Menu
1300 267 300
1300 267 300
Jump to a section ▼

Privacy – Collection Notice

As part of our compliance with the Australian Privacy Principles (APPs), Cornerstone Medical Recruitment (cmr) requests you read the following information outlining how we collect your personal and sensitive information and how we maintain, use, store and disclose your personal and sensitive information in connection with your possible or actual work placements and/or otherwise in connection with your interactions with cmr.

We may collect personal or sensitive information about you when:
  • We receive an enquiry from you about a job on our website or third-party platforms –
  • We receive a completed registration on-line form from you –
  • We receive an enquiry from you via email or telephone –
  • We receive a reference about you –
  • We receive information about you when you become a temporary worker for cmr –
  • We make enquiries about you to any former employers, work colleagues, professional associations or registration body –
  • We receive your completed health information, work rights checks, credit or criminal history checks –
  • We receive any complaint or other information from or about you in the workplace or otherwise –
  • We receive any information about any insurance investigation, litigation, registration or professional disciplinary matter, criminal matter, inquest or inquiry in which you were involved –
  • We collect information about you from public domain sources –
Your personal and sensitive information may be used in connection with
  • Your actual or possible work placement –
  • Career guidance or management –
  • Our assessment of your performance and prospects or any training needs –
  • Any test or assessment (including medical tests and assessments) that you might be required to undergo –
  • Informing you of possible work opportunities or other events such as training or information sessions or our direct marketing to you by email/SMS by cmr –
  • Any workplace Rehabilitation –
  • Our management and resolution of any complaint, inquiry or investigation in which you are involved –
  • Any insurance claim or proposal that requires disclosure of your personal or sensitive information –
  • Using checks to verify work rights status, criminal history and any other background checks –
  • For research, benchmarking and statistical analysis –
If you do not give us the information we seek;
  • We may be limited in our ability to locate suitable work for you –
  • We may be limited in our ability to place you in work. –
Your personal and sensitive information may be disclosed to;
  • Potential and actual employers and clients of cmr and trusted third parties, who may be based outside Australia. –
  • Referees –
  • External providers used in providing our services to you, e.g. – on-line inductions and training providers, background checking agencies (e.g. work rights, criminal record checks) –
  • Third party outsourced IT, including cloud-based storage providers, and document storage providers where we have an appropriate processing agreement (or similar protections) in place providing us with specialised and efficient database management, development and storage who may be based offshore –
  • Marketing technology platforms and suppliers who assist us with the provision of marketing communications to you and customer feedback survey providers –
  • Third parties used by our clients as part of their recruitment, administration, screening and selection processes –
  • Our insurers –
  • A professional association or registration body that has a legitimate interest in the disclosure of your personal and sensitive information –
  • A workers compensation body –
  • Any person or organisation with a lawful entitlement to obtain the information –
  • If cmr merges with or is acquired by another business or company in the future, (or is in meaningful discussions about such a possibility) we may share your personal data with the (prospective) new owners of the business or company –
  • Artificial Intelligence Tools such as algorithms or machine learning (including those provided by third parties) –

For any disclosures outside Australia, as the case may be, we take reasonable steps to ensure that the recipients of such information do not breach the APPs in relation to that information. We will take reasonable steps to ensure, for instance pursuant to a contractual agreement, that your personal information receives an adequate level of protection, for example your information will be stored on secure servers that are protected in controlled facilities. We have put in place appropriate procedures with third parties we share your personal information with to ensure that (a) your personal information is treated by those third parties in a way that is consistent with and which respects the privacy laws of Australia and (b) will only use your information for the purpose of providing services to cmr and will not use your information for any other purpose.

Additional information contained in our Privacy Policy

Our Privacy Policy is located on our website, cmr.com.au and contains further information about the type of information we hold and how we manage your information, including how you can, subject to some exemptions, access personal and sensitive information about you that we hold and request it to be corrected. It also sets out how you can complain about any alleged breaches of the APP and how we will deal with any complaints.

