Privacy & Cookie Policy

1. Who we are

G'Day Backpacker Jobs ("we", "us", "our") operates the website and job marketplace at https://gdaybackpackerjobs.com.au. For privacy requests contact: hello@gdaybackpackerjobs.com.au.

We are an online marketplace connecting job seekers and employers. We are not your employer, a labour-hire agency, or a migration agent.

2. What we collect

Depending on how you use the Platform, we may collect:

• Account data: email, password (stored hashed), role (job seeker / employer / admin), verification status, login timestamps, and records of your agreement to our Terms and this Policy (see section 12).
• Job seeker profile: name, phone, nationality, location/state/city, visa type and related visa fields you choose to provide, bio, skills, languages, preferences, photo, CV/resume file.
• Discoverability opt-in: if you enable "open to employers" (or similar), eligible employers may see limited profile details to invite you to roles. This is off by default unless you opt in.
• Employer / organisation data: business names, ABN, contact email, verification status, job listings, applicant handling.
• Applications & activity: job applications, saved jobs, messages, reports, notifications, and related metadata.
• Partner referral data: if you submit a Just Australia (or similar) partner form: name, email, phone, location, service interest and any extra detail you type. See section 5.
• Payment data (employers): payments are processed by Stripe. We do not store full card numbers. We may store payment status, plan/tier, and Stripe session or customer references needed for billing support.
• Usage stats: page path, an anonymous visitor id stored in your browser, the referring website, device type (phone / tablet / desktop), and approximate country / city from our host (Vercel). If you search or filter jobs, we store those keywords and filters (not your name or email). We do not store your IP address for this. Site admins see totals and tables, not a profile of you.
• Technical / security data: IP address (e.g. on sessions and legal acceptance records), device / browser info where logged, cookies and similar technologies (see Cookie Policy below).
• Support communications: emails you send to hello@gdaybackpackerjobs.com.au.
• Resume builder drafts: if you use the free resume builder, we do not save your CV. It is used only in the page while you build and download it. Refresh or close the page and it is gone. We do not put it in our job-board database. The next person on this computer cannot see it.

Sensitive / high-impact data: visa status and related fields can be sensitive in context. Provide only what you are comfortable sharing. Employers who receive your application will see the profile/CV you submitted.

3. How we use information

• Create and secure accounts; authenticate sessions
• Match job seekers with jobs and show applications to the relevant employer
• Where you opt in, allow discoverability / invites from eligible employers
• Fulfil partner referrals you request (including sharing with Just Australia as described in section 5)
• Moderate listings, fight fraud/scams, and enforce our Terms
• Process employer payments and plan entitlements
• Send transactional emails (verification, password reset, application notices)
• Keep records of Terms / Privacy acceptance for compliance and dispute handling
• Count page views on our own servers so we can see which pages are used and where visits come from (admin traffic dashboard). This is first-party only — not Google unless you accept analytics cookies
• Comply with law and respond to lawful requests

We do not sell your personal information. We do not use your CV or profile to train public AI models. Photo moderation may use automated checks (including third-party moderation APIs when configured) solely to block unsafe uploads.

4. Who we share with

• Employers: when you apply (and limited profile data if you opt into discoverability).
• Independent partners you choose: currently Just Australia (ABN 23 415 848 825) — see section 5. We share only what is needed to fulfil the referral you requested.
• Service providers who process data on our instructions:
  • Vercel — hosting / application infrastructure
  • Database hosting — PostgreSQL storage of accounts and content
  • Resend — transactional email delivery
  • Stripe — payments
  • Cloudinary (or equivalent) — secure storage of CVs/photos where used
  • Google — optional Google sign-in (OAuth); Google Analytics only if you accept analytics cookies; Google Sheets when used to operate the Just Australia partnership
  • OpenAI (when enabled) — automated photo moderation. Requests are processed and discarded; we do not send resume-builder text to OpenAI.
• Authorities if required by law or to protect users from serious harm / fraud.

5. Just Australia (third-party partner)

If you submit the Just Australia partner discount form, you ask us to collect and share your personal information with Just Australia so they can contact you about the service you selected and honour any G'day partner discount.

