Privacy Policy

1. Introduction

Core Intelligent Solutions Pty Ltd (ABN 40 641 552 356), trading as Core Software (“we”, “us”, “our”), is committed to protecting the privacy of personal information we collect, hold, and handle. This Privacy Policy explains how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”) in relation to information collected through our website (www.coresoftware.au) and our products and services.

By using our website or engaging our services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information collected automatically

When you visit our website, we automatically collect certain information, including:

• IP address and approximate location
• Device, browser, and operating system details
• Pages and content viewed, links clicked
• Date and time of visit, referring URL

2.2 Information you provide

We collect personal information you submit through forms on our website, by email, by telephone, or in the course of providing services to you. This may include:

• Name and job title
• Email address and phone number
• Company name and website
• Country of residence or operation
• Number of employees
• Any other information you provide voluntarily

2.3 Information from third parties

We may receive personal information from third parties, including business partners, service providers, and publicly available sources. We treat any such information in accordance with this Privacy Policy.

2.4 Sensitive information

We do not knowingly collect sensitive information (as defined in the Privacy Act 1988 (Cth)) directly from individuals through our website or marketing channels without explicit consent. Where sensitive information is processed in the course of delivering payroll, HR, or outsourced services on behalf of our clients, this is handled in accordance with section 3 below.

3. Information Processed on Behalf of Clients

In delivering payroll, HR, outsourced services, and platform services (including SaaS platforms such as CoreIntel) to our enterprise clients, Core Software acts as a data processor on behalf of those clients. This means we may handle personal information about our clients’ employees, contractors, and personnel, including:

• Names, contact details, and identification information
• Employment records and job role information
• Payroll and remuneration data
• Tax file numbers, banking details, and statutory information
• Leave, attendance, and time records
• Performance, training, and HR-related records
• Operational, commercial, and performance data submitted to our platforms in the course of delivering services, including platform user identifiers, access logs, and any user-contributed content

Some of this information may include sensitive information (as defined in the Privacy Act 1988 (Cth)). Examples include health information used for leave management, union membership for payroll deductions, and other categories required by law or by the agreed scope of services. Such information is processed only where authorised by the client and as required under applicable employment, tax, or regulatory law.

We process this information solely on the documented instructions of the client, in accordance with our written agreement, applicable laws, and the policies of the underlying platforms and infrastructure providers (including Deel Local Payroll powered by PaySpace for managed payroll services, and Supabase for our hosted platform services such as CoreIntel). The client remains the data controller and is responsible for the lawful basis of collection, the rights of the data subjects, and providing applicable privacy notices to its personnel. Core Software does not use this information for its own purposes.

Where you are an employee or representative of a Core Software client and have questions about how your information is handled, please contact your employer in the first instance.

4. How We Use Your Information

We use personal information for purposes including:

• Communicating with you about our services, your enquiries, and support
• Providing, improving, and customising our products and services
• Sending updates and marketing communications, with the ability to opt out at any time
• Maintaining records and analysing website usage and trends
• Complying with our legal and regulatory obligations
• Enforcing our terms and protecting our legal rights

5. How We Share Your Information

We may share personal information with:

• Service providers who assist us in operating our website and delivering services, including hosting, analytics, payment, and communications providers
• Payroll and HR platforms, including Deel Local Payroll (powered by PaySpace) for managed payroll services
• Platform infrastructure providers, including cloud database hosting providers (such as Supabase, with primary data hosting in Tokyo, Japan) for our SaaS platforms such as CoreIntel
• AI service providers used for narrative generation and analytical functions within our platform services (such as Anthropic). Data submitted to these providers is not used for AI model training and is processed under contractual confidentiality and retention limits aligned with this Privacy Policy.
• Approved consultants and contractors engaged by Core Software to deliver agreed services, under appropriate confidentiality and data protection obligations
• International vendors supporting specific client engagements, with appropriate safeguards in place
• Business partners involved in delivering services to you
• Authorities, where required by law or in response to valid legal requests
• A successor entity in the event of a sale, merger, or restructure of our business

We do not sell personal information.

6. Overseas Data Transfers

Our website is hosted on the Netlify platform, with content delivered globally through Netlify’s content delivery network. Our SaaS platform services (such as CoreIntel) are hosted on Supabase infrastructure, with primary data hosting located in Tokyo, Japan (Asia-Pacific region). Some of our other service providers and partners operate outside Australia. By using our services, you acknowledge that your personal information may be stored or processed in jurisdictions outside Australia, including the United States, the European Union, Japan (Asia-Pacific), and other locations where our service providers operate. We take reasonable steps to ensure overseas recipients handle your information consistently with the APPs, including through written contracts and the policies of the underlying platforms and infrastructure providers.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies, including those set by our hosting platform (Netlify), for purposes such as maintaining session continuity, analytics and usage reporting, and improving site performance and user experience.

You can control cookie behaviour through your browser settings. Note that disabling cookies may affect the functionality of the website.

8. Data Storage and Security

Personal information is stored on secure servers operated by our hosting and service providers. We implement reasonable technical and organisational measures to protect personal information against unauthorised access, modification, disclosure, or destruction, including:

• Encryption of data in transit and at rest, using industry-standard protocols
• Access controls based on the principle of least privilege, with role-based permissions for our personnel
• Vendor security assessments to ensure third-party processors meet appropriate security and confidentiality standards
• Incident management procedures, including timely identification, containment, and notification of any data security incident in accordance with the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme
• Staff training on privacy and data protection obligations
• Regular review of our security practices and policies

However, no electronic transmission or storage system is completely secure, and we cannot guarantee absolute security. If you believe a security incident has occurred involving your personal information, please contact us immediately using the details below.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, or to resolve disputes and enforce our agreements. Once personal information is no longer needed, we securely dispose of it.

10. Your Rights

Under the Australian Privacy Principles, you have rights including:

• Access – to request access to the personal information we hold about you
• Correction – to request that we correct inaccurate or incomplete information
• Anonymity and pseudonymity – where lawful and practicable
• Complaints – to make a complaint about how we have handled your personal information

To exercise these rights or make a complaint, please contact us using the details in section 15. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

11. Direct Marketing

We may send you marketing communications about our services. You can opt out at any time by following the unsubscribe instructions in any communication or by contacting us directly using the details in section 15.

12. Children’s Privacy

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will delete it promptly.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available at www.coresoftware.au and will take effect from the date of publication shown above. We encourage you to review this Privacy Policy periodically.

15. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact us: