Privacy Policy

Atlantis Recruitment Brisbane

Effective date: 3 September 2026 Version 1.0

1. Introduction and scope

Atlantis Recruitment Brisbane ("Atlantis", "ARB", "we", "us", "our") is a recruitment agency operating in Queensland, Australia. We are committed to protecting the privacy of the personal information we hold and to handling that information in accordance with the Privacy Act 1988 (Cth) (the "Privacy Act") and the Australian Privacy Principles (the "APPs").

This Privacy Policy explains how we collect, hold, use, disclose, secure and dispose of personal information, and how you can access and correct the information we hold about you or make a privacy complaint.

This Policy applies to:

Job-seeker candidates who register their interest in employment opportunities with us, including through our candidate portal at https://careers.atlantisrecruitmentbrisbane.com/apply; and
Employer clients who subscribe to our recruitment services to access candidates and placement services, including through our employer portal.

It also applies to visitors to our website at https://atlantisrecruitmentbrisbane.com and to anyone else whose personal information we handle in the course of our business, such as referees.

By registering as a candidate, subscribing as a client, or otherwise providing us with personal information, you acknowledge that you have read and understood this Policy. This Policy should be read together with our Candidate Portal Terms and Conditions (for candidates) and our client terms of service (for employer clients).

A note on the candidate portal. Our candidate portal is a registration and intake form. Candidates do not create login accounts or set passwords. You submit your details once, and our recruiters manage your registration internally. Where this Policy refers to closing or removing your "account", this means the removal of your registration and details from our systems.

2. What personal information we collect

The personal information we collect depends on your relationship with us.

2.1 Candidates (job-seekers)

We may collect:

your name, and contact details (email address, telephone number and postal or residential location);
your work history, employment background, qualifications and skills, and the contents of your resume/CV and any cover letter;
the sector you are interested in (Corporate or Retail) and your role type (for example business support, admin staff, advisor, store manager or retail assistant);
your salary expectations and availability;
your right-to-work and visa information;
referee details and references provided about you;
screening notes, interview notes, assessments and our internal recruitment notes about you;
any free-text message you send us and our communications with you.

2.2 Employer clients

We may collect:

your name and business contact details (email address, telephone number, position and business address);
details of your business, your recruitment requirements and subscription details; and
our communications with you.

2.3 Website visitors

When you visit our website we may collect limited technical information such as your IP address, browser type and pages viewed, through cookies and similar technologies, to help us operate and improve the site.

2.4 Sensitive information

Some information we collect from candidates — for example visa and right-to-work status — may be "sensitive information" under the Privacy Act. We collect sensitive information only with your consent and only where it is reasonably necessary for our recruitment functions, or where we are otherwise permitted or required by law to do so. You do not have to provide sensitive information, but if you choose not to, we may not be able to progress your registration or match you to certain roles.

3. How we collect personal information

We collect personal information in a number of ways, including:

directly from you — when you complete the candidate registration form on our portal, submit a resume or cover letter, subscribe as a client, telephone or email us, or otherwise deal with us;
through telephone or video screening — when our recruiters speak with candidates about their background and suitability;
from referees and references — where you have nominated a referee, we may contact them to verify information and obtain references (by providing referee details you confirm the referee is aware you have done so);
from job boards and public sources — where you have made your information available on job boards, professional networking sites or similar platforms for recruitment purposes; and
from our clients — for example where a client refers a candidate to us.

Wherever it is reasonable and practicable to do so, we collect personal information directly from the individual concerned. Where we collect your information from a third party, we take reasonable steps to ensure you are made aware of the matters set out in this Policy.

4. Why we collect, hold and use personal information

We collect, hold and use personal information for purposes connected with our recruitment business, including to:

provide recruitment and placement services;
assess candidates' suitability and match candidates to roles offered by our clients;
contact candidates about employment opportunities;
provide candidate access and placement services to our subscribing clients;
carry out screening, reference checks and verification (including right-to-work checks);
manage our relationship with candidates and clients, including administration, billing and support;
respond to your enquiries and communications;
improve our services and operate our website and portals;
comply with our legal obligations; and
with your consent, disclose candidate information to third-party recruitment firms as described in section 6.

We will only use your personal information for the purposes for which it was collected, for a related purpose you would reasonably expect, or where you have consented, or as otherwise permitted or required by law.

5. Who we disclose personal information to

We may disclose personal information to:

prospective employers and our clients — we disclose candidate information (which may include your resume, work history, contact details and our candidate summary) to clients for the purpose of assessing you for, and placing you in, roles;
referees — to verify information and obtain references;
our service providers — such as cloud hosting, data storage, email and IT service providers who help us operate our business, who are only permitted to use the information to provide services to us;
our professional advisers — such as lawyers and accountants, where reasonably necessary;
third-party recruitment firms — only with your separate express consent, as described in section 6 below; and
government agencies, regulators or others — where we are required or authorised by law to do so.

We require our clients to keep candidate information confidential, to use it only for legitimate recruitment purposes, to restrict access to it, to maintain appropriate security, not to use it to build their own candidate database, to notify us of any breach, and to securely delete it when it is no longer needed.

