Privacy Policy

Cazzy (ABN 20 106 341 634) runs this site. This policy explains what personal information we collect, why, who sees it, and your choices.

We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

From staff:

• first and last name, email address and mobile number;
• roles, skills, years of experience for each role, suburb, and whether you declare an RSA or food handler training;
• your confirmation that you are 18 or older, that you are allowed to work in Australia, that you will keep within any visa work-hour limits, and that your profile is true. We do not ask about or record your visa type or status;
• a selfie taken with your device camera, if you choose to add one;
• whether you are switched to Available, and when you were last active.

From businesses:

• business name, ABN, business type and suburb;
• the name, email address and mobile number of the person who registers.

From businesses on the waitlist: business name, suburb and email address, used only to tell them when Cazzy opens for businesses.

From using Cazzy:

• requests sent and answered, shift details, sessions, unlocks, bookings and releases, with their times;
• review scores and private review messages;
• points, free sessions and referrals;
• how you heard about Cazzy, if you choose to tell us at sign-up;
• anything you send through the Feedback page or by email.

Our hosting providers keep standard technical records when you use the site, such as IP address, browser type and the time of each request. We use these only to run and secure the site.

We collect information directly from you, and from another Cazzy user where it relates to a request, booking or review that involves you.

We do not ask for or store identity documents, tax file numbers, bank details or card numbers. Card payments are handled by our payment provider.

We use personal information to:

• create and secure your account;
• show staff profiles in search and pass requests between businesses and staff;
• share contact details when a staff member has agreed to that;
• record bookings and reviews, and work out average scores;
• run points, founding offers and referrals;
• understand how people find Cazzy, so we know where to spend on marketing (we only look at totals);
• detect fraud and misuse and keep the site secure;
• answer questions, handle complaints and prevent misuse;
• meet our legal obligations.

If you do not give us the information marked as required, we cannot create your account.

In search, anyone can see a staff member's Cazzy ID, role, skills, experience, suburb, RSA declaration and average score. Name, email, mobile number and photo are not shown.

A business sees a staff member's first name and mobile number only after that staff member presses "Call me" and the business unlocks the number in a session.

A business sees a staff member's selfie only while it has that person booked. The photo is hidden again when the booking is released.

Staff see a business's Business ID, business type, suburb and shift details with each request. They do not see the business name or the contact person's details through Cazzy.

Review scores are combined into an average. Private review messages are seen by Cazzy only.

We use service providers to host the site and database, to send emails and text messages, and to process payments. They may only use the information to provide those services to us.

We do not sell personal information. We disclose it to others only where the law requires or permits, for example to a court, regulator or the police, or to our professional advisers.

If Cazzy is sold or restructured, personal information may pass to the new operator, who must keep handling it as this policy describes.

A selfie is optional. Staff who add one take it with their device camera; photos cannot be uploaded from a file. Profiles with a selfie show a "Photo added" badge and may appear higher in search results.

We use the selfie so that a business that has booked you knows who to expect, and to help prevent misuse of accounts.

The selfie is an ordinary photograph. We do not use facial recognition or any other biometric matching, and the photo is not identity verification or a background check.

If we ever plan to introduce facial recognition or biometric matching, we will tell you first and ask for your consent.

Information is stored with our hosting, database, email, text message and payment providers. They are based in the United States and may store or process data in Australia, the United States and other countries where they operate.

We take reasonable steps to make sure those providers protect personal information to a standard like the Australian Privacy Principles.

We protect information with encrypted connections, restricted access, and backups kept by our providers.

Passwords are stored in a scrambled (hashed) form that we cannot read. The site uses an encrypted connection.

No system is completely secure. If an eligible data breach is likely to result in serious harm, we will follow the Notifiable Data Breaches scheme, including telling the people affected and the Office of the Australian Information Commissioner.

We keep your information while your account is open.

When you close your account, we remove your profile from search straight away and delete or de-identify your personal details and selfie within 30 days, unless we need to keep something to resolve a dispute or meet a legal obligation.

Records of past bookings and review scores may be kept in a form that no longer identifies you.

We may keep some records longer where that is needed for financial records, fraud prevention, security, or a legal claim.

Cazzy uses one cookie to keep you logged in. We do not use advertising or tracking cookies.

We may email you news about Cazzy, such as new features and offers for members. Every news email has a link to stop them. Sign-in codes, shift requests and messages about your account are still sent.

We count visits to the website without cookies. For each visit we keep the page, the website you came from, and a one-way code made from your network address and browser that changes every day. We do not store your network address, and the code cannot be used to identify you or to follow you from one day to the next.

We send messages about your account, requests and bookings. We send marketing messages only if you have agreed, and each one has a way to unsubscribe.

Staff can switch to Unavailable at any time to leave search, edit their profile, and retake their selfie from their account page.

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to close your account. Contact us at cazzy.localdir@outlook.com or through the Feedback page. We will respond within 30 days. We may need to confirm who you are first.

If you think we have mishandled your personal information, contact us at cazzy.localdir@outlook.com. Please include your name, contact details, what happened and when. We will acknowledge your complaint within 2 business days and aim to resolve it within 30 days.

If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Staff accounts are for people aged 18 or older. We do not knowingly allow anyone under 18 to create one.

If we learn that a person under 18 has created a staff account, we will close it and delete or de-identify the information, unless the law requires us to keep it.

We may update this policy. The current version and its start date are always on this page. We will tell you about important changes by email or on your account page.

Contact: Cazzy, ABN 20 106 341 634, cazzy.localdir@outlook.com.