Privacy

Who we are

This service is operated by Action Workforce Pty Ltd, a subsidiary of Ashley Services Group Limited (ABN 92 094 747 510) ("we", "us", "our") — the data controller for the personal information held here. The service runs on the AgenticAI platform (commercial name Hexis), which processes that information on our behalf as our data processor. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").

Information we collect

We collect personal information you provide directly and information collected in writing or from third parties in the course of engaging you for work — your name, date of birth, gender, contact details, qualifications and employment history, health information where it is relevant to a role or a vocational assessment, payment details, and responses to assessment questionnaires. We also collect technical information such as your IP address, browser type, and device information when you interact with the service.

How we use your information

We use your personal information for course administration, employment processing, vocational assessment, job matching and recruitment, identity verification, communication about employment opportunities, running the workflows the service enables, direct marketing (which you can opt out of at any time), and complying with our legal obligations.

Disclosure of your information

We may disclose your personal information to related entities within the Ashley Services Group, to our service providers (including the platform sub-processors listed below), to prospective and host employers for job matching, and to government authorities where required or authorised by law.

Sub-processors and AI processing

The platform uses a small, fixed set of sub-processors: AWS Bedrock, hosted in Sydney (ap-southeast-2), and Anthropic for AI inference; and SMSGlobal for SMS notifications. For the sovereign IRAP-assessed deployment, AI inference is served from in-region Australian models. We do not sell your personal information.

Cross-border transfers

Data is hosted in the region the customer's deployment was provisioned for. For the IRAP-assessed sovereign deployment, personal information — including AI inference — is processed within Australia and is not moved between deployments. Where a deployment relies on any overseas processing, we take reasonable steps to ensure the recipient handles your information in accordance with the APPs.

Data retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or for as long as the law requires. Employment, payroll and tax records that the Fair Work Act requires us to keep are retained for the statutory period.

Direct marketing and cookies

Where we send you direct marketing you may opt out at any time using the unsubscribe facility in the message or by contacting our Privacy Officer. Our web surfaces use cookies to keep you signed in and to operate the service; you can control cookies through your browser settings.

Data security

We implement appropriate technical and organisational measures to protect your personal information, in both paper and electronic form, against unauthorised access, loss, or misuse. These measures include encryption, tenant-scoped access controls, and regular security assessments. The platform's security posture is described on our Trust & security page.

Your rights

Under the Privacy Act 1988 you have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your personal information, opt out of direct marketing, and lodge a complaint with the Office of the Australian Information Commissioner (OAIC). This statement aligns with the Australian Privacy Principles.

Deleting your account & data

You can permanently delete your account from the Hexis mobile app (Settings → Delete account) or, without the app, at agentic-ai.au/account/delete after signing in. Deletion revokes your login, signs you out of every device, and erases your contact details, profile and saved sign-in tokens.

Employment, payroll and tax records that Australian law (the Fair Work Act) requires us to retain for seven years are not deleted on request — they are kept in anonymised form and are no longer accessible to you. Questions about a deletion request: privacy@ashleyservicesgroup.com.au.

Contact us

To exercise your privacy rights or ask about this policy, contact the Ashley Services Group Privacy Officer at privacy@ashleyservicesgroup.com.au, on +61 2 9216 4747, or by post at Level 10, 92 Pitt Street, Sydney NSW 2000. Questions specific to the platform's security or data handling may also be directed to AgenticAI at privacy@agentic-ai.au.