1. Introduction

ShiftMatch Pty Ltd ("we", "our", "us") operates the AzuShift mobile application (the "App") and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare staffing platform.

We are committed to protecting your privacy and complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using AzuShift, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register and use AzuShift:

• Identity Information: Full name, date of birth, profile photo
• Contact Information: Email address, phone number, residential address
• Professional Information:
  • AHPRA registration number and status
  • Professional qualifications and certifications
  • Work experience and employment history
  • Professional references
• Verification Documents:
  • Government-issued identification
  • Professional credential certificates
  • Police check/background check results
  • Working with Children Check (where applicable)
  • Vaccination records
• Financial Information: Bank account details for payment processing, tax file number (TFN)

2.2 Device Permissions and Data

Our App requests the following device permissions:

2.3 Automatically Collected Information

When you use our App, we automatically collect:

• Device information (device type, operating system, unique device identifiers)
• App usage data and analytics
• Log data (access times, pages viewed, app crashes)
• IP address

3. How We Use Your Information

We use your information to:

• Provide Services: Match you with healthcare facilities seeking locum workers, process shift bookings, and facilitate payments
• Verify Identity and Credentials: Confirm your professional qualifications, AHPRA registration status, and right to work
• Ensure Compliance: Meet healthcare industry regulations and facility requirements
• Process Payments: Pay you for completed shifts and generate tax documentation
• Communicate: Send booking confirmations, shift reminders, messages from facilities, and service updates
• Improve Services: Analyse usage patterns to enhance the App experience
• Safety and Security: Detect and prevent fraud, abuse, and security incidents
• Legal Obligations: Comply with applicable laws and regulations

4. How We Share Your Information

4.1 Healthcare Facilities

When you apply for or are booked for shifts, we share relevant professional information with facilities, including:

• Name and profile photo
• Professional qualifications and AHPRA status
• Credential verification status
• Ratings and reviews from previous shifts

4.2 Service Providers

We use trusted third-party services for:

• Cloud hosting and data storage (Amazon Web Services - Sydney region)
• Payment processing
• SMS and email communications
• Push notification delivery (Firebase Cloud Messaging)
• Error monitoring and analytics

4.3 Regulatory Bodies

We may disclose information to:

• AHPRA for credential verification
• Law enforcement when required by law
• Regulatory authorities investigating complaints

4.4 Legal Requirements

We may disclose information when required to:

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property

5. Data Storage and Security

5.1 Data Location

All personal data is stored exclusively in Australia (AWS Sydney region, ap-southeast-2) in compliance with Australian data sovereignty requirements.

5.2 Security Measures

We implement appropriate technical and organisational measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Secure password hashing (bcrypt)
• Access controls and authentication
• Regular security assessments
• Audit logging for sensitive data access

5.3 Data Retention

We retain your personal information for:

• Active accounts: As long as your account remains active
• Credential documents: 7 years after expiry (regulatory requirement)
• Financial records: 7 years (tax compliance)
• Shift records and timesheets: 7 years
• After account deletion: Anonymised data may be retained for analytics

6. Your Rights and Choices

Under the Australian Privacy Principles, you have the right to:

6.1 Access Your Information

You can request access to the personal information we hold about you by contacting us at privacy@azushift.com.au.

6.2 Correct Your Information

You can update most of your information directly in the App. For other corrections, contact us.

6.3 Delete Your Information

You can request deletion of your account and personal information. Note that:

• Some data must be retained for legal/regulatory compliance
• Anonymised data may be retained for analytics
• Data shared with facilities for completed shifts cannot be recalled

6.4 Opt-Out

You can:

• Disable push notifications in your device settings
• Unsubscribe from marketing emails
• Withdraw consent for optional data processing

6.5 Data Portability

You can request a copy of your data in a portable format.

7. Children's Privacy

AzuShift is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy in the App
• Sending you a notification
• Updating the "Last Updated" date

Your continued use of AzuShift after changes constitutes acceptance of the updated policy.

9. Contact Us

10. Consent

By creating an account and using AzuShift, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.