Last updated: 12 October 2026
Saltworth Pty Ltd ("Saltworth", "we", "us") handles personal information in connection with its advisory, capability planning, recruitment, search, staffing and labour hire services. This policy explains our practices for website visitors, business contacts, candidates, referees and client contacts. We apply the Australian Privacy Principles where the Privacy Act 1988 (Cth) requires us to do so.
Information we collect
Depending on your relationship with us, we may collect:
- your name, contact details, employer, role and business correspondence;
- information in a website enquiry, including the optional company name and the message you send;
- for candidates, your CV, work history, qualifications, skills, availability, preferences and information relevant to a position or assignment;
- references and assessment information where relevant and lawfully obtained; and
- technical information needed to operate and protect the website, including an IP address and anti-spam signals.
We usually collect information from you. We may also receive it from a client, referee, recruitment platform, iProfile or a public professional profile such as LinkedIn. We will take reasonable steps to tell you when information is collected from another source, where required.
How we use information
We use personal information to respond to enquiries; discuss business needs and capability plans; assess, search for and introduce potential candidates; manage staffing and labour hire arrangements; maintain candidate records; communicate about relevant opportunities; and meet legal, payroll, safety and administrative obligations. We may use business contact details to communicate about our services where permitted by law. You can ask us to stop direct marketing through the Saltworth contact form.
Providing information is generally voluntary. If you do not provide information needed for a particular enquiry, position or engagement, we may be unable to respond fully or provide that service. This policy describes our practices; it is not a blanket request for consent.
Who may receive information
We may disclose relevant information to clients or prospective employers, with the candidate's permission where required; referees and assessment providers; payroll, compliance and professional advisers; technology providers supporting our systems; and authorities when required or permitted by law. We do not sell personal information. We limit disclosures to what is needed for the relevant purpose.
iProfile candidate records
We use iProfile to manage candidate information and CVs for recruitment. Candidate details may be created or updated in iProfile, and we may receive updated details through it. iProfile's sharing features may make candidate information available to other participating organisations according to the candidate's iProfile settings and the service's terms. Ask us through the contact form if you want to know how your record is used or request a correction. See iProfile for information about that service.
Website enquiries and service providers
When you submit the website form, we use your name, business email, optional company name and message to respond. The form uses Cloudflare Turnstile to help detect automated submissions. Cloudflare may receive your IP address, TLS fingerprint, browser user-agent, the site key and origin, and other signals described in its Turnstile Privacy Addendum. Cloudflare processes this information to protect the form and also uses some information for its own Turnstile improvement purposes. Cloudflare does not receive the text of your enquiry through the Turnstile widget.
Our server sends the enquiry email through Resend. The message and delivery details are then handled by our Microsoft 365 email service. Resend and Microsoft may process personal information to deliver and store the message. The form also uses a hidden spam field, server-side checks and temporary rate-limiting records.
Overseas processing
Some service providers operate outside Australia. Resend primarily processes data in the United States and may use subprocessors in other locations. Cloudflare operates a global network for Turnstile. Microsoft 365 and iProfile processing locations depend on the services and account arrangements in use. We take reasonable steps to assess service providers and protect information before disclosing it overseas where applicable law requires this.
Website technology
Turnstile may use cookies or similar browser signals as explained in Cloudflare's addendum. The current Saltworth landing page does not use Cloudflare Web Analytics or advertising trackers. If we add analytics, advertising technology or other cookies, we will update this policy to describe them.
Storage, security and retention
We take reasonable steps to protect information from misuse, loss and unauthorised access or disclosure. Access is limited to people and providers who need it for their work. No internet transmission or storage system is completely secure.
We keep website enquiries for as long as needed to respond, manage any resulting relationship, resolve disputes and meet applicable record-keeping obligations. Candidate, client and labour hire records may need to be kept for different periods under law or an ongoing engagement. When information is no longer needed and we are not required to retain it, we take reasonable steps to delete or de-identify it. We have not set a single fixed retention period for all enquiries.
Access, correction and communications
To request access to information we hold about you, ask for a correction, or opt out of direct marketing, use the Saltworth contact form. Candidates and other individuals may use a personal email address for a privacy request. Please describe your request so we can identify the relevant records. We may need to verify your identity before giving access or making a change. We will explain any refusal and available review options where required by law.
Privacy complaints
Send a privacy complaint through the Saltworth contact form and label it "Privacy complaint". We will acknowledge it, investigate the issue and tell you the outcome. If you are dissatisfied with our response, or have not received one within 30 days, you may complain to the Office of the Australian Information Commissioner (OAIC), if it has jurisdiction.
Changes and contact
We may update this policy when our services, providers or legal obligations change. The current version and update date will appear on this page. For privacy questions or requests, use the Saltworth contact form.