Privacy Policy

Last updated: 1 June 2026

SourceWeb ("we", "us", "our") provides the PrimeCare Suite mobile and web applications (the "App") for workforce scheduling, operations, and shift management.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use our App and related services.

1. Scope

This policy applies to:

• PrimeCare Suite mobile app (Android and iOS)

• PrimeCare Suite web/admin services

• Related support and operational services
  

2. Who Uses This App

PrimeCare Suite is intended for workers and administrators of organizations.

• Accounts are created by authorized administrators (employment/enterprise accounts).

• End users cannot self-register accounts inside the app.

3. Information We Collect

We may collect the following categories of data:

• Account information: name, email address, login credentials (managed securely through authentication services)

• Employment/operational data: shifts, schedules, attendance records, activity/progress notes, incident details

• Location data (precise): collected during shift check-in/check-out to verify attendance at assigned locations

• Photos: uploaded by staff for activity/progress/incident documentation

• Device information: push notification token (for example, Firebase Cloud Messaging token), basic device/app metadata

• App diagnostics: crash logs and technical diagnostics to maintain stability and security

We do not intentionally collect sensitive categories such as racial/ethnic origin, political opinions, religious beliefs, or sexual orientation.

4. How We Use Information

We use personal information to:

• Provide core app functionality (login, schedules, shift actions, notifications)

• Manage accounts and service access

• Verify attendance and reduce fraudulent check-ins

• Support operational documentation workflows (including photo-based records)

• Send operational push notifications (for example, shift updates)

• Monitor, troubleshoot, and improve service reliability and performance

• Meet legal, regulatory, contractual, and audit obligations

5. Legal Basis (where applicable)

Depending on your region, we process data under one or more of these bases:

• Performance of a contract

• Legitimate interests (service security, fraud prevention, operations)

• Legal obligation

• Consent (where required, such as device permissions)

6. Data Sharing and Disclosure

We do not sell personal data.

We may share data with:

• Service providers/processors that help us operate the app (for example, cloud hosting, authentication, push notifications, storage, analytics/crash monitoring)

• Your employing organization (enterprise customer) for workforce operations

• Regulators, authorities, or legal advisors where required by law or to protect rights, safety, and compliance

• Successors in business transactions (for example, merger, acquisition), subject to legal safeguards
  

7. Third-Party Services

Our app may use trusted third-party platforms such as Firebase services (for example authentication, cloud database/storage, messaging, crash reporting). These providers process data on our behalf or as independent service providers under their own privacy terms.

8. Data Retention

We keep personal information only as long as necessary for:

• Providing services to your organization

• Operational records and reporting

• Security and fraud prevention

• Legal, tax, contractual, and compliance obligations

When no longer required, data is deleted, anonymized, or securely archived according to our retention schedule.

9. Security

We implement reasonable technical and organizational safeguards, including:

• Encryption in transit (HTTPS/TLS)

• Access controls and role-based permissions

• Monitoring and logging for security events

• Secure infrastructure and vendor controls

No system is 100% secure, but we continuously work to protect your data.

10. International Transfers

Your information may be processed in countries other than your own, including where our service providers operate. Where required, we apply safeguards for cross-border data transfers.

11. Your Rights

Depending on your location and applicable law, you may have rights to:

• Access personal information

• Correct inaccurate information

• Request deletion

• Object to or restrict certain processing

• Data portability

• Withdraw consent (where processing is based on consent)

In most cases, your employing organization is the data controller for workforce data in PrimeCare Suite. To exercise your rights, contact your organization administrator first. We may assist your organization in fulfilling verified requests where required under our service agreement and applicable law.

12. Account and Data Deletion Requests

PrimeCare Suite account and data deletion requests must be submitted to your employing organization (for example, your HR team, manager, or organization administrator), as your organization controls account lifecycle and employment records.

SourceWeb does not independently action end-user deletion requests without authorization from the relevant organization, except where required by law.

Organization-managed deletion process

• The organization reviews and verifies the request

• The organization instructs SourceWeb where technical deletion or deactivation is required

• SourceWeb assists with deletion/deactivation actions in line with contractual obligations and applicable law
  

Data that may be retained

• Records required for legal, regulatory, contractual, audit, security, or dispute-resolution obligations

• Data the organization is required to retain under employment, care, tax, or other applicable laws
  

Typical processing timeframe

• Timeframes are determined by the employing organization and applicable legal requirements

13. Children's Privacy

PrimeCare Suite is not directed to children and is intended for workplace use by adults.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date. Material changes may also be notified in-app or by other appropriate means.

15. Contact Us

If you have privacy questions or requests, contact:

- Entity: SourceWeb
- Email: info@sourceweb.com.au