Privacy Policy

Workbench International Limited (ABN 28 132 099 632) (referred to below as Workbench International, Workbench, The Softwear, we, our, us) is committed to protecting your privacy. This privacy policy (Privacy Policy) sets out how we manage your Personal Information. In particular, this Privacy Policy sets out how we will manage any Personal Information that is disclosed, collected or otherwise handled in connection with: 

• the Workbench International Software (the Software);

• the Workbench International website: https://www.workbenchcentral.com/home (the Website);

• our affiliated companies; and

• our third-party service providers.

This Privacy Policy may change from time to time, and it is important that you review it regularly. Any changes to this Privacy Policy will become effective when we publish the revised Privacy Policy on our Website.

In this Privacy Policy:

• Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not; and

• Sensitive Information has the meaning given in section 6 of the Privacy Act 1988 (Cth) and includes information about an individual's health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, and tax file number information.

Personal Information we collect

We may collect and hold different kinds of Personal Information about you depending on the nature of your engagement with us or what you choose to share with us.

Personal Information we collect and hold when you use the Software

When you use the Software, we may collect and hold the following categories of Personal Information:

• personal details, including your first name and last name, email address, postal address, phone number, username and user ID, signatures;

• employment and workforce data, including employee numbers, payroll IDs, cost centre and organisational units, work locations, timesheets, approvals and allowances, expenses and reimbursements, role and permission assignments, and authentication metadata (including last login time and sign-in method);

• contact data, including customer contacts, subcontractor contacts, names, email addresses, phone numbers, company and roles;

• financial and commercial data, including supplier and customer identifiers, invoices, job costing, and payroll export values, bank references, and payment details; and

• other personally identifiable information you voluntarily provide to us when you use the Software or in your interactions with us.

In addition to the categories above, we may collect sensitive Information about you, including your tax identifiers and tax file numbers (TFNs), where this information is uploaded to the Software by you or another authorised user of your organisation. We only collect Sensitive Information where you have consented to the collection and the information is reasonably necessary for one or more of our functions or activities, or the collection is required or authorised by law.

We do not require or store government identifiers (such as passport or driver licence numbers) as part of standard use of the Software, and we do not store card payment data.

We acknowledge that Software users may upload documents to the Software that contain personal or sensitive information that we have not specifically requested. Where we receive this unsolicited personal or sensitive information, we will, within a reasonable period, determine whether we could have collected it in accordance with the APPs, and if not, take steps to destroy or de-identify the information.

Personal Information we collect and hold when you use the Website

 When you use the Website, we may collect and hold the following categories of Personal Information: 

• personal details, including your first name and last name, your email address, and your phone number;

• employment and workforce data, including your company name and your job function;

• location data, including the country in which you are located; and

• other personally identifiable information you disclose to us in our interactions with you, including when you contact us.

How we collect your Personal Information

We collect Personal Information directly from you wherever it is reasonable and practical to do so, including as set out below.

How we hold your Personal Information

We generally hold Personal Information in electronic format, which we store either within our own internal systems and applications or using third party data processors and data storage providers.

We may otherwise hold your Personal Information in hard copy form, which is stored in our offices. We discuss the security of your Personal Information below.

Why we collect, hold, use and disclose your Personal Information

We collect, hold, use and disclose your Personal Information for a variety of reasons including in the circumstances listed below:

• to allow us, our affiliates, or any involved third parties to provide you with the Software or implementation services;

• to assess the performance of our Software and implementation services, and to develop and improve our Software and implementation services;

• to deliver targeted content based on user profiling and location;

• to process and respond to a complaint or request you may make;

• to contact you in relation to our services and the Software, particularly if we believe there are any products or services or any information we believe you might be interested in (however, in doing so, we will comply with all applicable laws regarding the provision of unsolicited messages);

• if you have given consent for Workbench’s use of your Personal Information for one or more other specific purposes;

• to improve and enhance the Software, including to train our underlying AI models (provided that before using any data for these purposes, we first aggregate and de-identify it so that it no longer constitutes Personal Information and cannot be used to identify you);

• if it is necessary for the performance of a contract to which you are party;

• for the provision of services or the administration of our business and the business of our affiliated companies and service providers (including fulfilling and exercising our obligations and rights, exercising or defending legal claims and managing the relationship with you); or

• where it is necessary to meet our obligations at law, for example, for conducting identity checks required by the anti-money laundering and counter-terrorism financing laws.

We may also use the personal information we collect to improve and enhance the Software, including to train the underlying AI models. However, we will only use aggregated and anonymised personal information to do this and will anonymise and de-identify your personal information before using it for this purpose.

Who we disclose your Personal Information to

• We may disclose your Personal Information to our affiliated companies, as well as various third parties. These third parties may include:

• technology partners and service providers in connection with services that these parties perform for us;

• our lawyers, accountants and professional advisors;

• our agents, contractors or our affiliated companies (and their agents and others they rely on to provide their services);

• to law enforcement authorities where we are required to do so by law or pursuant to a legal process; or

• to any entity in the event that we sell or transfer (or propose to sell or transfer) all or a portion of our shares, business or assets. Should such a sale or transfer occur, we will use reasonable efforts to require that the transferee uses the Personal Information you have provided to us in a manner that is consistent with this Privacy Policy
  

We may transfer your Personal Information to New Zealand, the United States and other countries in which we do business. We may also subcontract certain activities and share your Personal Information with our affiliates, service providers or other third parties located in countries outside of Australia. The countries in which these organisations are located will vary, but, in the course of our business operations, we generally disclose Personal Information to organisations located in Australia and New Zealand. Such transfers are made in order to provide the services and carry out the activities specified in this Privacy Policy. If we do this, we make sure there are appropriate privacy, data handling and security arrangements in place to protect your information. 