Changes to our Privacy Notice

If at any time our Privacy Notice or Privacy Policy changes, the updated details will be available on the Privacy Policy on our website. Any information we hold about you will be governed by the most current version of the Privacy Policy.

Contact Details

The Privacy Officer
Cornerstone Medical Recruitment
Level 3/100 Brookes Street
Fortitude Valley QLD 4006

PO Box 596
Fortitude Valley QLD 4006
Email: privacy@cmr.com.au
Ph: 1300 267 300

Privacy Policy

Your privacy is important to us, and we are committed to being open and transparent in informing you how we collect, maintain, store, use and share your personal information we hold. We also want to ensure you can access, amend or delete your personal information where it is lawfully possible to do so.

Cornerstone Medical Recruitment (cmr) is bound by the Privacy Act 1988 (Cth) (the “Privacy Act”) and the Australian Privacy Principles (APPs) and manages your personal information in accordance with the Privacy Act and the APPs. Any personal information collected by us is covered by this policy, so it is important that the following information is easy to understand.

This policy is always available on our website and can be updated to reflect changes we have made through our governance and review process. It is important that you regularly check our policy to make sure you are up to date with any changes.

Types of personal information held by cmr, when and how it is collected

Our Privacy Policy applies to personal information of candidates, temporary workers, clients, suppliers, website users, third parties, referees, and emergency contacts.

Personal information for cmr purposes includes information relating to your contact details, work experience, qualifications, aptitude test results, opinions about your work performance (e.g. references), incidents at the workplace, and other information obtained or received by us in connection with our recruitment services.

Sensitive Information is a special category of personal information under the Privacy Act. It is information or an opinion about you, including membership of a professional trade association or membership of a trade union, criminal record, health information, racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, or sexual preferences or practices. Sensitive information can, in most cases, only be disclosed with your consent as per the Privacy Act.

cmr collects personal information that is necessary for providing our recruitment services and is collected by lawful and fair means and is optional.

Candidates and temporary workers collection

We may collect personal or sensitive information about you when:
  • We receive an enquiry from you about a job on our website or third-party platforms –
  • We receive a completed registration on-line form from you –
  • We receive an enquiry from you via email or telephone –
  • We receive a reference about you –
  • We make enquiries about you to any former employers, work colleagues, professional associations, or registration body –
  • We receive your completed health information, work rights checks, credit or criminal history checks. –
  • We receive any complaint or other information from or about you in the workplace or otherwise –
  • We receive any information about any insurance investigation, litigation, registration or professional disciplinary matter, criminal matter, inquest or inquiry in which you were involved –
  • We collect information about you from public domain sources –

Purposes and use for which we collect personal information

Your personal and sensitive information may be used in connection with:
  • Providing our recruitment services to you –
  • Providing temporary workers with payroll and placement services –
  • Matching your coded details with job vacancies, our database information, to assist us in finding a position that is most suitable for you and to send your personal information to clients in order to apply and match you to jobs –
  • Providing clients with information about you before and during a placement, including qualifications, licences, checks (including sensitive information checks where you have consented), immigration and work rights status, and other personal information you have provided to us –
  • Assessing information from a referee –
  • Informing you of any job opportunities, relevant to candidates, or other events such as training or information sessions or our direct-marketing to you by email, SMS, or other electronic communication by cmr –
  • Any work-related injury or rehabilitation –
  • Any insurance claim or proposal that requires disclosure of your personal or sensitive information –
  • Our management and resolution of any complaint, inquiry or investigation in which you are involved –
  • Using checks to verify work rights status, criminal history and any other background checks. –
  • Enabling development and marketing of our services and other related products and to improve our customer service and to make our services more valuable to you, including our website when you log on to make it relevant to you personally –
We may also release personal information to regulatory or law enforcement authorities, if they require us to do
so;
  • To meet or comply with any legal, regulatory or statutory requirements relating to the provision of our services and to make disclosure under the requirements of any applicable law, legislation, rule, ruling, regulation, direction, court order, by-law, guideline, circular or code (collectively “laws”) applicable to us –
  • For research, benchmarking and statistical analysis; and –
  • We may also seek your consent to collect, hold, use and disclose your personal information for any other purpose not listed above –
If you do not give us the information we seek;
  • We may be limited in our ability to locate suitable work for you –
  • We may be limited in our ability to place you in work –

