Privacy policy

Effective date 16 October 2026

The Workplace Kit is an Australian sole trader business, ABN 85 534 053 138. This policy explains how we handle personal information when you browse our website, buy digital HR resources, complete the HR Health Check or contact us. Privacy enquiries can be sent to info@theworkplacekit.com.au.

Information we collect

We collect the information reasonably needed to provide our website, products and support. Depending on your interaction with us, this may include your name, email, business name, billing and order information, correspondence, and any marketing preferences you provide.

Shopify and payment providers process checkout and payment information. We receive the order and payment status information needed to administer your purchase. Please do not send payment card details by email or through our contact form.

Our website and its providers may collect technical information such as IP address, browser and device details, cookies, pages viewed and download activity. The precise collection depends on the website features, providers and privacy choices in use.

The HR Health Check

The Health Check asks about your business’s people-management processes. It does not ask for individual employee records or medical information. Before showing detailed results, it requests your email, an optional business name and your agreement to share the assessment summary with us.

The summary sent through our Shopify contact form includes your overall score and result band, section scores, top priorities and whether an advisory was triggered. It is sent to our store inbox with your email and any business name supplied. The detailed results appear on the webpage, where you can print or save them. We do not automatically email a results report under the current setup.

Your individual answers and assessment progress are stored in your browser’s session storage to support navigation and submission. The assessment does not store your email in that session data. Session storage normally lasts for the browser tab’s session, although browser restoration features may retain it longer. Retaking the assessment resets its saved answers and progress. Emailing a summary to our inbox creates a separate record which is handled under the retention section below.

We use your summary to administer the assessment, understand common gaps and improve our resources. Product recommendations are generated from your responses and do not constitute a compliance audit or personalised legal advice. Completing the assessment does not subscribe you to marketing.

How we use information

We use personal information to process and deliver orders, provide download support, respond to enquiries, administer the Health Check, improve our resources, maintain security, prevent fraud and meet applicable legal and recordkeeping obligations.

We send marketing communications only where we have the required consent or another lawful basis. Any marketing signup is separate from Health Check consent. You can unsubscribe using the link in a marketing email or by contacting us. Essential purchase or support messages may still be sent.

Providers and disclosure

We share information as reasonably needed with Shopify, payment providers and the providers used for email, hosting, digital delivery and support. Providers may process information for us, and some may also process information under their own privacy notices. We may disclose information where required by law or reasonably necessary to protect lawful rights or investigate fraud. We do not provide your assessment summary to other businesses for their marketing.

Shopify’s handling of information is described at https://www.shopify.com/legal/privacy and https://privacy.shopify.com/en. Our policy does not replace Shopify’s notices for processing for which Shopify is responsible.

Cookies and overseas processing

Cookies and similar technologies support functions such as checkout, security and remembering preferences. Analytics or advertising technologies may also be used where enabled and permitted. You can use any privacy controls offered on our website and adjust your browser settings. Blocking necessary storage may prevent checkout or the Health Check from working correctly.

Shopify operates internationally and information may be processed by its group companies and providers outside Australia, including in Canada, Singapore and the United States. Locations depend on the service involved and may change. Shopify’s international-transfer information and provider details are available at https://help.shopify.com/en/manual/privacy-and-security/privacy/international-data-transfers. Contact us for information about the providers handling your enquiry or order.

Information may be stored or processed outside Australia through our providers. We take reasonable steps appropriate to our obligations to protect information when arranging overseas processing.

Security and retention

We use reasonable safeguards appropriate to the information we hold, including access controls for our systems and accounts. No online system can guarantee absolute security. Please avoid sending confidential employee documents or sensitive personal information through our contact channels.

We retain identifiable Health Check submissions for up to 12 months, unless an active enquiry, legal obligation or dispute requires longer retention. We then delete or de-identify them under our records process. Order records and related correspondence are kept for the period reasonably needed for supply, support, accounting, legal obligations and disputes. Other information is deleted or de-identified when no longer needed, subject to applicable obligations and reasonable backup cycles.

Requests and complaints

Contact info@theworkplacekit.com.au to request access to, correction of or deletion of information we hold about you, or to raise a privacy concern. We may need to verify your identity. Some information may need to be retained for legal obligations or unresolved transactions. We will explain any limits that apply to your request.

We aim to acknowledge a privacy complaint within five business days and provide a substantive response within 30 days. If more time is needed, we will explain why and keep you informed. Where applicable, you may also contact the Office of the Australian Information Commissioner at www.oaic.gov.au. Nothing in this policy limits rights available under applicable law.

Policy changes

We may update this policy when our practices or obligations change. We will publish the updated policy with its effective date and provide further notice where required. Material changes will not retrospectively authorise unrelated use of information already collected.