Access Your Information

You have the right to request access to the personal information we hold about you. You can view and update most information directly through the App. For additional access requests, contact us at hello@radroster.com.au.

6.2 Correct Your Information

You have the right to request correction of inaccurate or incomplete personal information. You can update your profile details directly in the App. For other corrections, contact us.

6.3 Delete Your Information

You have the right to request deletion of your personal information. You can delete your account through the App settings or by contacting us. Note that we may retain certain information as required by law or for legitimate business purposes.

6.4 Restrict Processing

You can request that we restrict the processing of your personal information in certain circumstances, such as while we verify the accuracy of your information or assess your request to delete it.

6.5 Object to Processing

You can object to certain types of processing, such as direct marketing. You can opt out of marketing emails by clicking "unsubscribe" in any email or by contacting us.

6.6 Withdraw Consent

Where we rely on your consent to process your information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before your withdrawal.

6.7 Lodge a Complaint

If you believe we have breached the Australian Privacy Principles, you can lodge a complaint with us at hello@radroster.com.au. We will investigate and respond to your complaint within a reasonable timeframe.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

7. Cookies and Tracking Technologies

The App may use cookies, pixels, and similar tracking technologies to enhance your experience, analyse usage, and deliver personalised content. We use:

• Essential Cookies: Necessary for the App to function (e.g., authentication, session management)
• Analytics Cookies: To understand how users interact with the App and improve performance
• Preference Cookies: To remember your settings and preferences

You can control cookies through your device settings. Note that disabling certain cookies may affect the functionality of the App.

8. Third-Party Links and Services

The App may contain links to third-party websites or integrate with third-party services (e.g., payment processors, cloud storage). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with your information.

8.1 Supabase

We use Supabase for backend services, including database management, authentication, and cloud storage. Supabase processes your information on our behalf and is subject to its own privacy policy. For more information, visit supabase.com/privacy.

9. Children's Privacy

RadRoster is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your personal information may be stored and processed on servers located outside of Australia, including in the United States and other countries where our service providers operate. These countries may have different data protection laws than Australia.

We take steps to ensure that your information receives an adequate level of protection, including:

• Using service providers that comply with recognised data protection standards
• Implementing contractual safeguards (e.g., standard contractual clauses)
• Ensuring data is encrypted in transit and at rest

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the App's functionality. When we make material changes, we will:

• Notify you via email or in-app notification
• Update the "Last Updated" date at the top of this policy
• Provide you with the opportunity to review the changes before they take effect

Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Aria Infotech Pty Ltd
ACN: 696233931
Email: hello@radroster.com.au
Website: radroster.com.au

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.

13. Australian Privacy Principles Compliance

This Privacy Policy is designed to comply with the 13 Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Below is a summary of how we comply with each principle:

APP	Principle	How We Comply
APP 1	Open and transparent management of personal information	We make this Privacy Policy publicly available and easy to understand
APP 2	Anonymity and pseudonymity	Where practicable, we allow users to interact anonymously, though account creation requires identification for verification purposes
APP 3	Collection of solicited personal information	We only collect information that is reasonably necessary for our functions and activities
APP 4	Dealing with unsolicited personal information	If we receive unsolicited information, we assess whether we could have collected it under APP 3 and destroy it if not permitted to retain it
APP 5	Notification of collection	We notify you of what information we collect, why, and how we use it at the point of collection
APP 6	Use or disclosure of personal information	We only use or disclose your information for the purposes for which it was collected or related purposes
APP 7	Direct marketing	We provide opt-out options for all marketing communications and do not use sensitive information for marketing
APP 8	Cross-border disclosure	We ensure overseas recipients handle personal information in compliance with the APPs or take reasonable steps to ensure compliance
APP 9	Adoption, use, or disclosure of government-related identifiers	We do not use government identifiers (e.g., Medicare numbers) except where required by law
APP 10	Quality of personal information	We take reasonable steps to ensure personal information is accurate, up to date, complete, and relevant
APP 11	Security of personal information	We implement reasonable security measures to protect personal information from misuse, interference, loss, and unauthorised access
APP 12	Access to personal information	We provide you with access to your personal information upon request and allow you to view and update it through the App
APP 13	Correction of personal information	We allow you to correct inaccurate or incomplete information and provide mechanisms to do so through the App