PropoDoc provides self-help document templates and tools. It is not a law firm and does not provide legal advice. Learn more.
Skip to main content
Example
policy

HR Data Protection and Privacy Policy Example

Example document for HR Data Protection and Privacy Policy. Use this as a reference when creating your own.

Professional Review Required

This document involves significant legal, financial, or compliance considerations. You must have a qualified professional review and approve this document before use. Do not rely on this template as legal advice.

Document: HR Data Protection and Privacy Policy

Example Document

Last updated 7/30/2026

HR Data Protection and Privacy Policy

Effective Date: 1 July 2023 Version: 1.0

1. Purpose

The purpose of this policy is to set out how Apex Plumbing Services collects, uses, stores, and discloses personal information. We are committed to protecting the privacy of our employees, contractors, and job applicants. This policy complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Scope

This policy applies to:

  • All employees of Apex Plumbing Services
  • Contractors and subcontractors
  • Job applicants
  • Anyone whose personal information we hold in our HR systems.

3. Collection of Personal Information

3.1 What information do we collect?

We collect the following types of information:

  • Identity Information: Name, date of birth, address, and mobile phone number.
  • Employment Information: Resume, employment contract, trade certificates, performance reviews, and hourly rate.
  • Financial Information: BSB and Account Number, superannuation fund name and number, and Tax File Numbers (TFN).
  • Sensitive Information: Medical information for return to work plans and pre-employment fitness assessments.

3.2 How do we collect it?

We collect information directly from you. This happens when you fill out our starter pack forms or provide information to our office manager. We only collect information that is necessary to manage your employment.

4. Use and Disclosure of Personal Information

4.1 Use of Information

We use your personal information to pay your wages into your bank account, pay your super, and ensure you have the right licenses for the job. We also use it to process workers compensation claims if you get hurt at work.

4.2 Disclosure of Information

We may disclose your information to our bookkeeper and accountant. We share TFN data with the ATO. We share medical data with our insurance provider if you make a claim. We will not share your data with anyone else unless you say we can.

5. Data Security

5.1 Storage

We take reasonable steps to keep your personal information safe.

  • Physical Records: Paper files are kept in a locked filing cabinet in the main office.
  • Digital Records: All employee files are stored on a password-protected cloud server.

5.2 Access

Only the Director and the Office Manager can access your personal information. Our bookkeeper only has access to payroll data.

6. Data Quality and Access

6.1 Your Rights

You have the right to see the information we hold about you. You can ask us to fix anything that is wrong.

6.2 Making a Request

Please email the Office Manager at admin@apexplumbing.com.au to see your file. We will arrange a time for you to view it in the office.

7. Data Retention

We keep employee records for seven years after you leave. After that, we shred the paper files and permanently delete the digital files.

8. Data Breaches

If we accidentally lose your data or share it with the wrong person, we will tell you immediately. We will work to fix the problem and stop it from happening again.

9. Policy Review

We will review this policy every year.

10. Contact Us

If you have questions, please contact Sarah Smith, Office Manager. Phone: 03 5550 1234 Email: admin@apexplumbing.com.au

Notes

This example demonstrates a completed policy for a fictional trade business. It shows specific details like the job title (Office Manager) and the type of data collected (trade certificates). It uses plain language and removes the placeholder brackets.

About this Example

Part of the HR Data Protection and Privacy Policy document collection

Document Type

HR Data Protection and Privacy Policy

A policy that sets out how your business collects, uses, stores, and discloses personal information about your employees and job applicants.

Complexity

moderate

Risk Level

high