We do not sell or disclose your personal information for the purposes of another organisation's direct marketing, except as expressly described in this Policy and with your consent.

6. Disclosure to third-party recruitment firms (on-referral for a fee) — separate express consent required

From time to time Atlantis may be unable to place a candidate itself. Where that is the case, Atlantis may wish to disclose that candidate's personal and recruitment information to third-party recruitment firms so that those firms can consider the candidate for opportunities and contact the candidate directly. Atlantis may receive a fee or other commercial benefit in connection with such a disclosure.

We will not do this on the basis of your general recruitment consent. Your consent to Atlantis using your information to seek employment for you does not extend to the commercial on-referral of your information to unrelated recruitment businesses. We will only disclose your personal and recruitment information to third-party recruitment firms where you have given separate, express, written and signed consent authorising that disclosure and permitting those firms to contact you about opportunities.

Before we seek that consent, and in the consent itself, we will clearly explain:

(i) the nature and purpose of the disclosure — that Atlantis, where it cannot place you itself, may pass your information to other recruitment firms so they can seek opportunities for you and contact you;
(ii) the types of information that may be disclosed — which may include your name, contact details, location, work history/resume, salary expectations, right-to-work/visa information, references and our recruitment notes and candidate summary;
(iii) the categories of recipients — third-party recruitment agencies operating in the sectors relevant to you; and
(iv) that Atlantis may receive a fee or other commercial benefit from the recipient firm in connection with the disclosure.

Giving this consent is entirely optional and is not a condition of registering with us or of us seeking to place you ourselves. You may decline, and you may withdraw this consent at any time by contacting us using the details in section 14 (withdrawal will not affect disclosures already made before we receive your request). This consent is obtained as part of our candidate onboarding process and is supported by our Candidate Portal Terms and Conditions and this Privacy Policy.

7. Data storage and security

We take reasonable steps to protect the personal information we hold from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include:

storing information in secure, access-controlled systems, including reputable cloud hosting services;
restricting access to personal information to staff who are involved in providing recruitment services and who need it to perform their role;
using appropriate technical and organisational safeguards; and
suspending portal access where we consider it necessary while we investigate a suspected security or privacy incident.

No method of transmission or storage is completely secure, and while we work to protect your information we cannot guarantee absolute security.

Data breaches

We have procedures in place to deal with suspected data breaches. Where a data breach is likely to result in serious harm to any individual whose information is involved, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme in Part IIIC of the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

8. Overseas disclosure

Some of our service providers, including cloud hosting and email providers, may store or process personal information on servers located outside Australia. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that the recipient handles the information in a manner consistent with the APPs. By providing us with your personal information, you acknowledge that it may be stored or processed overseas by our service providers for the purposes described in this Policy.

9. Direct marketing and communications

We may send you communications relevant to our services — for candidates, this includes contacting you about employment opportunities; for clients, this includes information about our services. Electronic marketing communications are sent in accordance with the Spam Act 2003 (Cth).

You can opt out of receiving marketing or non-essential communications from us at any time by using the unsubscribe facility in the relevant message or by contacting us using the details in section 14. We will action your request promptly. Please note that we may still need to send you communications that are directly necessary for a specific recruitment process you are involved in, or that we are required by law to send.

10. How long we keep information and secure destruction

We keep personal information only for as long as it is needed for the purposes described in this Policy, or as required by law. For candidates, this generally means for as long as you remain registered with us and for a reasonable period afterwards so we can consider you for suitable roles and meet our legal and record-keeping obligations.

When personal information is no longer required for any lawful purpose, we take reasonable steps to destroy it securely or to de-identify it.

11. Intellectual property

Atlantis retains ownership of its portals, software, website, databases (including its candidate database), methodologies, templates, candidate summaries, reports, branding and other proprietary materials. Candidates and clients are granted only a limited right to use these materials for the purpose of receiving our recruitment services. Nothing in this Policy transfers any intellectual property rights to you.

12. Access and correction

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Candidates are also responsible for ensuring the information they supply to us is accurate and kept up to date.

To make a request, contact us using the details in section 14. We may need to verify your identity before providing access. We will respond within a reasonable time. In most cases access and correction are provided free of charge, although we may charge a reasonable fee for access in some circumstances (we will tell you first). If we decline a request for access or correction, we will explain why in writing and tell you how you can complain.

13. How to make a privacy complaint

If you believe we have breached the APPs or otherwise mishandled your personal information, please contact us first using the details in section 14, setting out your concern. We take complaints seriously and will investigate and respond within a reasonable time, usually within 30 days.

If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC):

Website: https://www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5288, Sydney NSW 2001

14. Contact us

If you have any questions about this Policy, wish to access or correct your information, wish to opt out of communications, or wish to make a complaint, please contact us:

Atlantis Recruitment Brisbane Attention: Nishant Chand, Director Email: info@atlantisrecruitmentbrisbane.com Address: 5013 Mount Lindesay Highway, South Maclean, QLD 4280, Australia

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or legal obligations. The current version will always be available at https://atlantisrecruitmentbrisbane.com/privacy. Where changes are significant, we will take reasonable steps to notify you. This Policy is governed by the laws of Queensland, Australia.

Effective date: 3 September 2026 — Version 1.0