What if we can't collect your Personal Information

Where it is lawful and practical, you have the option to deal with us without identifying yourself or by using a pseudonym. However, if you do not provide us with the Personal Information we need, some or all of the following may occur:

• we, our affiliates, or any involved third parties may not be able to provide you with the Software or implementation services;

• you may not be able to use the Website or receive certain services; and

• we may not be able to provide you with targeted content and relevant information
  

Automated Decision Making

We may use automated decision-making (ADM) in our interactions with you. ADM occurs where artificial intelligence, machine learning and other computer programs use your Personal Information to make a decision, or to do something substantially and directly related to making a decision that could reasonably be expected to significantly affect your rights or interests. This helps us to improve the efficiency and accuracy of our Software and implementation services that we provide to you.

The kinds of decisions we may make using ADM processes include decisions relating to: · the provision, configuration or improvement of our Software or implementation services;

• personalisation and recommendations; and

• compliance with our legal obligations, terms, or acceptable use requirements.

We comply with all applicable laws when using ADM and our use of ADM does not affect any rights you have to request a review of a decision or make a complaint. We also take reasonable steps to ensure that our ADM processes are:

• used in a fair, reasonable and proportionate manner;

• subject to appropriate governance, testing and monitoring; and

• supported by human oversight, particularly where decisions may have a material impact on individuals.
  

Direct Marketing

 We may provide you with electronic marketing messages from time to time. You may opt out of receiving electronic messages from us at any time by contacting our Privacy Officer via the contact details at the bottom of this Privacy Policy or by using the opt-out mechanism included in our electronic marketing messages.

Data Security

We have put in place a range of electronic security and access measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include:

• Encryption: Personal Information is encrypted at rest and in transit using industry-standard encryption protocols.

• Access controls: We use role-based access controls and multi-factor authentication to limit access to Personal Information to authorised personnel who require access for legitimate business purposes.

• Monitoring and detection: Our systems are subject to continuous monitoring, intrusion detection and alerting.

• Audit logging: All Access to and modifications of Personal Information are recorded in comprehensive audit logs
• Segregated environments: Personal and Sensitive information is stored across logically segregated AWS environments to ensure the availability and integrity of Personal Information.
• Physical security: Where applicable, hard copy documents would be kept in a locked cabinet.
• Personal Measures: Access to Personal Information is limited to employees, contractors and service providers who have a business need for access, and who are subject to confidentiality obligations.

In addition, we limit access to your Personal Information to employees, agents, contractors, our affiliated companies or service providers, and other third parties who have a business need for access.

We have put in place procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Access to and correction of your Personal Information

We take reasonable steps to ensure that the Personal Information we handle is accurate, complete and up-to-date. If you become aware of any errors in your Personal Information or, if you change your Personal Information, please let us know.

You can request access to any Personal Information we hold about you at any time, including where you believe it to be inaccurate, incomplete, or out of date. However, please be aware that from time to time we may need to reject your request to access Personal Information we hold about you, if we believe such rejection to be necessary and to the extent allowed by law.

To request access to and correction of any Personal Information that we may hold about you, please contact our Privacy Officer using the contact details at the bottom of this Privacy Policy. Depending on the nature of your request and where permitted by law, we may charge a small fee for complying with your request.

If we do not agree to amend your Personal Information, you may request that we make a note of your requested correction with the information we hold about you. If we do not provide you with access to any of your Personal Information, or do not correct any of your Personal Information, we will provide you with our reasons.

You may also contact our Privacy Officer if you wish to obtain further information regarding our privacy practices and the way we handle your Personal Information. For more information regarding privacy, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

Information retention

We are subject to legal and regulatory requirements in relation to the retention of information collected under this Privacy Policy. For more information in relation to these requirements, please contact our Privacy Officer or the OAIC website referenced above.

Third party products and platforms

From time to time, we may provide you with links or access to third party products and platforms. Although these products and platforms may be operated by our affiliated companies or service providers, they operate independently from us and may be subject to alternative terms of use, including terms concerning use of your Personal Information. We have not necessarily reviewed these third-party products and platforms, and we do not control and are not responsible for any of these products or platforms, their content or their privacy policies. If you decide to access or interact with any of the third-party products or platforms, you do so at your own risk.

Complaints

We take your privacy concerns seriously. If you have a complaint regarding our handling of your Personal Information or concerning our privacy practices, you may file a complaint with our Privacy Officer using the contact details set out at the bottom of this Privacy Policy. Our Privacy Officer will confirm receipt of your complaint. If our Privacy Officer believes an investigation is necessary, we will open an investigation into your complaint. Our Privacy Officer may need to contact you to request further details of your complaint. If an investigation has been opened following a complaint made by you, our Privacy Officer will contact you with the result of that complaint as soon as possible.

In the unlikely circumstances we are unable to resolve your complaint to your satisfaction, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Contact us

If you have any questions about this Privacy Policy, our privacy practices or if you would like to request access to, or correction of, any Personal Information we hold about you, please contact our Privacy Officer:

Email: antong@wbi.co.nz

Phone: +64 9 360 9450

Address: Level 2, 20 Beaumont Street, Freemans Bay, Auckland, 1010.

This Privacy Policy was last updated on 18 June 2026.