Privacy policy

• We collect what we need to answer enquiries, find and place talent, deliver Studio work, bill clients and pay the people who work with us.
• We don't sell personal information.
• Our talent work from outside Australia, mostly in the Philippines, Vietnam, Kenya, Nigeria, Brazil and Colombia. So some information goes overseas. Sending information overseas lists where.
• We use AI tools to help us work. Our website chat is answered by an AI assistant, and it tells you so.
• You can ask to see or correct your information, or make a complaint, by emailing hello@gethands.com.au.

Get Hands is an Australian company based in Melbourne. You can reach us at hello@gethands.com.au.

We run gethands.com.au (with sites for Australia and New Zealand, the United Kingdom and the United States), the Get Hands client app and talent app, and our two services: Seats (a tested person working on your team) and Studio (finished design, video and web work).

We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). If you are in the United Kingdom or the United States, the sections for your country below also apply.

Personal information is information or an opinion about an individual who is identified or reasonably identifiable, whether it is true or not. Depending on how you deal with us, we may collect:

• Identity and contactYour name, job title, business name, email, phone number, country and time zone.
• Enquiries and bookingsWhat you tell us in a form, the chat, a call or an email, the demo time you book, and the roles, levels and services you're interested in.
• Client accountsYour sign-in and role in the client app, orders, briefs and files you upload, messages, invoices and payments.
• PaymentsOnline payments go through our payment provider, Airwallex, on its own secure payment page. Airwallex collects your card or bank details and billing details to take the payment, and handles them under its own privacy policy. We receive confirmation that you have paid, the amount, and the details we need for your invoice. We don't see or store full card numbers.
• Technical and usageYour IP address, browser and device, the pages you view and how you reached us (for example an ad or a link). Google Analytics and Microsoft Clarity data only if you accept analytics cookies. If you accept advertising cookies and send us a form, your email and phone number go to Google Ads in a scrambled (hashed) form, so we can tell which ad led to your enquiry. See Ads and measuring what works and our cookie policy.
• Marketing preferencesWhat you have agreed to receive from us, and what you have opted out of.
• Candidates and talentYour CV, work history, skills, tools, portfolio and work samples, test answers and scores, your level, interview notes, availability and expected pay. If you work with us: your contract, payout details, timesheets, work records and client feedback. If a role needs an identity or background check: the documents and results of that check.

Sensitive information is a subset of personal information that gets extra protection, such as health information, racial or ethnic origin, religion, political opinions, sexual orientation, criminal records and biometric information. We don't ask for it, and please leave it out of your CV. We collect sensitive information (for example a police check or the biometric part of an identity check) only with your consent and when it is reasonably necessary for a role, or when the law requires or allows it.

• From you: through our website, forms, chat, calls, Microsoft Teams meetings, email, our apps and our skills tests.
• From your browser: small settings kept in your browser, and cookies only if you accept them. See our cookie policy.
• From others: a colleague who adds you to a client account; referees you name; job boards you apply through; public profiles you share with us (such as LinkedIn or a portfolio); identity and background check providers; our payment provider; and public business registers such as ABN Lookup.

If we receive personal information about you from someone else, we protect it as this policy describes. If you give us personal information about someone else, you confirm you have their consent to do so.

• to answer your enquiry and arrange a demo or call;
• to find, test, level and match talent to client roles, and to place people in Seats;
• to plan and deliver Studio work;
• to run client and talent accounts and our apps, and to support you;
• to check that a business is real, prevent fraud and keep our systems secure;
• to invoice clients, take payments and pay talent;
• to send messages about your enquiry, account or work;
• for marketing, where you have agreed or the law allows (you can opt out at any time);
• for analytics, so we can improve our website and services (in the UK and Europe, website analytics only with your consent; elsewhere you can switch it off under Cookie settings); and
• to keep records, meet our legal obligations, and establish, exercise or defend legal claims.

We use personal information only for the purpose we collected it for, a related purpose you would reasonably expect, or another purpose the law allows.

