Legal

Privacy Policy

GFS Group, including GFS Workforce, GFS Hospitality, GFS Pure and the GFS Connect app

Last updated: 15 September 2026

Gorkhali Facility Services Pty Ltd (ABN 55 656 525 727), trading as GFS Group (“GFS Group”, “we”, “us”, “our”), respects your privacy. This policy explains how we collect, use, store and disclose personal information when you work with us, use our services, visit our websites, or use the GFS Connect web platform and mobile app (together, “GFS Connect”).

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and other laws that apply to us, including the Fair Work Act 2009 (Cth).

1Who this policy applies to

• Workers, candidates and contractors placed or engaged by GFS Group
• Clients and their site contacts
• Users of GFS Connect
• Visitors to our websites and anyone who contacts us

2Personal information we collect

Account and identity details

• Name, email address, phone number and password (passwords are stored in encrypted form)
• Date of birth, residential address and emergency contact details
• Proof of identity and right-to-work or visa information

Work and compliance details

• Licences, certifications, inductions and qualifications (for example security, RSA, forklift or white card)
• Rosters, shifts, timesheets, hours worked and pay rates
• Performance, incident and workplace health and safety records

Location information

GFS Connect uses your device’s precise and approximate location to verify that you are at the correct work site when you clock in, clock out or check in (geofenced site verification), and to keep accurate attendance records.

• Location is collected only while you are using the app and only when a feature needs it, such as clocking in.
• The app does not collect your location in the background or when it is closed.
• We do not use your location to track you outside work activities, and we do not sell it.

Photos, documents and files

If you choose to upload a photo or file (for example a licence, a site photo or an incident report), we collect that file. The app asks for access to your photos, files or camera only so you can pick or take the item you want to upload. We do not access other photos or files on your device.

Device and usage information

• Device type, operating system, app version and IP address
• Log-in times, activity within GFS Connect, and error or crash information
• Device details linked to clock-in events, used to prevent attendance fraud

3How we collect personal information

• Directly from you: when you apply for work, complete onboarding, use GFS Connect or contact us
• From your device, when you use GFS Connect and grant permissions (location, photos, files or camera)
• From clients, referees, licensing bodies and background check providers, with your consent where required
• Automatically, through cookies and similar technologies on our websites and in GFS Connect, to keep you signed in and keep the service secure

4Why we use personal information

• To place, roster and manage workers and deliver services to clients
• To verify attendance and site presence, and record accurate working hours
• To calculate hours worked for pay and client billing
• To send roster, shift and service notifications
• To meet legal obligations, including Fair Work record-keeping, labour hire licensing and workplace health and safety laws
• To keep our systems secure and prevent fraud or misuse
• To respond to enquiries and resolve complaints
• To improve our services and GFS Connect

5Who we share personal information with

We only disclose personal information when it is needed for the purposes above, or when the law requires it:

• Clients where you are placed: your name, qualifications, rostered shifts and attendance records for their site
• Service providers who help us run our business, such as cloud hosting, background check and IT support providers. They may only use the information to provide services to us.
• Government bodies and regulators, such as the Fair Work Ombudsman, labour hire licensing authorities and law enforcement, where required or authorised by law
• Professional advisers, such as lawyers, accountants and insurers

Where your information is stored

We store personal information in Australia. In the future, we may use service providers such as content delivery networks (CDNs) that process some information outside Australia to make GFS Connect faster and more reliable. If we do, we will update this policy and take reasonable steps to make sure those providers protect your information to a standard consistent with the Australian Privacy Principles.

6How we protect personal information

• Information sent between the app or website and our servers is encrypted in transit (HTTPS/TLS).
• Access is restricted to authorised staff and service providers who need it.
• We use secure passwords, access controls and monitoring to prevent unauthorised access, loss or misuse.

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

7How long we keep personal information

We keep personal information only for as long as we need it for the purposes above or as the law requires. For example, employee time and wage records are kept for at least 7 years under the Fair Work Act 2009. When information is no longer needed, we securely delete or de-identify it.

8Your choices and app permissions

• Location: you can allow or deny location access in your device settings at any time. If you deny it, features that need site verification, such as clocking in, may not work.
• Photos, files and camera: you can allow or deny access in your device settings. You can still use GFS Connect without it, but you will not be able to upload files.
• Notifications: you can turn off notifications in your device settings.

9Accessing, correcting or deleting your information

You can ask to see or correct the personal information we hold about you, or ask us to delete your GFS Connect account and associated data, by contacting us using the details below. We will respond within 30 days.

Some information cannot be deleted straight away if the law requires us to keep it (for example time and attendance records). In that case we will tell you what we must keep and why, and delete the rest.

10Children

GFS Connect is intended for workers, clients and staff of GFS Group. It is not directed at children, and we do not knowingly collect personal information from children under 16.

11Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the “Last updated” date shown at the top. If we make significant changes, we will let GFS Connect users know through the app or by email.

12Contact us and complaints

If you have a complaint about how we handled your personal information, please contact us first. We will investigate and respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.