Privacy policy for the Revo Fitness Employer Branding and Recruitment

Date of publication: 28/10/2026

We at Revo Fitness — Revofit Pty Ltd (ACN 626 924 712) as trustee for The Newfit Unit Trust (ABN 45 892 139 546), of Suite 8, Level 2, 216 Stirling Highway, Claremont, Western Australia 6010, together with our related bodies corporate ("Revo Fitness", "we", "us", "our") — manage our employer branding and recruitment process through our career site (the “Career Site”), and by using a related applicant tracking system provided by Teamtailor AB (referred to in this policy as the ATS). The ATS includes artificial intelligence features that assist us to review and assess applications, which we explain in Section 9 below.

In this privacy policy, we explain how we process your personal data if:

1. You visit our Career Site (you being a “Visitor”)

2. You connect with us via our Career Site, to create a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”)

3. You apply for a position with us, via our Career Site or a third party service (you being an ”Applying Candidate”)

4. We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”)

5. We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”)

6. We receive information about you from a Candidate, who lists you as their reference (you being a “Reference”).

This privacy policy also describes what rights you have when we process your personal data, and how you can exercise these rights.

When we use the term “Candidate” in this privacy policy, we are referring to each of Connecting Candidates; Applying Candidates; Sourced Candidates; and Referred Candidates, unless it’s stated otherwise.

1. About processing of personal data

1.1 In this privacy policy, "personal data" means "personal information" as that term is defined in the Privacy Act 1988 (Cth) (Privacy Act) — being information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information or opinion is true and whether or not it is recorded in a material form. Examples of personal data are: name, e-mail address, telephone number and IP address. Processing of personal data is any use of personal data - such as collecting, creating, analysing, sharing, and deleting personal data. Some personal data is "sensitive information" under the Privacy Act and attracts additional protection — see Section 2.2(e) below.

1.2 There are laws and regulations on how companies may process personal data, so-called data protection laws. Different data protection laws apply to different types of use of personal data, and in different parts of the world. The data protection law that applies to our use of your personal data, as described in this privacy policy, is the Privacy Act and the 13 Australian Privacy Principles set out in Schedule 1 to the Privacy Act (APPs). We are an "APP entity" and are bound by the APPs.

1.3 We decide the purposes for which your personal data is collected and used, and how it is handled. We use service providers, including the supplier of our Career Site and ATS, to handle personal data on our behalf. Those providers are only permitted to handle your personal data in accordance with our instructions and the written agreements we have with them, and may not use it for their own purposes except where we tell you otherwise in this privacy policy. Where we disclose your personal data to a service provider located outside Australia, we remain accountable to you under the Privacy Act.

1.4 We are the entity responsible for, and accountable to you under the Privacy Act for, our handling of your personal data as described in this Privacy policy.

2. What personal data do we process?

2.1 All Individuals:

(a) Device information - If you visit our Career Site, we will collect information about your device, such as IP address, browser type and version, session behaviour, traffic source, screen resolution, preferred language, geographic location, operating system and device settings/usage.

(b) Technical and statistical data - If you visit our Career Site, we will collect technical and statistical data about your use of the site, such as information about which URLs you visit, and your activity on the site.

(c) Communications data - We will collect and store your communication with us, including the information you provided in the communication. This may include the content of emails, video recordings, messages on social media, the information you add to your account with us, surveys, etc.

(d) Contact details - Such as your name, email address, telephone number and physical address.

2.2 Candidates:

(a) Data from interviews, assessments and other information from the recruitment process - Such as notes from interviews with you, assessments and tests made, salary requirements, and information generated about you by the ATS, including any AI-generated summaries of your application, suitability scores, rankings and assessments of your answers to any screening questions. Information that is generated or inferred about you in this way is also personal data, and the protections and rights set out in this privacy policy apply to it in the same way.

(b) Information in your application - Such as your CV, cover letter, work samples, references, letters of recommendation and education.

(c) Information in your public profile - Meaning the information we collect about you from public sources related to your professional experience, such as LinkedIn or the website of your current employer.

(d) Information provided by references - Meaning the information we receive from our employees or partners who refer you to us, or by the persons you have listed as your references.

(e) Sensitive information - Some of what we collect about Candidates is “sensitive information” under the Privacy Act. This may include health information (for example, information about an injury or medical condition, or the results of a pre-employment medical or functional capacity assessment), criminal record information (for example, the outcome of a National Police Check or a Working with Children Check where a role requires one), information about your racial or ethnic origin or country of birth where this is relevant to establishing your right to work in Australia, your membership of a professional or trade association or a trade union, and photographs and video or audio recordings of you. We only collect sensitive information where it is reasonably necessary for our recruitment activities and you have consented to us collecting it, or where the collection is required or authorised by or under an Australian law. You can decline to provide sensitive information, but we may then be unable to progress your application for a role for which that information is required.

