GDPR Privacy Policy – Myprofile Pty Ltd

Effec�ve Date: 27 June 2025

1. Introduction

Myprofile Pty Ltd (“Myprofile”, “we”, “us”, or “our”) is commited to protecting the privacy and personal data of individuals, including those located in the European Union (EU) and European Economic Area (EEA). This Privacy Policy explains how we handle personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Australian Privacy Act 1988 (Cth).

2. Scope

This policy applies to personal data processed by Myprofile through our websites, applications, and services, including the MyCareerMatch platform. It is specifically intended for users who access our services from the EU/EEA.

3. Legal Basis for Processing

We process your personal data on the following lawful bases:
• Consent: You have provided explicit consent for us to process your data for the purposes described.
• Contractual necessity: Data is processed as part of providing our personality assessment and report services.
• Legitimate interests: Where processing is necessary to deliver educational or careers-related services requested by your school or adviser, and does not override your rights.

4. Personal Data We Collect

We collect only the minimum data required to provide our service. This includes:
• First name and last name
• Email address (typically school-issued)
• School year level
• School name
• Parent/guardian mobile number (only if a student opts to send their report via SMS)
• Personality type result
• Date of assessment

We do not collect or store:
• Home address
• Student mobile numbers
• Gender, age, or date of birth
• Academic results or qualifications
• IP address or browser/device information
• Personal references or sensitive information

5. Purpose of Processing

We use the data solely to:
• Generate a personality profile based on responses to our assessment
• Deliver a personalised report to the student, school, or designated parent/adviser We do not use personal data for profiling beyond this service. No behavioural targeting, advertising, or secondary data use occurs.

6. Automated Profiling

Our system uses automated processing to match students to a personality type based on their responses. This profiling is:
• Transparent
• Non-intrusive
• Free from any automated decisions with legal or significant impact
Users may request a human review or raise concerns by contacting us directly.

7. Data Sharing and International Transfers

We do not sell, share, or transfer personal data to third parties under any circumstances. The only exceptions are:
• Use of SMS Broadcast to send optional parent/adviser SMS reports — numbers are used once only and not stored
• Internal access by Myprofile staff for support, fulfilment, and analytics
All servers and data processing infrastructure are located in Australia. Where data is accessed from or used by parties outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs).

8. Data Retention

We retain data only for the minimum time necessary. By default:
• Personal data is stored for 21 days following assessment completion
• Data is then automatically and permanently deleted
• No backups or archival storage of personal information is maintained
Clients (such as schools) may request shorter or longer retention periods, or set data to delete immediately after use.

9. Your GDPR Rights

If you are an EU/EEA resident, you have the right to:
• Access your personal data
• Rectify incorrect or incomplete data
• Erase your data (“right to be forgoten”)
• Restrict certain types of processing
• Object to our use of your data
• Port your data to another service
• Withdraw consent at any time
To make a request, email us at: support@mycareermatch.com.au

10. Data Security

We implement strong security protocols including:
• Secure data hosting in Australia
• Encryption of data in transit
• Access controls and audit logs
• No persistent storage of unnecessary information
Only authorised personnel may access user data.

11. Data Protection Officer (DPO)

To support compliance, Myprofile has appointed a Data Protection Officer. Email: mish@mycareermatch.com.au

12. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes to services or legal requirements. The “Effective Date” will always show the most recent version. Significant updates will be communicated on our website.

13. Contact Us

For any questions or data rights requests:
Email: support@mycareermatch.com.au

Postal Address:
Myprofile Pty Ltd PO Box 1437 Sydney NSW 1360