Privacy policy.

1. Who we are

Fit2mine is run by David Codesido Malfitano, sole trader, ABN 58 823 650 125, PO Box 236 Arthys Rd, Cooran QLD 4569, Australia ("we", "us"). We provide fitness, fatigue and work design programs to mining companies and their workers in Australia. Contact for privacy questions: codesidodavid20@gmail.com.

Because we provide a health service and hold health information, we comply with the Australian Privacy Principles in the Privacy Act 1988 (Cth), whatever our turnover. Where our team works from the European Union, we also apply the EU General Data Protection Regulation (GDPR).

2. What we collect

Website and enquiries. Your name, work email, company, site and what you write to us. Answers to the self-check stay in your browser and are not sent to us.

Program participants (workers). Only with your written consent: survey answers, movement screen results, and sleep and fatigue information. Health information is "sensitive information" under the Privacy Act, so it is never collected without consent.

How we keep it small. Your individual results are collected and kept by the registered health practitioner who works with you, in their own clinical records. Fit2mine itself receives only de-identified group figures, so we hold as little personal information as possible. Surveys are anonymous. They never ask for your room number, name or employee ID. Camp findings, such as noise near a block, come from a walk-through of the camp, not from your answers.

Practitioners and job applicants. Contact details, qualifications, registration and insurance evidence, and the resume and cover letter you send us. Applications are kept for up to 12 months with your consent, then deleted.

3. Why we collect it

To reply to enquiries, deliver the program, give you your own results, and give your employer de-identified group reports. We do not sell personal information and we do not use it for advertising.

4. What your employer sees

Your employer only receives de-identified results for groups of 10 or more, and never a combination of answers (for example block plus shift) that narrows a group below 10. Your individual results stay between you and your practitioner. We never give your information to your employer for fitness-for-work, rostering, discipline or any employment decision. This promise is part of our contract with your employer.

Exceptions are only where the law requires it, or where there is a serious and imminent threat to someone's life, health or safety. If that happens, we tell you unless the law stops us.

5. Where it is kept

Enquiries and business records are kept in a Google account protected with two-step verification. Individual health records stay with the treating practitioner, who keeps them under their own professional and privacy obligations. Some of our team work from Germany and may access information from there. Whoever accesses it, we take reasonable steps so it is handled to the standard of the Australian Privacy Principles. We keep our records for 7 years, then delete them securely.

6. Your rights

You can ask to see or correct your information, withdraw consent for future collection, or ask us to delete information we no longer need. We reply within 30 days. Email codesidodavid20@gmail.com.

7. Complaints

Contact us first at codesidodavid20@gmail.com and we will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

8. Data breaches

If a breach is likely to cause serious harm, we notify the people affected and the OAIC under the Notifiable Data Breaches scheme.

9. Changes

We will post any update here with a new version date.