Last updated 12 April 2026
Emverio Workplace Complaints Pty. Ltd. (ABN 32 635 523 938), trading as Emverio Workplace Complaints (EWC), respects your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Who we are
Emverio Workplace Complaints Pty. Ltd. provides an independent external workplace complaints and whistleblowing service to Australian employers. Organisations subscribe so their workers can raise concerns through a confidential channel outside their internal management structure.
2. The personal information we collect
We may collect the following categories of personal information:
- Identity and contact details such as name, email address, telephone number, and employer.
- Information you provide when lodging a complaint or report, including descriptions of events, witnesses, dates, locations, and any supporting documents.
- Sensitive information where it is directly relevant to a complaint, including health information, information about alleged conduct, and information about workplace relationships.
- Information provided by subscribing employers when they set up their account, including billing contact, site locations, and workforce numbers.
- Technical information such as IP address and browser type when you interact with our website or lodge a report through our online form.
Where practical, you may raise a concern anonymously or under a pseudonym. Anonymity may limit our ability to investigate or provide feedback.
3. How we collect personal information
We collect personal information directly from the person concerned wherever possible. We also collect information through our secure online reporting form, which is provided by SnapForms, an Australian platform that meets Australian data collection requirements. In limited circumstances we may collect information from a subscribing employer or from a third party, for example where a report names a witness.
4. Why we collect, hold, use, and disclose personal information
We collect and use personal information to:
- Receive, triage, and assess workplace complaints and whistleblower reports.
- Communicate with the person raising a concern and, where appropriate, with the subscribing employer.
- Provide reports, recommendations, and escalation advice to the subscribing employer.
- Meet our obligations under the Work Health and Safety Act 2011, psychosocial safety regulations, the Fair Work Act 2009, the Corporations Act 2001 (whistleblower provisions), and other applicable laws.
- Administer our service, including billing, account management, and internal record keeping.
- Improve our service and train our staff, using deidentified data where possible.
We will not use or disclose personal information for any other purpose without your consent, unless an exception under the APPs applies (for example, where disclosure is required or authorised by law, or is necessary to prevent a serious threat to life, health, or safety).
5. Disclosure of personal information
We may disclose personal information to:
- The subscribing employer, where disclosure is necessary for the employer to respond to a complaint or meet its legal obligations, and subject to any confidentiality protections that apply (including whistleblower protections under the Corporations Act 2001).
- Regulators and law enforcement, where disclosure is required or authorised by law.
- Professional advisers such as lawyers, auditors, and insurers, under strict confidentiality obligations.
- Service providers who support our operations, including Microsoft (for our records environment) and SnapForms (for our online reporting form).
We do not sell personal information. We do not disclose personal information for direct marketing purposes.
6. Storage and security
All EWC records are stored within the Microsoft 365 environment. Access to complaint records is limited to a small number of authorised staff on a need to know basis. All staff accounts are protected by multi factor authentication. We use role based access controls, audit logging, and encryption in transit and at rest.
Our online reporting form is provided by SnapForms, which complies with Australian data collection requirements. Data submitted through the form is transferred securely into our Microsoft 365 records environment.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. We retain personal information only for as long as we need it for the purposes described in this policy or to meet legal, accounting, or reporting requirements. When personal information is no longer required, we destroy or deidentify it.
7. Overseas disclosure
Because we use Microsoft 365 and other cloud services, personal information may be stored or processed on servers located outside Australia, including in the United States and other countries where Microsoft operates data centres. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient does not breach the APPs, through contractual and technical safeguards.
8. Quality of personal information
We take reasonable steps to ensure the personal information we collect, use, and disclose is accurate, up to date, complete, and relevant. If you believe information we hold about you is inaccurate, please contact us so we can correct it.
9. Accessing and correcting your information
You have the right to request access to the personal information we hold about you and to ask us to correct it. We will respond to your request within a reasonable time. We may need to verify your identity before releasing information. In limited circumstances we may refuse access, for example where providing access would compromise the privacy of others, prejudice an ongoing investigation, or breach whistleblower protections. If we refuse, we will explain why in writing.
10. Complaints about privacy
If you believe we have breached the APPs or mishandled your personal information, please contact us using the details below. We will acknowledge your complaint, investigate it, and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
11. Cookies and website analytics
Our website uses cookies and similar technologies to provide core functionality and to understand how visitors use the site. You can disable cookies in your browser settings, although some parts of the site may not work as intended if you do so.
12. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available on our website. Material changes will be notified on our homepage or by email to subscribing employers.
13. How to contact us
For privacy enquiries, access requests, correction requests, or complaints, please contact our Privacy Officer:
Emverio Workplace Complaints Pty. Ltd.
ABN 32 635 523 938
Email: info@emverio.com
Phone: 1300 454 574
Post: Level 2, 52 McDougall Street, Milton, Brisbane QLD 4064