Privacy notice

Who is responsible

Kcg corporate group pty ltd is the data controller for account enquiries, account administration and operation of Workplace Strengths Profile. When an employer or recruiter arranges an assessment, that organisation may also be responsible for its own recruitment processing and should provide its own privacy notice. Contact us using our contact page to ask about your information.

Information and purposes

• Name, email, company, account identifiers and enquiry messages: to arrange account access, respond to requests and provide support.
• Authentication information: to secure accounts. Sign-in credentials are handled by the authentication service; never include passwords in enquiries.
• CVs, work history, role information, assessment responses, comments and reports: to deliver the assessments and requested document services, support review and enable authorised sharing.
• Device, browser, IP address, access history, usage and error information: to maintain operation, diagnose problems, prevent fraud and protect the service.
• Order identifiers and payment status, when purchases are connected: to record billing and provide purchased access. Paddle processes checkout payment information.

Provide only information needed for the service. Avoid unnecessary sensitive information about yourself or others in CVs and free-text answers.

Free career snapshot and optional marketing

Your personal account can save your name, company, CV, career goals and workplace preference answers. Career goals can include your reason for seeking a role, ideal role, location, preferred work arrangement, timeframe and voluntarily supplied salary information. Current and desired salary answers are optional. We use this information to create your requested snapshot and five CV document recommendations; salary information is not used to score workplace preferences.

CV content and selected career-goal context may be processed by an AI-assisted service to produce document recommendations. When you submit a CV, you are asked to agree that we may share it with third-party organisations within the Kcg corporate group to help open opportunities for you, and make it available to recruitment organisations and potential employers. We record your agreement with a timestamp and the notice version. Authorised platform administrators may also review saved submissions to administer the service. Account creation and assessment processing do not constitute marketing consent.

Career tips and offers from Kcg corporate group pty ltd require a separate optional opt-in. You can withdraw it in your saved snapshot. We do not upload CVs, salary answers or assessment results to advertising platforms as part of this flow. Contact us to request deletion of your personal snapshot or account.

Legal bases and use

Where a legal basis is required, we rely on performance of a contract to provide services, legitimate interests for security and support, consent where requested for contact or optional processing, and legal obligations for required records. We do not use assessment reports to make automated hiring decisions.

Sharing and international processing

Information may be processed by service providers for hosting, authentication, private file storage, AI-assisted processing where enabled, and support or diagnostics. Paddle receives information needed for sale of the product, payments, invoicing, tax compliance and purchase management. We may also disclose information to professional legal or accounting advisers, and authorities where required by law.

Candidate reports are available to authorised account members and recipients of valid report links. CV claims and AI interpretations are not independently verified. Service providers may process information outside Australia; privacy protections may differ. If applicable UK or EEA law requires transfer safeguards, we will use an applicable adequacy arrangement or contractual safeguards.

Retention

Assessment records, CVs and reports are subject to the requesting organisation's configured retention period and deletion process. Contact the organisation or us for the period applicable to your assessment. Account enquiries are kept while account setup or support is being handled and for any necessary follow-up. Account, transaction and security records are retained only as needed for the service, legal obligations and disputes, then deleted or anonymised when no longer required.

Security

We use appropriate technical and organisational measures, including encrypted connections, private file storage, account access controls and organisation-scoped permissions. Report links can expire or be revoked. No transmission or storage system can be guaranteed completely secure.

Your rights

You may request access to or correction of personal information, and ask about deletion, retention, consent withdrawal or a privacy complaint through our contact page. We may need to verify your identity. Some records may need to be retained to meet legal requirements. If your assessment was arranged by an organisation, we may direct recruitment-related requests to it.

Where applicable, UK and EEA residents have rights to erasure, restriction, portability, objection and withdrawal of consent, and to complain to a supervisory authority. We aim to respond to such requests within one month, subject to lawful extensions. Australian residents may also contact the Office of the Australian Information Commissioner.

Cookies and local storage

Essential cookies and browser storage support sign-in, session security and account navigation. Connected payment and sign-in services may use their own essential cookies. Optional analytics or marketing cookies, if introduced, will be disclosed and consent requested where required. You can manage cookies through your browser settings; blocking essential storage can prevent sign-in and checkout from working.