Privacy Policy
Contents
Version 1.1
Arkero provides a technology platform and remote staffing services for businesses. This Privacy Policy applies to our websites, contact and call-booking forms, the Arkero Platform, prospective and existing clients, client users, website visitors, applicants, candidates, Personnel, suppliers, service providers and other business contacts.
Arkero is committed to handling personal information in a transparent and responsible way and, where applicable, in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Privacy Act 2020 (New Zealand), and other privacy laws that apply to our activities.
1. At a glance
- We collect information that is reasonably necessary to operate Arkero, provide staffing and platform services, verify users and candidates, process payments, manage contracts, provide support, maintain security and meet legal obligations.
- Clients own their Client Data. Arkero uses Client Data only for the purposes described in this Privacy Policy, our Terms and Conditions, the Master Services Agreement and any applicable Personnel Engagement Schedule.
- Our current production technology providers include Vercel for frontend hosting and delivery, Supabase for backend services, database and storage, Airwallex for payment processing, and BoldSign for electronic documents and signatures. We may change or add service providers as our systems evolve.
- Personnel and authorised Arkero team members may access information from the Philippines where this is necessary to provide services. Information may also be processed in other countries where our technology providers or their subprocessors operate.
- Automated and AI-assisted tools may support screening, ranking, matching, security and workflow decisions. They are used to assist human decision-making, and this Policy explains the kinds of information and decisions involved.
- You may ask to access or correct personal information we hold about you, subject to applicable law.
2. What personal information means
Depending on the context, personal information may include contact details, identification information, employment history, account information, communications, payment information, online identifiers and other information connected with an individual.
Some information is treated as sensitive information under privacy law and receives additional protection.
3. The personal information we collect
- The specific information we collect depends on your relationship with Arkero:Candidates & Placed Talent: Full legal name, date of birth, residential address, email, telephone number, curriculum vitae, employment history, qualifications, identity documents (passport, government photo ID), tax identification numbers (TIN/IRD/TFN where applicable), bank account details for remuneration, reference checks, skills assessments, and time logging entries.
- Clients & Prospects: Business legal name, registration numbers (ABN/NZBN), authorized contact person details (name, business email, direct phone), billing addresses, payment methods, staffing role descriptions, timesheet review histories, and support communications.
- Site Visitors: IP addresses, browser specifications, operating system details, referral sources, duration of visits, and inquiries submitted via contact forms or calendar bookings.
4. How we collect personal information
We may collect personal information:
- directly from the individual
- through the Arkero website or Platform
- when an account is created by Arkero, a client administrator or the individual
- through forms, applications, interviews and communications
- through electronic contracts and documents
- from clients who provide information about authorised users, candidates or Personnel
- from recruitment platforms and job application services
- from referees or other persons nominated by an applicant
- from public business registers and publicly available professional information
- from identity verification, payment, security and technology providers
- from integrations that a client or user enables
- automatically through use of our website, Platform and security systems.
Where we collect personal information about an individual from another source, we will provide any notice required by applicable privacy law and take reasonable steps to ensure the collection is lawful and appropriate.
This Privacy Policy provides general information about Arkero's information-handling practices. Arkero may also provide a shorter collection notice at or before a particular collection, for example on a website form, application, interview, identity-verification workflow or account-registration screen. Those notices may provide additional details relevant to that collection.
5. Why we collect and use personal information
- We collect, hold, and process personal information strictly for legitimate business operations:Recruiting, vetting, interviewing, and presenting qualified candidates to prospective employers.
- Facilitating onboarding, employment contracts, and compliance management.
- Enabling daily work status reporting, time logging, and weekly timesheet approval cycles.
- Invoicing clients, calculating rates, processing staff payments, and statutory benefits disbursements.
- Providing dedicated account management and ongoing operational customer support.
- Complying with applicable employment, tax, corporate, and statutory requirements in Australia, New Zealand, and the Philippines.
6. Business verification and identity verification
Arkero may verify businesses, account holders, applicants, candidates and Personnel where reasonably required for security, fraud prevention, compliance or service delivery.
Business verification may include checking information such as an ABN, ACN, NZBN, business name or other registration information against public or authorised sources.
Identity verification may include collecting or reviewing government issued identification and related verification information.
Government issued identifiers are handled only for legitimate verification, compliance or legal purposes. Arkero does not adopt a government identifier as its own identifier except where permitted by law.
Identity documents and verification records are retained only for as long as reasonably necessary for verification, fraud prevention, compliance, dispute handling or other lawful requirements.
7. Automated and assisted assessment
Arkero may use software, automated tools and artificial intelligence assisted systems to support parts of its operations, including candidate screening, scoring, ranking, classification, matching, fraud prevention, security monitoring, compliance workflows and service administration.