• Chat. The chat on our website is answered by our own AI assistant, and it says so when the chat starts. It runs on an AI model on a computer we operate, not on an outside AI company's service. What you type, and any contact details you give, are saved in our customer system so we can reply.
• WhatsApp. If you message us on WhatsApp, your messages and number reach our team inbox in GoHighLevel through Meta, which runs WhatsApp under its own privacy policy.
• Forms, bookings and follow-up. What you send us through a form, the chat or the booking calendar goes to our customer system, GoHighLevel (in the United States), with how you reached us (the page, and the ad or link you came from). We use it to reply, book your demo, follow up by email, text or phone about your enquiry, and track where each enquiry is up to. Our team gets an alert in Microsoft Teams so someone can follow up.
• When you come back. If you sent us a form and allow marketing cookies, your browser keeps a signed reference to your enquiry (no name, email or phone). When you return to our pricing or booking page, our team is told you're looking again, at most once a day, so a person can follow up. Choose no to marketing cookies and it is removed.
• Calls. Calls run through Microsoft Teams or our phone system. We record sales and client calls, for quality, for training and to keep a record of what was agreed. We tell you at the start of every recorded call. The recording and any notes or summary made from it are kept in our systems, and only the people who need them can see them.
• AI tools. We use AI tools, including Claude by Anthropic and AI features in GoHighLevel and Microsoft 365, to draft and summarise messages, briefs and job descriptions, and to help review applications. A person checks AI output before it is used, and people make the decisions about candidates, levels, placements and pay.
• We don't put passwords, card numbers, health information or government ID numbers into AI tools. Please don't type them into the chat either.
• Anthropic's commercial terms say it does not train its models on our inputs and outputs.
• Decisions. We don't make decisions about you using only a computer program. When we review job applications, AI tools may help sort and summarise them, and a person makes every decision about candidates, levels, placements and pay.
• You can ask for a person to review any outcome about you that an AI tool helped with.

We advertise on Google. To know which ads bring enquiries and sales, we use these tools.

• The Google Ads tag. In the UK and Europe it loads only if you say yes to Advertising in the cookie banner; elsewhere it loads unless you switch Advertising off under Cookie settings. It sets Google's advertising cookies and tells Google when a visit from one of our ads leads to an enquiry, a booking or a purchase.
• Enhanced conversions. If Advertising is on and you send us a form, your browser gives Google your email address and phone number in a scrambled (hashed) form. Google uses it to match the enquiry to the ad you clicked.
• Ad click IDs. When you arrive from a Google ad, the link carries a click ID (named gclid, gbraid or wbraid). We keep it in your browser for up to 90 days, whatever you choose in the cookie banner, and send it with any form you submit, so we can tell which ad brought an enquiry. On its own it identifies no one.
• Updates from our customer system. When an enquiry moves on (a demo is booked or held, a shortlist or plan is sent, or you become a client), or you buy Studio online, we may send Google Ads the click ID, the stage reached, the time and, for a sale, its value. For enquiries from Australia and New Zealand that have no click ID, we may send your email address or phone number in hashed form instead. We don't send these updates for enquiries from the United Kingdom or the United States without consent.
• Google Analytics from our server. If Analytics is on (the same rule as the cookie banner), our server may send Google Analytics the same events about your enquiry (such as the page, the market and whether the enquiry fits what we offer) when your browser didn't send them itself. These events never include your name, email, phone number or message.
• Microsoft Clarity. If Analytics is on, Clarity records how pages are used (clicks, scrolling and where people stop) so we can fix what gets in the way. What you type into forms is masked.

Google processes this data under its advertising and measurement terms, including in the United States. To stop us sending updates about your enquiry to Google Ads, email hello@gethands.com.au. You can also turn off personalised ads in your Google account at myadcenter.google.com.

We disclose personal information only where it is needed for our business, where you have agreed, or where the law allows. This means we may disclose it to:

• clients (for candidates and talent): what a client needs to consider you for a role, such as your Get Hands profile, level, test results and work samples. Once you are placed, the client gets what it needs to work with you;
• talent (for clients): the people doing your work see the client information they need to do it;
• our employees, contractors and related entities;
• service providers who act for us: hosting and data storage, our customer system, email and messaging, payments, accounting, AI tools, analytics, identity and background checks, and talent payouts;
• professional advisers, auditors, banks and insurers;
• if we merge with, are bought by, or sell part of our business to another company, that company and its advisers;
• courts, tribunals, regulators and law enforcement, as required or authorised by law, or to establish, exercise or defend our legal rights; and
• anyone else the law requires or permits, such as under a subpoena.

We don't sell personal information, and we don't share it for cross-context behavioural advertising.