Disclosures

We may disclose your personal information (including to trusted third parties) for the purposes for which it is primarily held or for a related secondary purpose and in some cases, we may only disclose information with your consent. Your personal and sensitive information may be disclosed to:
  • Provide clients with information about you before and during a placement, including qualifications, licences, checks (including sensitive information checks where you have consented), immigration and work rights status, and other personal information you have provided to us; –
  • cmr staff within Australia –
  • Referees –
  • Emergency contacts in the event of an accident or emergency –
  • External providers used in providing our services to you, e.g. – online inductions and training providers, background checking agencies (e.g. work rights, criminal record) –
  • Third party outsourced IT, including cloud-based storage providers, and document storage providers where we have an appropriate processing agreement (or similar protections) in place providing us with specialised and efficient database management, development and storage who may be based offshore –
  • Marketing technology platforms and suppliers who assist us with the provision of marketing communications to you and customer feedback survey providers –
  • Third parties used by our clients as part of their recruitment, administration, screening and selection processes –
  • Internal and external auditors of cmr or our clients when we are required to share this data with them upon their request in order to comply with our contractual or regulatory obligations –
  • Third parties who assist us in developing services and processes to optimise and improve the quality and efficiency of recruitment service –
  • Third party contractors/service providers, job boards, job platforms, job aggregators, software providers and cloud-based databases for the purposes of assisting us to provide you with our services, and/or improve the services we offer you. Such service providers may be based outside of Australia –
  • Our insurers –
  • A professional association or registration body that has a legitimate interest in the disclosure of your personal and sensitive information –
  • A workers compensation body –
  • Any person with a lawful entitlement to obtain the information –
  • If cmr merges with or is acquired by another business or company in the future, (or is in meaningful discussions about such a possibility) we may share your personal data with the (prospective) new owners of the business or company –
  • Artificial Intelligence Tools such as algorithms or machine learning (including those provided by third parties) –

For any disclosures outside Australia, as the case may be, we take reasonable steps to ensure that the recipients of such information do not breach the APPs in relation to that information. We will take reasonable steps to ensure, for instance pursuant to a contractual agreement, that your personal information receives an adequate level of protection, for example your information will be stored on secure servers that are protected in controlled facilities. We have put in place appropriate procedures with third parties we share your personal information with to ensure that (a) your personal information is treated by those third parties in a way that is consistent with and which respects the privacy laws of Australia and (b) will only use your information for the purpose of providing services to cmr and will not use your information for any other purpose.

Use of Artificial Intelligence

We also sometimes use automated systems such as filtering tools or occasionally more complex tools which use an element of artificial intelligence, such as algorithms or machine learning (including those provided by third parties), to help us quickly, efficiently and more accurately to analyse data we have about you and other Candidates, and this ultimately helps us to make decisions based on this data. This can include applying tools which use algorithms (such as filtering tools or machine learning) to Candidate personal data.

Clients and Suppliers

Clients: if you are a cmr client, we need to collect and use information about you, or individuals in your organisation, in the course of providing you or offering our services.
We collect client personal data that we receive from you or collect or receive from other sources. Personal information from other sources may include third party market research and by analysing online and offline media. To the extent you access our website or read or click on an email from us, where appropriate and in accordance with any applicable laws and requirements, we will also collect your data automatically or through you providing it to us.

The main reason for using information about clients is to contact you about our services and to ensure the contractual arrangements between us can properly be implemented so that our relationship can run smoothly. This will involve providing you with our various recruitment and related services and/or providing services to your employees. The more information we have, the more effectively we can tailor our services for you.