The kinds of personal information used by these systems may include application information, work history, qualifications, skills, availability, interview content and transcripts, assessment responses and results, identity or verification information, account activity, and Platform or security signals.
Automated tools may produce or contribute to candidate rankings, shortlist recommendations, matching recommendations, classifications, workflow routing, risk or fraud flags and security alerts. These outputs may be substantially and directly related to decisions about whether a candidate progresses, how a candidate is matched to a role, or whether additional verification or review is required.
As at the effective date of this Policy, Arkero does not rely solely on an automated score to make a final candidate hiring or engagement decision. Human review remains part of final candidate and engagement decisions. If Arkero introduces a solely automated decision, or another automated process that could reasonably be expected to significantly affect an individual's rights or interests, Arkero will update its disclosures and provide any additional notice or safeguards required by law.
Arkero may use deidentified or aggregated information to test, evaluate and improve systems. Personal information will not be used for a materially unrelated AI-training purpose without an appropriate legal basis and any additional notice or consent required by applicable law.
8. Client Data
Clients retain ownership of information and content that they submit to the Arkero Platform, subject to the rights required for Arkero to provide its services.
Arkero may host, store, process, transmit, back up and otherwise handle Client Data as reasonably necessary to:
- provide the Platform and staffing services
- administer accounts and Personnel engagements
- process authorised actions and transactions
- provide support
- maintain security and business continuity
- comply with legal obligations
- resolve disputes and investigate misuse.
Clients are responsible for ensuring that they have authority to provide personal information to Arkero and Personnel and for limiting access to information that is reasonably necessary for the relevant role.
9. Sensitive and regulated information
Clients and users should not upload or provide highly sensitive or specially regulated information unless it is reasonably necessary for the relevant service and Arkero has authorised or reasonably expects that type of information to be processed.
This includes, where applicable:
- health and medical records
- full payment card numbers outside an approved payment interface
- highly sensitive financial records
- government protected or classified information
- information subject to strict geographic storage requirements
- other data requiring specialist regulatory controls.
Where such information is required, Arkero may apply additional security, access or contractual requirements.
10. How we disclose personal information
We disclose personal information only to authorized recipients under strict controls:
- Between clients and prospective or placed candidates to evaluate qualifications and coordinate day-to-day operations.
- To payroll and international remittance partners to process compensation, taxes, and statutory social welfare programs.
- To trusted cloud, security, and infrastructure vendors supporting our software platform.
- To legal, accounting, and professional audit advisers under binding confidentiality duties.
- To governmental or law enforcement authorities when legally compelled by valid subpoenas, warrants, or court orders.
11. Our technology providers
Arkero partners with industry-leading technology providers to run our cloud architecture. Our key technology partners include Supabase (database storage and authentication), Amazon Web Services (hosting infrastructure), and Airwallex / Stripe (PCI-DSS compliant payment processing).
All technology vendors undergo comprehensive security reviews to verify SOC 2 Type II or ISO 27001 certifications, data encryption standards, and commitment to privacy compliance.
12. Overseas access and disclosure
Arkero operates across Australia and New Zealand and works with Personnel and team members in the Philippines.
Personal information may therefore be accessed, processed or disclosed outside the country in which it was originally collected, including in the Philippines.
Arkero's primary known overseas access location is the Philippines. Depending on the service, provider configuration and subprocessors used, personal information may also be processed in other countries. Likely locations can include the United States and other locations used by Arkero's hosting, database, payment, document, security, communications and infrastructure providers.
Where Australian privacy law applies, Arkero takes reasonable steps required by law in connection with disclosures of personal information to overseas recipients.
Where New Zealand privacy law applies, Arkero takes steps required by the Privacy Act 2020 in connection with overseas disclosures, including using contractual or other safeguards where required.
Service-provider locations and subprocessors can change over time. Where practicable, Arkero will keep this Policy or related privacy information updated with likely overseas locations. Individuals may also contact Arkero for current information about the likely overseas locations relevant to a particular service.
13. Security
Arkero maintains rigorous technical, physical, and administrative defenses against data loss, unauthorized access, and malicious modification:
- End-to-end transport layer security (TLS 1.3) across all network endpoints and web portals.
- AES-256 bit database encryption at rest for all stored user data and operational backups.
- Granular Role-Based Access Control (RBAC) enforcing strict least-privilege permissions.
- Mandatory Multi-Factor Authentication (MFA) for administrative and client portal logins.
- Automated security log analysis, anomaly detection, and periodic penetration testing.
14. Privacy and data breaches
Arkero has an established Data Breach Response Plan aligned with the Australian Notifiable Data Breaches (NDB) scheme and the New Zealand Privacy Act 2020 mandatory reporting obligations.
In the event of a suspected or confirmed security breach likely to result in serious harm to affected individuals, our incident response team will take immediate containment measures, evaluate the scope of exposure, and notify affected individuals and regulatory authorities (the Office of the Australian Information Commissioner and the New Zealand Privacy Commissioner) without undue delay.