We share with Just Australia:

• first name and last name
• email address
• phone number
• whether you are in Italy or Australia
• the service you selected and any extra description you type
• that the lead came from G'day Backpacker Jobs (source) and the date

We do not share your job-board password, CV, visa documents, or payment card details through this form. After the share, Just Australia becomes responsible for how they store and use the data you gave them (including any further documents you send them directly). Their own terms and privacy practices apply to that relationship.

We also keep a copy of the referral in our database for the partnership (status, discount code, consent time and version). Where configured, the same fields may be written to a shared Google Sheet used with Just Australia to track leads and commissions.

This is an overseas disclosure as well as a third-party disclosure: Just Australia operates in Australia and Italy. By submitting the form you consent to that sharing. You can ask us to stop further sharing of new data, but we cannot delete information already received by Just Australia — you must contact them directly for that. See also Terms — third-party partners.

6. Overseas disclosure

Some providers (for example Vercel, Google, Stripe, Resend, Cloudinary) may process data in countries outside Australia (including the United States and others). Just Australia may process referral data in Australia and Italy. By using the Platform (and, for partner forms, by submitting them) you acknowledge that overseas storage/processing may occur. We choose reputable providers and limit what we send to what is needed to run the service.

7. Retention

• Account and profile data: while your account is active. When you close your account we erase profile, CV, photos, messages, saved jobs and application content. We keep only a de-identified stub so the same email can be used to sign up again, plus the limited records below.
• Applications and employer records: kept while the hiring process is active. If a job seeker closes their account, their applications and CV copies are deleted. If an employer closes their account, job ads come down and applicant contact details we stored for that employer are removed.
• Partner referrals: retained for the life of the partnership and a reasonable period afterwards for commission, dispute, and compliance records.
• Legal acceptance records (when you agreed to Terms/Privacy): retained as evidence of contract and consent, including after account deletion where we must keep a limited record.
• Payment records: as required for tax, accounting, and chargeback handling.
• Server/security logs: typically short-lived operational retention.
• First-party usage stats (page views): kept up to 90 days, then deleted.
• Resume builder: we do not store drafts. Refresh or close the page and the text is gone. Leftover keys from an earlier version are deleted automatically.

8. Your rights & deletion

Under the Australian Privacy Act you can request to:

• Access the personal information we hold about you
• Correct information that is inaccurate or out of date
• Request deletion / de-identification of your account data (subject to law)
• Ask questions about how we handle your information
• Lodge a complaint with the OAIC if you are not satisfied with our response

How to close your account: sign in and open My Profile (job seekers) or Company Profile (employers), then use Close account. You can also email hello@gdaybackpackerjobs.com.au from the address on your account with subject "Privacy request". We aim to respond within 30 days. Closing the account erases your profile, CV, photos, company details, messages, saved jobs and notification history, and deletes the files we stored with our media provider. We may keep limited de-identified records where we must (e.g. fraud prevention, unpaid invoices, legal holds, and proof that you accepted the Terms — date and document version, without your name or original email).

You can update most profile fields yourself in your dashboard. Password changes are available when signed in (Settings / Change password where shown). Resume-builder drafts are not stored. Refresh or close the resume builder and the text is gone. You can also tap "Delete my resume data".

9. Security

We use HTTPS, hashed passwords, session controls, access-restricted admin tools, and signed links for sensitive file access where implemented. No online service is 100% secure. Use a unique password and keep login details private. Report suspected account compromise to hello@gdaybackpackerjobs.com.au immediately.

10. Children

The Platform is for users 18+ only. We do not knowingly collect personal information from children. If you believe a minor has created an account, contact us and we will delete it.

11. Marketing emails

We send transactional emails needed to run your account (verify email, password reset, application-related notices). We do not run a separate marketing newsletter by default. The optional jobs-info checkbox on the resume builder is stored only in your browser in this version and is not used to email you unless you later create an account and opt in there. If we introduce promotional emails later, we will ask for consent or provide an unsubscribe, as required.

12. Consent records

When you create an account (email or Google) you must accept these Terms and this Privacy Policy. When you submit a partner form you must accept sharing with that partner. We store:

• that you accepted, and when (date and time)
• which document and version you accepted
• how you signed up (email or Google) or that you used a partner form
• IP address and browser user-agent as a technical record

Site administrators can see these records on your user profile so we can demonstrate that you agreed. That is a compliance record, not a marketing profile.