3. Where do we receive your personal data from?

3.1 All individuals:

(a) From the Career Site. If you visit our Career Site, we collect technical and statistical information about how you use the Career Site, and information from your device.

(b) Directly from you. Most of the information we process about you, we receive directly from you, for example when you apply for a position with us or connect with us. You can always choose not to provide us with certain information. However, some personal data is necessary in order for us to process your application or provide you the information you request to get from us.

3.2 References:

(a) From the person for whom you are a reference. If a Candidate lists you as their reference, we will collect your contact details from the candidate to be able to contact you.

3.3 Candidates:

(a) From public sources. We may collect personal data about you from public sources, such as LinkedIn or the website of your current employer. We only do so where the information is reasonably necessary for our recruitment activities and it is unreasonable or impracticable to collect it directly from you. If we add you to our talent pool in this way, we will tell you that we have done so, what we collected and how to ask us to remove your profile, at the time we first contact you.

(b) From our references. We may receive information about you from our employees or partners (such as recruitment service providers), when they believe your profile is of interest for our current or future vacancies.

(d) Data we create ourselves or in cooperation with you. Information about your application and profile is usually created by us, or by us in cooperation with you, during the recruitment process. This may for example include notes from interviews with you, assessments and tests made.

4. For what purposes do we process your personal data?

4.1 Protect and enforce our rights, interests and the interests of others, for example in connection with legal claims.

· Affected individuals: The individual(s) affected by the legal issue - this may include persons from all categories of individuals listed above.

· Categories of personal data used: All the categories of personal data listed above can be used for this purpose.

4.2 Share your personal data with other recipients, for the purposes mentioned in Section 5 below.

· Affected individuals: Varies depending on the purpose of the sharing, see Section 5 below.

· Categories of personal data used: All the categories of personal data listed above may be used for this purpose.

4.3 Collect information about your use of the Career Site, using cookies and other tracking technologies, as described in the Cookie Policy.

· Affected individuals: Visitors.

· Categories of personal data used: Device information.

4.4 Maintain, develop, test, and otherwise ensure the security of the Career Site.

· Affected individuals: Visitors.

· Categories of personal data used: Device information; Technical and statistical data.

4.5 Analyse how the Career Site and its content is being used and is performing, to get statistics and to improve operational performance.

· Affected individuals: Visitors.

· Categories of personal data used: Device information; Technical and statistical data.

4.6 Provide you with updates about vacancies with us.

· Affected individuals: Connecting Candidates.

· Categories of personal data used: Contact details; Communications data.

You can opt out of receiving these updates at any time, by using the unsubscribe function in the message or by contacting us using the details in Section 11 below.

4.7 Review profiles and applications sent to us. This also includes communicating with you about your application and profile.

· Affected individuals: Connecting Candidates; Applying Candidates.

· Categories of personal data used: All the categories of personal data listed above may be used for this purpose.

We review, screen and assess profiles and applications sent to us, including by using the artificial intelligence features of the ATS to summarise, score, rank and shortlist applications and to assess answers to screening questions. A Revo Fitness recruiter or hiring manager reviews that output and makes the decision about whether your application progresses; no decision about your application is made solely by a computer program. See Section 9 below, including how you can ask for a decision to be reviewed by a person.

4.8 Collect and evaluate your professional profile on our own initiative. This also includes communicating with you regarding your profile.

· Affected individuals: Sourced Candidates; Referred Candidates.

· Categories of personal data used: All the categories of personal data listed above may be used for this purpose.

4.9 Contact you directly about specific, future vacancies with us.

· Affected individuals: Candidates.

· Categories of personal data used: All the categories of personal data listed above may be used for this purpose.

4.10 Record the interview(s) with you.

· Affected individuals: Candidates.

· Categories of personal data used: Communications data.

4.11 Contact you to ask for your participation in surveys

· Affected individuals: Candidates.

· Categories of personal data used: All the categories of personal data listed above may be used for this purpose.

4.12 Contact you to ask you to provide information about a Candidate, and evaluate the information you provide.

· Affected individuals: References.

· Categories of personal data used: Contact details; Communications data.