We manage your data in order to facilitate this by:
  • Storing and updating your details on our database, so we can contact you in relation to our recruitment activities –
  • Keeping records of our conversations and meetings, so we can provide targeted services to you –
  • Undertaking customer satisfaction surveys –
  • Processing your data for the purpose of targeting appropriate marketing campaigns for our services, to do this we use marketing technology platforms –

Suppliers: We need a small amount of information from our suppliers to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly and comply with legal requirements. We need contact details at your organisation so that we can communicate with you.

We also need other information such as your bank details so that we can pay for the services you provide (if this is part of the contractual arrangements between us).

We use your data in order to facilitate this by:
  • Storing and updating your details on our database, so we can contact you in relation to our agreement activities –
  • Offering services to you or to obtain support and services from you –
  • Performing certain legal obligations –
  • Helping us to target appropriate marketing campaigns –

For Referees: we have collected personal information about you for the purpose of contacting you to provide a reference as nominated by our candidate.

For Emergency Contacts: we have been provided with your personal information which is held on our database and will only contact you to notify you of an accident or emergency relating to the candidate who has selected you as their contact. We will not use your information for any other purpose.

For both our Clients and Suppliers, for any disclosures outside of Australia, as the case may be, we take reasonable steps to ensure that recipients of such information do not breach the APPs in relation to that information. We will take reasonable steps to ensure, for instance pursuant to a contractual agreement, that your personal information receives an adequate level of protection, for example your information will be stored on secure servers that are protected in controlled facilities. We have put in place appropriate procedures with third parties we share your personal information with to ensure that (a) your personal information is treated by those third parties in a way that is consistent with and which respects the privacy laws of Australia and (b) will only use your information for the purpose of providing services to cmr and will not use your information for any other purpose.

Management of Personal Information

At cmr we train our staff to understand and respect the confidentiality of customer information and the privacy of individuals. cmr regards breaches of your privacy as a serious matter and any breach will result in disciplinary action being taken, dependent upon severity. cmr has appointed a Privacy Officer to ensure that our management of personal information is in accordance with this Policy and relevant Privacy Acts.

How do we store and protect personal information

Safeguarding the privacy of your information is important to us, whether you interact with us personally, by phone, email, mail, over the internet or other electronic medium. We hold personal information in cloud storage and take such steps as are reasonable in the circumstances to protect the personal information we hold from misuse, interference and loss, unauthorized access, modification or disclosure. We may need to maintain records for a significant period of time. However, when we consider information is no longer needed, we will remove any details that will identify you or we will securely destroy the records.

How do we keep personal information accurate and up to date?

cmr takes reasonable steps to keep personal information it holds and discloses, accurate and up to date, complete, relevant and not misleading. We recognise that information changes frequently with changes and other personal circumstances. We will send you reminders to update your personal information and also give you the opportunity to update any changes when we send you marketing information. If you choose you no longer want cmr to hold your personal information, please notify our Privacy Officer and we will update your status unless we are required to retain personal information related to you as and where required by law.

If you have created an account with cmr via our website on any of our platforms, you are able to review and edit your personal information at any time by logging into your account and reviewing your profile. You can request your personal information is destroyed or de-identified by contacting our Privacy Officer who will review your request and take steps to destroy or de-identify you unless we are required to retain personal information related to you as and where required by law.

General information collected from visitors to our website

cmr gathers information about all our website users collectively, such as what areas users visit more frequently and what services users access the most. We only use such data anonymously and in the aggregate. This information helps us determine what is most beneficial for our users, and how we can continually create a better overall experience for you. We will not disclose information about your individual visits to the cmr website.

Your personal information collected on the cmr.com.au website

There will be some instances, where we may need specific information about you, such as name, address, email address, telephone number etc. We will collect this information if you apply for a job or sign up for our services via our website. We may also ask you for other information such as the types of jobs you are interested in and your workplace concerns in order to provide you with a quality service and internet experience.

