Privacy policy

How JobBank handles personal information under the Privacy Act 2020.

What we collect

Workers: name, contact details, suburb/city/region, introduction, job titles, experience, employment history, availability, travel and transport, licences and certificates, work rights declaration, documents you upload, up to three references, and your avatar choices. Exact home addresses or identity evidence are collected only where needed for a defined verification purpose and are never shown in client previews.
Clients: business and billing details, contacts, hiring profile, agreement acceptance records (signatory, position, business, version, time, IP address and basic browser/device information).
Everyone: account security information, notification preferences, in‑app activity needed to run the service, and audit records of status changes and document access.
People who use the contact form: your name, email address, topic and message, so we can reply and keep a record of your request. We also keep a scrambled form of your IP address for about a day to limit misuse of the form, and Cloudflare, our security check provider, sees your IP address and browser details to confirm you're a person.

Candidate previews (name, avatar, introduction, titles, skills, general location, availability, qualification titles and verification indicators) are visible only to approved clients — never to the public or search engines.
Contact details and client‑shareable documents (consented CVs and approved, redacted qualification or licence copies) are shared with a client only after that client unlocks your profile, for 30 days per unlock.
Identity evidence, raw immigration evidence, referee contact details and internal notes are restricted to authorised JobBank staff and never shared with clients.
When a client selects you for a role, that client's name, contact details, exact location, pay and schedule are shared with you so you can decide whether to confirm.
Service providers (hosting, payments, email delivery, error monitoring, analytics, security checks) process data on our behalf under contract. Card numbers are handled by our payment provider and never stored by JobBank.

Staff review evidence to set per‑item verification statuses. We record the evidence reviewed, method, reviewer, date and any expiry. Clients see the outcome, not the evidence.

Deactivate your worker profile at any time (removes you from search and disables new applications; it does not cancel confirmed commitments or recall information a client already downloaded).
Request correction or deletion of your personal information through Contact and support. Deletion is separate from deactivation and may be delayed while confirmed commitments or legal retention periods apply.
Clients can cancel renewal from their billing page.

Private document storage with short‑lived authorised download links, encryption in transit, limits on repeated sign‑in and email‑code attempts, and checks that uploaded files are genuine PDF, image or Word files without scripts or macros.
Backups: we keep encrypted backups for up to 7 days. After that they are deleted automatically, so information you delete is gone from all backups within 7 days.
Retention periods are defined before launch and summarised in our data model documentation (for example, identity evidence is deleted after the verification outcome is recorded; agreement and billing records are kept for seven years).

TALENT STAFF LIMITED operates JobBank and is responsible for your personal information. Privacy questions and requests: privacy@jobbank.nz, or write to 4/3 Pacific RiseMount Wellington, Auckland 1060. You may also complain to the Office of the Privacy Commissioner (privacy.org.nz).