5. Whom do we share your personal data with?

5.1 Our service providers. We share your personal data with our suppliers who provide services and functionality in our employer branding- and recruitment process. For example, this includes recruitment service providers and the supplier of our Career Site and related applicant tracking system, Teamtailor AB, which is incorporated in Sweden. We require our service providers by written agreement to handle your personal data only in accordance with our instructions, to keep it confidential and secure, to impose equivalent obligations on their own subcontractors, and to notify us of any data breach affecting your personal data. See Section 7 below for information about overseas recipients.

5.2 Our group companies. We share your personal data with our group companies, including Holder Group Pty Ltd (ACN 155 119 403) and Fettle Group Pty Ltd (ACN 648 441 258), when they provide us services and functionality to our employer branding- and recruitment process, such as access to particular systems and software.

5.3 Companies providing cookies on the Career Site. If you consent to it, cookies are set by other companies than us, who will use the data collected by these cookies in accordance with their own privacy policy. You can find information about which cookies this applies to in the Cookie Policy.

5.4 To authorities and other public actors - when we are ordered to do so. We will share your personal data with authorities and other public actors when we have a legal obligation to do so.

5.5 To parties involved in legal proceedings. If needed to protect or defend our rights, we share your personal data with public authorities or with other parties involved in a potential or existing legal proceeding. This can for example be in case of discrimination claims.

5.6 Mergers and acquisitions etc. In connection with a potential merger, sale of company assets, financing, or acquisition of all or part of our business to another company, we may share your personal data to other parties involved in the process.

6. On what basis do we collect and use your personal data?

6.1 Under the Privacy Act we may only collect personal data that is reasonably necessary for our functions and activities, we must collect it by lawful and fair means, and we may only use or disclose it for the purpose for which we collected it, for a related purpose you would reasonably expect, with your consent, or where the Privacy Act otherwise permits or requires it.

6.2 When we process your personal data for the purposes described in this Privacy Policy, we do so because it is reasonably necessary for our recruitment and employer branding activities, which is the primary purpose for which we collect it. If we want to use your personal data for a purpose that is not related to that primary purpose, and that you would not reasonably expect, we will ask for your consent first, unless the Privacy Act permits or requires us to use it without consent.

6.3 You can contact us for more information about how we handle your personal data. See Section 10 and 11 below for our contact information.

6.4 There may be specific circumstances when the processing is only performed if and when you provide your consent to the processing. This is for example the case if we propose to record an interview with you, or if we need to collect sensitive information about you (see Section 2.2(e) above). We will not make an audio or video recording of an interview without telling you beforehand and obtaining your express consent, as required both by this privacy policy and by surveillance devices legislation in the States and Territories in which we operate. You can decline to be recorded and we will offer you an alternative, and declining will not disadvantage your application. Please see Section 10 below for more information about your right to withdraw your consent.

7. When do we disclose your personal data outside of Australia, and how do we protect it?

7.1 We have selected the Asia-Pacific (APAC) hosting region for our Career Site and ATS, which means the personal data in your profile and application is stored and processed within the Asia-Pacific region.

7.2 However, some of our service providers may access or hold your personal data outside of Australia. In particular:

(a) Teamtailor AB, the supplier of our Career Site and ATS, is based in Sweden, and its personnel may access your personal data from Sweden in order to support, maintain and troubleshoot the system; and

(b) a limited amount of technical data — including application and infrastructure logs, which can contain IP addresses, system identifiers and email addresses, and images — is transmitted to infrastructure located in Germany.

We also use suppliers whose parent company, or whose subcontractor’s parent company, is based outside Australia. In these cases, we have taken into account the risk that the personal data may be disclosed to countries outside Australia, for example because of an authority request.

7.3 In cases where another recipient of your personal data (as described in Section 5 above) is based outside Australia, this will also mean that your personal data is disclosed outside Australia.

7.4 Before we disclose your personal data to an overseas recipient, the Privacy Act requires us to take steps that are reasonable in the circumstances to ensure that the recipient does not breach the APPs in relation to that personal data, and under the Privacy Act we remain accountable to you for acts and practices of that recipient that would breach the APPs. The steps we take include:

(a) Entering into written agreements with our suppliers that require them to handle your personal data

(b) Selecting suppliers whose data centres and information security controls are independently certified to recognised international standards, including ISO/IEC 27001 and SOC 2 Type 2, requiring your personal data to be encrypted both in transit and at rest, and reviewing those certifications and controls on an ongoing basis.

7.5 When your personal data is disclosed to a recipient outside Australia, we also implement appropriate technical and organizational safeguards, to protect the personal data in case of a disclosure. Exactly which protective measures we implement depends on what is technically feasible, and sufficiently effective, for the particular disclosure.