We are based in Australia. Our service relies on people and providers in other countries, so your personal information may be disclosed to, stored in or accessed from these places:

• Talent who do the workthe Philippines, Vietnam, Kenya, Nigeria, Brazil and Colombia, and any other country where a talent member assigned to your work lives.
• ClientsAustralia, New Zealand, the United Kingdom and the United States.
• Our operations teamAustralia and the United States.
• Customer system, chat, booking calendar and SMS (GoHighLevel)United States.
• Email, Teams calls and messages, files (Microsoft 365)Australia, the United States and other countries where Microsoft stores or processes data.
• Website and app hosting (Vercel) and app databasesThe United States and other countries in our hosting providers' networks.
• AI tools (Anthropic's Claude, and AI features in GoHighLevel and Microsoft 365)The United States, and other countries where these providers process data.
• Website analytics (Google Analytics), only if you accept itThe United States and other countries where Google processes data.
• Website analytics (Microsoft Clarity), only if you accept itThe United States and other countries where Microsoft processes data.
• Advertising (Google Ads), only if you accept itThe United States and other countries where Google processes data.
• Payments (Airwallex)Australia and other countries where Airwallex operates.
• Identity and background checks, and talent payouts, when usedThe provider's country, which we tell you before the check or payout.

Before we disclose personal information overseas, we take reasonable steps to make sure the recipient handles it in line with the APPs. That includes written terms covering privacy, confidentiality and security, and giving each person access only to what their work needs.

For personal information that UK law protects, we transfer it only under a safeguard the UK GDPR allows: the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or, for a US provider certified under it, the UK Extension to the EU-US Data Privacy Framework. Ask us for details.

Sometimes we handle personal information on a client's behalf: for example, a Seat working inside the client's own systems, or Studio work that uses the client's customer data. The client decides how that information is used, and we follow its instructions under our agreement with it.

Client data we hold for this work is stored in Australia. The people who do the work live in the Philippines, Vietnam, Kenya, Nigeria, Brazil and Colombia, and they access it from there, only to do the work and only what the work needs. Every person we place has signed a confidentiality agreement and our data-handling rules before they get access. These steps are how we make sure they handle personal information in line with the Australian Privacy Principles, and we remain responsible for how they handle it.

If your information is in a client's systems, please contact that business first. We will help it respond.

We are committed to keeping the personal information we hold secure. We take reasonable physical, electronic and managerial steps to protect it from misuse, interference and loss, and from unauthorised access, change or disclosure, and we limit access to the people who need it for their work.

No transmission over the internet is completely secure, so we can't guarantee the security of information sent to us online.

A data breach is unauthorised access to, or disclosure or loss of, personal information we hold. If we suspect one, we act quickly to:

• contain it, for example by locking accounts, resetting passwords or recalling a misdirected email;
• assess it: what happened, whose information was involved, and whether serious harm is likely. We do this as quickly as we can, and within 30 days;
• notify: if we have reasonable grounds to believe it is an eligible data breach (one likely to result in serious harm), we tell the Office of the Australian Information Commissioner (OAIC) and the people affected as soon as practicable, under the Notifiable Data Breaches scheme in the Privacy Act. We tell you what happened, what information was involved, and the steps we recommend you take; and
• learn from it, by fixing the cause and recording what we did.

Where the UK GDPR applies, we report a breach to the Information Commissioner's Office within 72 hours when it requires us to, and tell you without undue delay if the risk to you is high.

We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. Then we delete it or de-identify it.

• Enquiries and leadsWhile we are talking with you, and for a reasonable time after our last contact. Ask us and we will delete it sooner, unless we have to keep it.
• Client contracts, invoices and payment recordsAs long as Australian tax and company law requires, which is generally 7 years.
• Candidates not placedWhile your profile is useful for future roles. Ask us at any time to remove it.
• Talent recordsWhile you work with us, then as long as the law requires for contract, pay and tax records.

We may keep information longer when the law requires it, or when we need it for a dispute or legal claim.

• Your choice. You don't have to give us personal information. If you don't, we may not be able to answer you, work with you or pay you.
• Stay anonymous. You can browse our website and ask general questions without telling us who you are.
• Access. You can ask for the personal information we hold about you. In some situations the law lets us withhold it. If so, we tell you why and how to complain. Making a request is free; if giving access takes a lot of work, we may charge a reasonable fee, and we tell you first.
• Correction. If you think information we hold about you is wrong, out of date, incomplete, irrelevant or misleading, tell us and we will take reasonable steps to correct it. If we don't agree, we tell you why and how to complain.
• Marketing. You can opt out at any time: use the unsubscribe link in any email, reply STOP to any text, or email us.

