Invested Talent Pty Ltd (ABN 25 668 799 193) (“Invested Talent”, “we”, “us”, “our”) is a recruitment agency operating in financial and professional services, including funds management, fintech, wealth management, private credit and asset management. This policy explains how we collect, hold, use and disclose personal information, and it applies to candidates, clients, hiring managers, referees, referrers and website visitors.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our information security management system is certified to ISO/IEC 27001, covering the systems and processes we use to store and protect the personal information described below.
1. Information we collect
Candidates
- Name, contact details, location and right-to-work status
- CV, work history, qualifications and salary expectations
- Interview notes, assessment records and our correspondence with you
- Referee names and contact details, and the references they provide directly to us
- Information from publicly available professional profiles, such as LinkedIn
We do not conduct third-party background or police checks. Where a client requires this for a specific role, it is arranged directly between the client and candidate, and we do not hold the results.
Clients and hiring managers
- Business contact details and role requirements
- Correspondence, briefing notes and feedback on candidates
Contractors on our payroll
- Payroll, superannuation and tax file details required to process pay
- Timesheets and placement records
Website visitors
- IP address, browser and device type, pages viewed, and referral source
2. How we collect it
- Directly from you, when you apply, register, upload a CV or contact us
- From referees you nominate
- From clients, in relation to a specific role or engagement
- From publicly available sources and professional networks
- Automatically, via cookies when you use our website
3. Why we use it
- To match candidates with roles and present candidates to clients
- To verify identity, qualifications, right to work and references
- To manage contractor payroll, including tax and superannuation obligations
- To communicate with you about opportunities, applications and our services
- To operate, secure and improve our website
- To meet our legal, tax and regulatory obligations
4. Who we share it with
- Prospective employers we are recruiting for, once we have discussed the role with you
- Service providers supporting our recruitment software, website, payroll and communication tools, bound by contract to protect your information
- Regulators and government bodies, including the ATO and Fair Work, where legally required for payroll and tax purposes
- Professional advisers, such as our accountant and lawyer, where necessary
We do not sell personal information, and we do not disclose it to third parties for their own marketing purposes.
5. Data storage and security
Personal information is stored and processed using the following third-party platforms, each of which maintains its own privacy policy and data security standards:
- JobAdder (recruitment CRM/ATS) — jobadder.com/privacy-policy
- Microsoft 365 (email, calendaring and document storage) — microsoft.com/en-us/privacy
- Xero (accounting and invoicing) — xero.com/privacy
- Refari (website platform) — refari.co/privacy-policy
Each provider is responsible for their own data handling practices. We encourage you to review their privacy policies directly.
We retain personal information for as long as reasonably necessary to fulfil the purposes described in this policy, including ongoing candidate representation, client relationship management, and to meet legal, accounting, or reporting obligations.
Candidate records are retained for as long as we reasonably believe they may be useful in connecting candidates with future opportunities, including CVs, contact details, and notes on role history and preferences. If you would prefer we not retain your information, you can ask us to delete it at any time (see Section 7).
Client records are retained for the duration of our commercial relationship, plus a further 7 years, consistent with standard record-keeping practice for tax and corporate purposes.
Where personal information is no longer required, we take reasonable steps to destroy or de-identify it.
No system is completely secure. If a data breach involving your information meets the threshold under the Notifiable Data Breaches scheme, we will notify affected individuals and the OAIC as required.
6. Cookies
Our website uses cookies to keep the site working properly and to understand how it is used. You can manage cookie preferences through your browser settings at any time.
7. Your rights
Under the Australian Privacy Principles, you can ask us to:
- Access the personal information we hold about you
- Correct information that is inaccurate or out of date
- Delete your information, subject to our statutory retention obligations
We will respond to requests within a reasonable timeframe and may need to verify your identity first. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Changes to this policy
We review this policy annually and whenever our data handling practices materially change. The date at the top of this page reflects the last update.
Contact us