7.6 If you want more information about the cases in which your personal data is disclosed to a recipient outside Australia you can contact us using the contact details in Section 10 and 11 below.

8. For how long do we keep your personal data, and how do we keep it secure?

8.1 All individuals

If we process your personal data for the purpose of being able to protect and enforce our rights, we will keep your personal data until the relevant legal issue has been fully and finally resolved.

8.2 Visitors

We keep your personal data for one (1) year for security purposes. The retention periods for cookies are set out in the Cookie Policy. We keep your personal data to analyse the performance of the Career Site for as long as we keep personal data about you for other purposes.

8.3 Candidates

(a) If you are a Connecting Candidate (only), we keep your personal data for as long as you remain connected with us.

(b) For other types of Candidates, we keep your personal data to decide if you are a suitable candidate for the relevant vacancy(ies) with us.

(c) If you don’t succeed in the initial recruitment process, we keep your personal data for as long as needed to consider, and potentially contact you, for relevant future job openings, and in any event for no longer than three (3) years after that recruitment process ends, unless you ask us to keep your profile for longer. After that period we will destroy your personal data or de-identify it, except where we are required or permitted by law to keep it (for example, where it is relevant to an actual or anticipated legal claim).

(d) If you are hired, we will keep your personal data during your employment, for other purposes than those stated above, which you will be informed of. Once you become an employee, records we hold that are directly related to your employment relationship will be handled in accordance with our employee privacy policy.

8.4 References

We keep your personal data for as long as we keep the personal data of the Candidate for whom you acted as a reference.

8.5 How we keep your personal data secure

(a) We take steps that are reasonable in the circumstances to protect your personal data from misuse, interference and loss, and from unauthorised access, modification or disclosure, as required under the Privacy Act. These steps include storing your personal data in data centres that are independently certified to recognised international standards (including ISO/IEC 27001 and SOC 2 Type 2), encrypting your personal data both while it is being transmitted and while it is stored, restricting access to those of our personnel and our suppliers’ personnel who need it to perform their role, using multi-factor authentication for access to our systems, and requiring our suppliers to maintain equivalent security measures and to notify us promptly of any data breach.

(b) No method of transmission or storage is completely secure. If we become aware of or suspect a data breach involving your personal data, we will investigate it promptly, take steps to contain and remediate it, and — where the breach is likely to result in serious harm to you — notify you and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.

9. Automated decision-making and our use of artificial intelligence

9.1 Our ATS includes artificial intelligence (AI) features that we use to help us manage the volume of applications we receive. We set out this information so that you understand how technology is used in our recruitment process, and to meet the automated decision-making transparency requirements under the Privacy Act.

9.2 The kinds of personal data that may be used in the operation of these features are:

(a) the information in your application, including your CV, cover letter, work history, education, work samples and your answers to screening questions;

(b) your contact details; information in your public professional profile; your communications with us through the Career Site; and

We do not deliberately input sensitive information into these features, and we do not use them to assess any attribute that is protected under anti-discrimination law.

9.3 No decision about your application is made solely by the operation of a computer program. A Revo Fitness recruiter or hiring manager makes every decision about whether your application progresses, who is interviewed and who is offered a role.

9.4 The kinds of things these features do that are substantially and directly related to those decisions are:

(a) summarising your application; extracting and structuring information from your CV;

(b) matching your profile against the requirements of a role;

(d) suggesting you as a candidate for current or future vacancies.

9.5 We take reasonable steps to ensure that personal data these features generate or infer about you is accurate, complete and up to date, having regard to the purpose for which it is used. We review the performance of these features regularly, our recruiters are trained not to rely on an output without reviewing the underlying application, and we do not permit your personal data to be used to train our suppliers’ AI models.

9.6 If you would like a decision about your application to be reviewed by a person, or you would like to understand how these features were used in relation to your application, contact us using the details in Section 11 below. You can also ask us to correct any information we hold about you that you consider inaccurate, out of date, incomplete, irrelevant or misleading, including information these features generated, under Section 10.7 below.

10. What rights do you have, and how can you exercise them?

In this section, you will find information about the rights you have when we process your personal data. As described below, some of these rights only apply in particular circumstances.

If you want to exercise any of the rights listed here, we suggest that you:

§ Visit the Data & Privacy page on our Career Site, where we offer features to let you exercise your rights;

§ Log in to your account with us, where you can use the settings in the account to exercise your rights; or

§ Contact us directly at cam@revofitness.com.au.[RF1]

10.1 Right to be informed

(a) You have the right to be informed about how we process your personal data. You also have the right to be informed if we plan to process your personal data for any purpose other than that for which it was originally collected.