To make a request, email hello@gethands.com.au. We may need to confirm who you are first. We aim to respond within 30 days.

If you have a complaint about how we have handled your personal information, email hello@gethands.com.au with the details. We will investigate and reply in writing with what we found and what we will do.

If you are not satisfied with our response, you can contact:

• Australia: the Office of the Australian Information Commissioner, oaic.gov.au, 1300 363 992.
• New Zealand: the Office of the Privacy Commissioner, privacy.org.nz.
• United Kingdom: the Information Commissioner's Office, ico.org.uk, 0303 123 1113.
• United States: your state's Attorney General or privacy regulator.

Under the UK GDPR, we are the controller of the personal information this policy describes, except when we act for a client (see When we act for a client). These are our lawful bases:

• Answering enquiries and arranging demosLegitimate interests (replying to people who contact us), or steps you ask for before a contract.
• Providing Seats and Studio, billing and paymentsContract.
• Analytics cookies and server-side analytics eventsConsent.
• Advertising cookies and enhanced conversionsConsent.
• Sending Google Ads updates about your enquiryConsent. We don't send them for UK enquiries without it.
• Business marketing emailsLegitimate interests, and consent where the law requires it. You can always opt out.
• Reviewing job applicationsLegitimate interests, and steps before a contract.
• Tax, accounting and other records the law requiresLegal obligation.
• Sensitive information for a role (only if needed)Explicit consent, or as the law allows.

As well as access and correction, you have the right to ask us to erase your information, restrict or object to how we use it (including an absolute right to object to direct marketing), receive it in a portable format, withdraw consent at any time, and not be subject to decisions based solely on automated processing that have legal or similarly significant effects. We respond within one month. You can complain to the Information Commissioner's Office.

Some US state privacy laws give residents extra rights. We describe them here, and we respond to these requests from any US resident.

• What we collect: identifiers (name, email, phone, IP address), commercial information (orders and invoices), internet activity (website use), professional and education information (for candidates and talent), and test results and levels. Sources and purposes are set out above.
• Sensitive information: if a role needs an identity or background check, we collect government ID details and check results. We use them only to verify identity, prevent fraud and provide the services you asked for.
• Selling and sharing: we don't sell personal information, and we don't share it for cross-context behavioural advertising.
• Your rights: to know what we collect and how we use and disclose it, to get a copy, to correct it and to delete it. We won't treat you differently for using them.
• How to ask: email hello@gethands.com.au. An authorised agent can ask for you with your signed permission. If we decline, you can appeal by replying with "Appeal" in the subject line, and we respond within 45 days. If you are still not satisfied, you can contact your state's Attorney General.

• Email. Every marketing email has an unsubscribe link.
• Texts. We text you only about something you asked for, or if you agreed to it. Reply STOP to opt out.
• Calls. Tell us if you don't want sales calls. We respect the Do Not Call Register and similar rules in other countries.

Our website keeps a few settings in your browser and uses Google Analytics, Microsoft Clarity and Google Ads. If you are in the United Kingdom or Europe (we go by the UK pages of this site, or your device's time zone), nothing loads until you say yes in the cookie banner. Everywhere else, including Australia, New Zealand and the United States, these tools load when you arrive, and you can switch them off at any time under Cookie settings in the footer. Our cookie policy lists everything and explains how to change your choice.

To stop Google Analytics on every website, you can use Google's opt-out browser add-on. To see how Google uses data from sites that use its services, visit Google's page on this.

Our website links to other websites, such as our client app's sign-in page and the tools we mention. We don't control those websites and are not responsible for how they handle personal information. This policy doesn't cover them.

Our services are for businesses and working adults. We don't knowingly collect personal information from anyone under 18.

We may change this policy at any time by publishing the new version on our website, with a new date. If a change significantly affects how we handle your information, we will tell you by email or in the app.

For any questions or requests about privacy, contact our privacy officer at Get Hands. Email hello@gethands.com.au.

By post: Privacy Officer, Get Hands, 8/26 Davison Street, Richmond VIC 3121, Australia.