15. Retention and deletion
Arkero retains personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by law.
Retention periods vary depending on the type of information and may be influenced by:
- active client or Personnel relationships
- account status
- contract and transaction record requirements
- identity verification and fraud prevention requirements
- tax, accounting and legal obligations
- security and audit requirements
- complaints, disputes or legal proceedings
- backup and disaster recovery processes.
Where the Arkero Terms and Conditions provide an export period for Client Data after account closure, eligible data may generally remain available for export for up to 30 days.
Deleted information may remain in system backups for up to 90 days or another reasonable backup cycle before being overwritten or deleted.
Contracts, billing records, security records, fraud prevention information, identity verification records and information required for legal or regulatory purposes may be retained for longer where reasonably necessary or required by law.
When personal information is no longer required, Arkero will take reasonable steps to delete, destroy or deidentify it, subject to lawful retention requirements and technical backup processes.
16. Cookies and similar technologies
Our website and software application use essential session cookies and local storage to keep you securely signed in, preserve active session state, and protect against cross-site request forgery (CSRF).
We may also use aggregated analytics cookies to monitor platform performance and visitor trends. You can configure your browser to decline cookies, although doing so may restrict your ability to use certain interactive portal features.
17. Direct marketing
We may send occasional email newsletters, service announcements, and talent market updates to clients and business contacts who have engaged our services or registered interest. We respect the Australian Spam Act 2003 and the New Zealand Unsolicited Electronic Messages Act 2007.
You can unsubscribe from marketing communications at any time by clicking the "Unsubscribe" link at the foot of any email or by emailing privacy@arkero.com. We do not sell or rent marketing lists to third parties.
18. Third party integrations and links
Our portal connects with select third-party integrations (such as Airwallex for direct debit, Stripe for card processing, and video conferencing systems for candidate interviews).
While we partner exclusively with verified enterprises, these external services maintain independent privacy policies. We encourage users to review third-party privacy notices when linking external accounts.
19. Access to personal information
Individuals may request access to personal information Arkero holds about them. We may need to verify identity before providing access.
Access may be refused or limited where permitted or required by law, including where providing access would unreasonably affect another person's privacy, reveal protected information, or another legal exception applies.
Arkero will respond within the timeframe required by applicable law.
20. Correction of personal information
Individuals may ask Arkero to correct personal information that they believe is inaccurate, incomplete, out of date or misleading.
Arkero will take reasonable steps to ensure information is accurate, complete and current having regard to the purposes for which it is used.
Where New Zealand law applies and Arkero does not agree to make a requested correction, an individual may ask Arkero to attach a statement of the correction sought where required by law.
21. Privacy complaints
If you have concerns regarding our compliance with this Privacy Policy or applicable privacy laws, please contact our Privacy Officer in writing at privacy@arkero.com. We take every grievance seriously and will investigate and provide a formal written resolution within 30 days.
If you are not satisfied with our response, you have the right to escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or the New Zealand Office of the Privacy Commissioner (OPC) at privacy.org.nz.
22. Anonymous or pseudonymous interactions
Where lawful and practicable, you have the option to interact with Arkero anonymously or by using a pseudonym (e.g. when making preliminary inquiries regarding general staffing rates or browsing public pages).
However, full identification is strictly required when submitting a job application, entering into client staffing contracts, or accessing authenticated portal features.
23. Business records and information about companies
Privacy laws generally protect information about identifiable individuals rather than information solely about companies or other legal entities.
However, business records often contain personal information about directors, owners, employees, users, candidates, Personnel and other individuals. Arkero applies this Privacy Policy to personal information contained within business records.
24. Changes to this Privacy Policy
Arkero reserves the right to review and amend this Privacy Policy periodically to reflect technological advances, updated regulatory directives, or operational enhancements.
When significant changes occur, we will notify registered users via in-app banners or direct email. The date of the most recent revision will always be displayed at the top of this document.
25. Contact us
If you have questions, feedback, or data privacy requests, our designated Privacy Officer is available to assist you:
Email: privacy@arkero.com
Australia Office: Level 24, 300 Barangaroo Avenue, Sydney NSW 2000, Australia
New Zealand Office: 124 Oxford Terrace, Christchurch 8011, New Zealand
Operating Hours: Monday – Friday, 8:00 am to 5:00 pm AEST / NZST
Managed remote staffing for Australian and New Zealand businesses.
Sectors
Trades and construction
Healthcare
Real estate
Ecommerce
Marketing agencies
Home services
Accounting and finance
Software and SaaS
Insurance broking
Looking for work with Arkero?
Email us your CV© 2026 Tradelance Technology Group Pty Ltd, trading as Arkero.