(b) We provide you with such information through this privacy policy, through updates on our Career Site (see also Section 12 below), and by answering any questions you may have for us. You can also browse our Career Site without telling us who you are, and you can deal with us anonymously or using a pseudonym when you make a general enquiry, although we will usually be unable to progress a job application unless you identify yourself.

10.2 Right to access your personal data.

Under the Privacy Act, you have the right to know if we hold personal data about you, and to receive a copy of the data we hold about you. In connection with receiving the copy of your data, you will also receive information about how we handle your personal data. We will respond to your request within 30 days. We do not charge you for making a request, and any charge for giving you access will not be excessive. In limited circumstances the Privacy Act allows us to refuse access – for example, where giving access would have an unreasonable impact on the privacy of another person, such as a referee who gave us information in confidence. If we refuse, we will tell you in writing why, and explain how you can complain.

10.3 Requesting a copy of your personal data in a portable format.

Australian privacy law does not give you a general right to data portability. However, as a matter of practice, you can request a copy of the personal data relating to you that we hold in a structured, commonly used, machine-readable format, and we will provide it where it is reasonable and technically feasible for us to do so. This will allow you to use this data somewhere else, for example to transfer it to another recipient.

10.4 Asking us to delete your personal data .

The Privacy Act requires us to destroy your personal data, or de-identify it, once we no longer need it for any purpose for which it may be used or disclosed under the Privacy Act, and we are not required by law or by a court or tribunal order to keep it. Separately, you can ask us at any time to delete your profile and the personal data we hold about you, and we will do so unless we are required or permitted by law to keep it — for example, where it is relevant to an actual or anticipated legal claim, or to a complaint or investigation.

10.5 Asking us to stop using your personal data.

You can ask us at any time to stop using your personal data for a particular purpose — for example, to stop sending you updates about vacancies, to withdraw your application, or to remove your profile from our talent pool. We will comply with your request unless we are required or permitted by law to continue to hold or use the personal data.

10.6 Asking us to pause our use of your personal data.

If you believe that the personal data we hold about you is inaccurate, that our handling of it is unlawful, or that we don’t need the information for a specific purpose, you can ask us to pause our use of such personal data. If you ask us to stop using your personal data, as described just above, you can also ask us to pause our use of that personal data while we make our assessment of your request.

10.7 Right to correct your personal data.

Under the Privacy Act, you have the right to request that we correct inaccurate, out-of-date, incomplete, irrelevant or misleading information, and that we complete information about you that you consider incomplete. This includes information generated about you by the ATS, such as an AI-generated summary, score or ranking. We will respond within a reasonable period, and if we refuse to correct the information we will give you written reasons and tell you how to complain. You can also ask us to attach to the information a statement that you consider it to be inaccurate, out of date, incomplete, irrelevant or misleading, and we will take reasonable steps to make that statement apparent to anyone who looks at the information.

10.8 Right to withdraw your consent.

When we process your personal data based on your consent, you have the right to withdraw that consent at any time. If you do so, we will stop processing your data for the purposes you’ve withdrawn your consent for. However, it doesn’t affect the lawfulness of processing that was based on your consent before it was withdrawn.

10.9 Right to raise a complaint.

If you have complaints about our handling of your personal data, please contact our Privacy Officer first, using the details in Section 11 below. We will acknowledge your complaint and respond to it within 30 days. If you are not satisfied with our response, you can raise a complaint with the Office of the Australian Information Commissioner (OAIC) — online at www.oaic.gov.au, by telephone on 1300 363 992, or by writing to the Office of the Australian Information Commissioner, GPO Box 5218, Sydney NSW 2001.

11. Where can you turn with comments or questions?

If you want to get in touch with us to exercise your rights, or if you have any questions, comments or concerns about how we handle your personal data, you can reach us by contacting our Privacy Officer:

Attn: Revo Fitness Privacy Officer

Address: Suite 8, Level 2, 216 Stirling Highway, Claremont, Western Australia 6010

Email: staff@revofitness.com.au

12. Updates to this Privacy policy

12.1 We update this privacy policy when necessary - for example, because we start processing your personal data in a new way, because we want to make the information even clearer to you, or if it’s necessary to do so in order to comply with applicable data protection laws.

12.2 We encourage you to regularly check this page for any changes. You can always check the top of this page to see when this privacy policy was last updated.

Privacy policy for the Revo Fitness Employer Branding and Recruitment

Already working at Revo Fitness?