Effective date: 1 June 2026
Version: 1.4
Entity: RSURED Pty Ltd (ABN 64 130 308 397) ("RSURED", "we", "us", "our")
RSURED respects your privacy and is committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, hold, use, disclose, and protect personal information through our website, marketing activities, business operations, and the operation of the RSURED enterprise compliance platform.
This policy applies to:
If you have questions about this policy, please contact our Privacy Officer at privacy@rsured.com.
The types of personal information we collect depend on how you interact with us. They may include the following.
The RSURED platform is used by our customers to manage compliance, safety, risk, training, contractor management, incident management, and related business processes. Our customers are typically organisations operating in industries such as mining, rail, construction, quarrying, ports, resources, government, and other high-risk or highly regulated sectors.
When our customers use the RSURED platform, the platform may hold personal information about their employees, contractors, subcontractors, visitors, trainees, and other individuals. This may include:
For information held in a customer’s RSURED tenant, our customer generally determines why the information is collected, how it is used, who may access it, and how long it must be retained. RSURED handles that information as a contracted service provider in accordance with our customer agreement, this Privacy Policy, and applicable privacy laws.
If you are an employee, contractor, or end user of one of our customers, that customer’s privacy policy, collection notices, workplace policies, and lawful directions may also apply to how your information is collected and used.
Some information handled through the RSURED platform may be sensitive information under the Privacy Act, including health information. This may include medical clearance information, fitness-for-duty information, injury details, rehabilitation information, return-to-work records, or other information relevant to workplace health and safety, compliance, or legal obligations.
We only collect or handle sensitive information where it is reasonably necessary for our functions or activities and where consent has been obtained, the collection is required or authorised by law, or another exception under applicable privacy law applies.
Where sensitive information is entered into the RSURED platform by or on behalf of a customer, the customer is responsible for ensuring that appropriate notices, consents, legal bases, and workplace processes are in place for that collection and use. RSURED handles that information in accordance with our customer agreement and applicable law.
We may collect personal information:
Where it is reasonable and practicable, we collect personal information directly from the individual concerned.
We collect, hold, use, and disclose personal information for purposes including:
We will not use or disclose personal information for a purpose other than the purpose for which it was collected unless the individual has consented, the use or disclosure is reasonably expected and related to the original purpose, or another exception under applicable privacy law applies.
We may send marketing communications about RSURED, our products, services, events, insights, and content where:
Every marketing email will include an unsubscribe option. You can also opt out at any time by emailing privacy@rsured.com. We will action opt-out requests promptly and at no cost to you.
Transactional, service, security, account, support, or platform-related communications may still be sent where they are necessary to provide, secure, or administer our services.
We may disclose personal information to:
We require service providers that handle personal information on our behalf to apply appropriate privacy, confidentiality, and security protections.
RSURED is an Australian business and our services are primarily provided from Australia. The RSURED platform is operated using technology and infrastructure licensed from iViis, together with third-party service providers used to support hosting, email delivery, security, support, analytics, integrations, and business operations.
Some personal information may be stored, processed, transmitted, or accessed from outside Australia where this is necessary to provide, support, secure, monitor, or improve our website, communications, platform services, or business operations.
Known examples include email delivery services, such as SendGrid/Twilio, which may involve processing or transmission of personal information outside Australia. Other service providers or subprocessors used by RSURED, iViis, or authorised integration partners may also process or access personal information from overseas locations.
The countries in which overseas recipients are located may vary depending on the service, customer configuration, support requirements, and the providers used from time to time. Where practicable, known overseas locations may include the United States and other countries where our service providers or their subprocessors operate.
Before disclosing personal information to an overseas recipient, or using a service provider that may process personal information overseas, we take reasonable steps to ensure appropriate privacy, confidentiality, and security protections are in place. These steps may include contractual obligations, data protection terms, security due diligence, access controls, and reliance on our platform provider’s applicable privacy and security commitments.
Further information about material overseas disclosures and service provider locations can be requested by contacting privacy@rsured.com.
We use third-party services to operate our website, business, communications, and platform services. The specific providers used may change from time to time.
Current categories of third-party services may include:
We take reasonable steps to ensure that third-party providers and subprocessors apply appropriate privacy, confidentiality, and security protections having regard to the nature of the information they handle.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure.
These steps may include:
No system is perfectly secure. If we become aware of an eligible data breach involving personal information, we will assess the incident and notify affected individuals and the Office of the Australian Information Commissioner where required by law.
We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected, including to provide our services, comply with legal and contractual obligations, resolve disputes, enforce agreements, and maintain business records.
When personal information is no longer required, we take reasonable steps to destroy or de-identify it.
For information held on behalf of customers within the RSURED platform, retention is generally governed by the customer agreement, the customer’s configuration and instructions, and the customer’s own data retention requirements. These requirements may be longer than RSURED’s own retention requirements due to workplace health and safety, mining, rail, training, employment, insurance, or other legal and operational record-keeping obligations.
Our website may use cookies and similar technologies to:
You can control cookies through your browser settings. Disabling cookies may affect the functionality of the website. Where required, we will request your consent before setting non-essential cookies.
The RSURED platform may use configured rules, workflows, compliance logic, alerts, dashboards, reports, and integrations to assist our customers to assess matters such as training status, competency status, site access eligibility, onboarding status, fitness-for-duty requirements, incident actions, corrective actions, audit findings, contractor compliance, and other workplace or operational requirements.
These outputs are based on customer-configured requirements, information entered into the platform, and information received from authorised integrations. Our customers remain responsible for determining how these outputs are used in their workplace, safety, compliance, legal, employment, and operational processes.
RSURED does not make employment, disciplinary, medical, legal, or site-access decisions on behalf of customers. We provide software and support services that assist customers to manage their own processes and obligations.
Under the Privacy Act, you may have rights to:
If the information you wish to access or correct is held within a customer’s RSURED tenant, such as your training, site access, incident, injury, contractor, or employment-related records, please contact that customer first. This will usually be your employer, principal contractor, site operator, or the organisation that provided you with access to the RSURED platform.
We will assist our customer to respond to access and correction requests where required and appropriate.
To exercise a right or make a request, contact privacy@rsured.com. We will respond within a reasonable period, generally within 30 days. We may need to verify your identity before acting on a request.
If you believe we have breached the Privacy Act, the Australian Privacy Principles, or this Privacy Policy, please contact our Privacy Officer at privacy@rsured.com with details of your concern.
We will acknowledge your complaint promptly and aim to resolve it within 30 days. If we need more time, we will let you know.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):
RSURED is based in Australia. If you access our website, communicate with us, or use services connected to RSURED from outside Australia, your personal information may be transferred to, stored, accessed, or processed in Australia.
Where additional privacy laws apply, additional terms, notices, or requirements may apply to the handling of your personal information.
Our website is intended for business users and is not directed at children.
The RSURED platform may, however, contain personal information about workers, contractors, trainees, apprentices, work experience students, or other individuals where that information is provided by our customers for workplace safety, compliance, training, onboarding, site access, or operational purposes.
Where information about a young person is handled through the platform, it is handled in accordance with our customer agreement, applicable law, and this Privacy Policy.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, service providers, or business operations.
The current version will be available on our website. The effective date at the top of this policy shows when it was last updated. Where changes are material, we may provide additional notice, such as by email, website notice, or platform notice.
Privacy Officer
RSURED Pty Ltd
Shop 6001 Robina Town Centre
19 Robina Town Centre Drive
Robina QLD 4226
Australia
Email: privacy@rsured.com
General enquiries: connect@rsured.com