Cookies

What is a Cookie? A “Cookie” (or similar technology such as tracking pixel) (“Cookie”) is a very small text file that is placed on our device when you visit a webpage or open an email, and which records your behaviour (such as navigation of a website).

Cookies are used to enhance your use of the various cmr digital channels, for example by enabling us to present tailored content and options based on the information stored about your last visit. Cookies can also be used to analyse traffic and for advertising and marketing purposes.

Cookies are either:

Session Cookies – only stored on your device during your browser session and automatically expire when you close your browser.

Persistent Cookies – is stored on your device in between browsing sessions and so it remains there when you close your web browser. The cookie can be read by the website that created it when you visit the website again.

Cookies can be categorised as:

Strictly required cookies: Essential to the website to use it effectively and cannot be turned off. You cannot use our website without these cookies being turned on.

Functionality Cookies: Enable us to monitor and improve the performance of our website. For example, count visits, identify traffic sources and what has been most popular. These cookies allow our website to remember choices you make and provide enhanced features.

Advertisement Cookies: Help us to advertise details of potential job opportunities that we think may be of interest. These cookies are persistent (while you are registered with us) and mean that when you log in or return to the website, you may see advertising for jobs that are similar to jobs that you have previously browsed.

How do we use Cookies?

Cookies are used by nearly all digital channels and do not harm your system. We use them irrespective of whether you interact with cmr via our website, an app or other digital channel, and regardless of whether you are a Candidate, Temporary Worker, Client, Supplier, Website user or someone else.

Retargeting

Advertising cookies are used on our website to tailor marketing to you and your interests and provide you with a more personalised service in the future. These cookies remember you visited our website, and we may share this information with third parties, such as advertisers. Although these cookies can track your devise’s visits to our website and other sites, they typically cannot personally identify you. Without these cookies, the advertisements that you see may be less relevant and interesting to you. We may use retargeting to show you advertisements on other websites and apps based on your activity on our website. This is done by using cookies or similar technologies to track your browsing history. You can opt-out of retargeting by adjusting your browser settings or visiting Facebook’s Ad Preferences page and Google Marketing Platform opt-out page or the Network Advertising Initiative opt-out page. By using our website, you consent to our use of retargeting as described in this Privacy Policy.

How to reject a Cookie?

If you want to check or change what types of Cookies you accept, this can usually be altered using the privacy settings within your browser, or you can do so very easily using the “Cookie Preferences” link at either the top or bottom of the website. Please note that if you access cmr services across multiple devices, you may need to adjust your settings via the Cookie Preferences link on each of your devices.

Access, Correction, Destroy or De-Identify your data you have given to us

If you want to access, update, amend, destroy or de-identify your personal information held at cmr, you can do so by contacting our Privacy Officer by emailing them at privacy@cmr.com.au or as set out below. When we receive a request from you, we will ask you to verify your identity to protect your privacy.

If you make your request for access, update or, destruction or de-identification, other than by emailing our Privacy Officer directly, we will ask you to do so in writing via email. We will aim to acknowledge receipt and finalise your request no later than 30 days. There may be instances where it is not possible to resolve your request in this timeframe due to the nature of your request.

Access

If your request is for access to your personal information, we will assess your request and provide you with access via a secure method where we are lawfully permitted to do so. We may also refuse your request if lawfully permitted and will give you the reasons both verbally and in writing via email.

Correction

Where you request your personal information to be corrected and there is a dispute about the facts, we will make a note on your personal information.

Destruction or De-identification

If you request the destruction or de-identification of your data, please be aware that we may not be required or able to do so, particularly where your file holds information about our clients, or you have been placed by cmr into a position and we need to retain your information for our compliance purposes, or you have been engaged or employed by us as a Temporary Worker and we are require by law to retain certain information for our legal data retention purposes. We reserve the right to charge an administrative fee for access and updating requests.

