Privacy Policy

Effective Date: June 2025

Last Updated: March 2025

Cultural Nexus Indigenous Corporation (Australian Business Number: 14 905 985 838 | Indigenous Corporation Number: 10462) and its subsidiaries, including Indigenous Job Match (IJM) and PNG Careers (collectively, “CNIC”, “we”, “us”, “our”), are committed to protecting the privacy and confidentiality of personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, disclose, and manage personal information, including culturally sensitive and identity-based data relating to Aboriginal and Torres Strait Islander peoples and Papua New Guinean citizens.

1. Scope

This Policy applies to:

  • All CNIC Group websites, platforms, mobile applications, and programs;

  • Users, clients, employees, contractors, partners, and stakeholders;

  • Information collected online or offline in relation to any CNIC service or engagement.

2. Types of Personal Information We Collect

We may collect the following types of personal information:

  • Full name, email address, phone number, postal address;

  • Date of birth, gender, Indigenous status, cultural affiliation, language group;

  • Employment history, education, resume/CV, skills, references;

  • Payment and transaction details;

  • IP address, device identifiers, and usage logs (for security and analytics purposes);

  • Any other information provided voluntarily through our platforms, surveys, or communications.

We will only collect sensitive information (such as racial or ethnic origin, cultural affiliation, health status, or sexual orientation) with your informed consent and where it is directly relevant to the purpose of the services provided.

3. Collection Methods

Personal information may be collected through:

  • Online forms or account registration on CNIC websites and portals;

  • Email, phone, or face-to-face contact;

  • Resume uploads or job applications;

  • Surveys, workshops, or program participation;

  • Payment processing platforms or third-party integrations (e.g., Stripe, Zoho, Squarespace).

Where lawful and practicable, individuals may interact with us anonymously or using a pseudonym, but this may limit our ability to provide services.

4. Purpose of Collection

We collect, hold, and use personal information for the following purposes:

  • To provide culturally grounded employment, mentoring, or training services;

  • To facilitate recruitment, candidate matching, or job placement;

  • To deliver newsletters, updates, or service-related communications;

  • To process payments, issue invoices, or manage accounts;

  • To meet legal, regulatory, and funding obligations;

  • To promote respectful use of Aboriginal and Torres Strait Islander protocols and safeguard cultural content;

  • For internal research, reporting, and service improvement.

We do not sell or trade personal information to third parties.

5. Disclosure of Information

We may disclose personal information to:

  • Employers, organisations, or mentors where the user consents to be referred;

  • Third-party service providers (e.g., Zoho, Squarespace, Google Workspace, Stripe) who help us operate securely and effectively;

  • Government agencies or funding bodies where legally required;

  • Legal or professional advisors under confidentiality obligations;

  • Entities within CNIC Group and authorised staff on a need-to-know basis.

Where personal information is disclosed to third parties, we take reasonable steps to ensure compliance with this Policy and applicable Australian laws.

6. Cross-Border Disclosure

Personal information may be stored or processed in secure data centres located outside of Australia by approved third-party providers (e.g., Zoho, Google). We ensure that overseas data handling complies with APP 8 and that those providers maintain security standards consistent with Australian requirements.

7. Data Storage and Security

We take all reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification, or disclosure. Measures include:

  • Secure cloud infrastructure with end-to-end encryption;

  • Two-factor authentication (2FA) on all systems;

  • Role-based access controls;

  • Regular security audits;

  • Secure disposal of data when no longer required.

8. Access and Correction

You have the right to:

  • Access the personal information we hold about you;

  • Request correction of inaccurate, outdated, or incomplete information.

Requests can be submitted to admin@cnic.com.au, and we will respond within a reasonable timeframe, usually within 30 days.

9. Complaints

If you believe we have breached your privacy rights, you may lodge a complaint in writing to:

CNIC Privacy Officer

📧 Email: admin@cnic.com.au

We will investigate and respond to your complaint in writing. If you are unsatisfied, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Changes to this Privacy Policy

We reserve the right to review and amend this Privacy Policy at any time. The latest version will always be available on our official website(s). Continued use of our Services after changes constitutes acceptance of the revised terms.

11. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our handling of your personal information, please contact:

Cultural Nexus Indigenous Corporation (CNIC)

Email: esolien@cnic.com.au