Privacy

This page consolidates Wageloch privacy guidance into one reference for legal context, employee data handling, mobile app usage, biometric data, and security certifications.

Privacy Act context (Australia)

Whether the Privacy Act 1988 applies to your business depends on factors such as annual turnover and business type.

You can review the Act at legislation.gov.au.

With some exceptions, businesses with annual turnover below $3 million may be treated as small businesses that are not covered by the Act.

The Australian Privacy Principles (APP) under the Privacy Act require covered organisations to keep a clear policy on how personal information is managed.

How Wageloch handles personal information

To support your internal privacy communication, Wageloch advises:

1. Personal information entered into Wageloch is stored in encrypted formats on Wageloch servers and/or on computers where Wageloch is installed.
2. Data transmitted between clients and Wageloch services is sent over encrypted channels.
3. Wageloch infrastructure is securely hosted in AWS Sydney, Australia.
4. Biometric templates are stored only on the collection device in encrypted form and are not transmitted to Wageloch servers.
5. Wageloch does not share personal information with third parties unless your business explicitly authorises approved API access.

If third-party integrations are enabled through API access, request equivalent privacy handling statements from those providers.

Source reference: wageloch.com.au/privacy-policy.

Biometric privacy

Wageloch does not store biometric templates on Wageloch servers.

When a biometric enrolment is created, encrypted reference points are stored locally on the biometric device for future matching during clocking events.

Those reference points are not reconstructable into the original biometric input and are not used by Wageloch to identify information outside their matching purpose.

Biometric information is not shared by Wageloch with unrelated third parties.

Mobile app privacy

The Wageloch mobile app is designed for authorised employees of authorised Wageloch customers.

Information used by the app

The app may process:

• Staff portal email address and password (for authentication).
• Clock in and clock out timestamps.
• GPS location at clock in and clock out.

Why this information is used

• Authentication confirms authorised access.
• Clocking records are transmitted to the employer's Wageloch environment.
• GPS is used for mobile clocking verification.

Location usage

Yes, the app uses precise location during clock in and clock out events.

If GPS is unavailable, clocking may need to be completed through manual clocking steps.

Third-party disclosure

Wageloch does not disclose this app-collected information to unrelated third parties.

Opt-out and usage rights

Use of the mobile app is controlled by your employer's setup and agreement with Wageloch.

Data retention and employer control

Collected app information is processed within your employer's Wageloch context and is governed by your employment terms and your employer's Wageloch agreement.

Children

The app does not record age or gender. Its primary function is rostering visibility and clocking activity for authorised workers.

Security controls

Data transmission is secured in transit. Device-side persistence is limited to what is required for login/session behaviour, including encrypted credentials where applicable.

Policy updates

The latest public policy information is available from wageloch.com.au.

Source reference: portal.wageloch.com.au/pp.aspx.

Privacy and security certifications

Wageloch maintains a security and quality posture through ongoing governance and external assessment.

Wageloch treats systems and security as core commitments for clients, integration partners, and internal operations.

Wageloch attained ISO 27001 and ISO 9001 accreditation in 2022 and continues annual auditing to maintain certification status.

You can view current certificate records at IAF CertSearch.

What ISO 9001 means

ISO 9001 is the international standard for quality management systems and supports consistent service and product quality.

What ISO 27001 means

ISO 27001 is the international standard for information security management systems and supports systematic protection of information assets.

What certification means for Wageloch

Certification supports Wageloch to:

• Follow structured procedures to continuously improve systems and processes.
• Measure performance against externally assessed standards.
• Better identify risks and opportunities.
• Support high-volume operational obligations, including ATO-linked processing contexts.
• Improve integration readiness with external partners.
• Reduce recurrence of known issues through controlled processes.

What certification means for customers

Certification provides additional confidence that Wageloch services and support are independently assessed and maintained to recognised quality and security standards.

Contact

If you need privacy clarification for your implementation, Contact Us.

For mobile app privacy questions, you can also contact helpdesk@wageloch.com.au.