Cease contact with you

You may also request that cmr stops using your information and contacting you and we will comply with your request. For example, if at any time you would prefer to stop receiving newsletters, information or marketing updates from us, please use the “unsubscribe” option included in the email or other material you are sent. If there is no unsubscribe or you have already unsubscribed and continue to receive information, please email our Privacy Officer at privacy@cmr.com.au.

How long do we keep your personal data?

We set out below the retention practices that we apply to certain categories of people.

Candidates

We will review your personal data on a regular basis to ascertain its relevance and determine if there has been or is likely to be any subsequent meaningful contact with you, (or where appropriate, the company you are working for or with). At the time of our review, it may be likely that your personal data will no longer be relevant for the purposes for which it was collected. Alternatively, we may keep your personal data in good faith for a longer period if we believe that we need to do so, such as our obligations to the Australian Taxation Office, Fair Work obligations or in connection with any anticipated litigation or if our insurances require us to do so.

We consider meaningful contact with you to mean you have submitted your CV to us via our website, take part in our online training, communicate with us about potential roles (either verbal or written communication), or click through from any of our marketing communications. Your receipt, opening or reading of an email or other digital message from us will not count as meaningful contact for these purposes, where you click-through or reply directly. We will only deem that we have had meaningful contact with you if there is positive action on your part.

Temporary Workers

If we employ or engage you as a Temporary Worker directly, we will have ordinarily processed your data throughout the course of your Temp relationship and will then retain it for a period after we have parted ways. The precise length of time will depend on the type of data, our legitimate business needs and other legal or regulatory rules that may require us to retain it for certain minimum periods. For example, for taxation and superannuation reporting or responding to taxation and superannuation queries.

If you are a Temporary Worker cmr will also continue to process your data as a Candidate through the duration of your Temporary relationship and thereafter.

Clients and Suppliers

If you are a Client or Supplier we will retain your personal data in order to provide you with services or to receive services from you, or to provide you with information about our services that we believe you may be interested in.

If you have expressly indicated that you are not interested in our services, then we will delete your personal data from our Systems unless we believe in good faith that we need to preserve the data, for example because of our obligations with state or federal taxation or in connection with any anticipated litigation.

Website Users

If you are a website user, we will retain your IP address and any other information that is required to operate the website.

Other Category of People

We will retain your data for as long as necessary to achieve the purpose for which it was collected or processed for. If this time has come or you have expressly indicated that you are not interested in one of our services anymore, we will delete it from our systems unless we believe in good faith that we need to preserve the data, for example because of our obligations with state or federal taxation or in connection with any anticipated litigation.

Feedback

We welcome your feedback which can be provided to cmr in several ways including our website where you can submit feedback, under the ‘Contact Us’ section. Any feedback submitted through our website becomes the property of cmr. We may use this feedback, such as success stories or responses to surveys, for marketing purposes, or to contact you for further feedback on the site. You can also provide feedback about this Privacy Policy or any questions or complaint about Privacy to our Privacy Officer at privacy@cmr.com.au

Complaint

At cmr we take your privacy seriously and as soon as we receive your complaint in writing to our Privacy Officer via privacy@cmr.com.au, we will acknowledge receipt of your complaint and aim to have this resolved within 30 days. There may be instances where this is not possible due to the contents of the complaint. In such circumstances, we will respond to your complaint in a reasonable and practicable time. If you are not satisfied with our response to your complaint, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Contact

You can contact our Privacy Officer at:
privacy@cmr.com.au
Cornerstone Medical Recruitment
Level 3/100 Brookes Street
Fortitude Valley Qld 4069
Tel +61 7 3171 2929 (outside Australia)
Tel: 1300 267 300 (within Australia)

Version 3.0 May 2025

POL-010 – Privacy Policy and Collection Notice Download
Memberships:


Cornerstone Medical Recruitment acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respects to Elders past and present.
1300 267 300