Privacy policy
Last updated 12 November 2026
TOVELLY PTY LTD provides DATUM. This policy explains what personal information DATUM handles and how, in line with the Australian Privacy Principles.
Two kinds of people
- Our customers' users: people who sign in to DATUM. We collect their details to run their account.
- Workers and candidates: people our customers record in DATUM, such as employees, contractors, labour hire, site visitors and job applicants. The customer company decides what is recorded about them and why. We hold that information for the customer and use it only to provide DATUM to them. Questions about it usually go to the company that recorded it first.
What we collect
- Account details: email address and a securely stored (hashed) password.
- Business details: company and site names, and who has access.
- Environmental and hygiene records: licence conditions, monitoring results, exposure groups and samples. Exposure groups are described by role or work area, not by person.
- Worker records (Training, Workforce and Safety, when a customer uses them):
- name, employee number, employer, position, crew and supervisor;
- training, tickets and licences, with expiry dates and certificate copies;
- roster, sign-ins, timesheets, leave requests and approvals;
- safety records that name the people involved (incidents, actions, observations, Take 5s).
- Visitor induction records (Training's visitor link, when a customer uses it): the visitor's name and company (or "Visitor"), added to the site's training register; every attempt, failed ones included, with its score, pass or fail, the name typed as their declaration and the date and time; and, on a pass, a training record for the induction. No phone, email or IP address is kept, and the one-time code is never stored.
- Candidate records (Recruit, when a customer uses it): see "Job applicants" below.
- A history of changes: who changed which record, and when.
- Billing details, which our payment provider handles. We do not see or store card numbers.
- Basic technical logs, such as IP addresses, kept by our hosting providers for security.
What we don't collect. DATUM does not store health surveillance results, medical records or the results of fitness-for-work tests. Please do not enter them.
How we use it
To provide and secure DATUM, send account emails and alerts, bill customers, and respond to questions. We do not sell personal information or use it for advertising. We do not use customer records to train AI models.
Decisions made with computer programs
DATUM runs automatic checks that can affect workers and candidates. A person makes every decision. DATUM flags and suggests; it does not approve, reject, discipline or hire anyone on its own.
| Check | Information used | What DATUM does | Who decides |
|---|---|---|---|
| Training currency | Training records and expiry dates | Marks a ticket expired or expiring, and emails the people the site chooses | A supervisor or trainer |
| Attendance | Roster, sign-ins, timesheets, approved leave | Flags missing sign-ins, timesheets or signatures, and times outside the roster | The supervisor approves or corrects the hours |
| Hours for payroll | Roster and sign-ins | Proposes the hours to approve | A nominated approver; nothing goes to payroll unapproved |
| Safety follow-up | Actions, due dates, approvals | Flags overdue actions and items waiting for review | The safety approver |
| Job applications (Recruit) | The application and interview scores | Shows which role requirements are met or missing, and totals the interview scores | A person progresses or rejects every candidate and records why |
DATUM never measures a worker by the incidents they report or are involved in, and never uses sick leave or other protected leave in these checks.
Job applicants
When a company uses DATUM Recruit, we hold applications for that company. These include contact details, work history, tickets and licences, answers to role questions, interview notes and scores, and the decision with its reason. Before applying, applicants see the company's collection notice and give consent. Interviewers can't see age, gender, photos or address. Recruit asks no health, injury or workers' compensation questions. Unsuccessful applications are deleted 12 months after the role closes, unless the applicant asks to stay in the company's talent pool.
Where it is stored, and who helps us
- Records are stored in Sydney, Australia, with Supabase.
- The website is hosted by Vercel.
- Emails are sent by Resend.
- Payments are handled by Stripe.
Some of these providers are based in, or may process information in, the United States. We use them only to run DATUM, under their security and privacy terms.
Security
Data is encrypted in transit. Each customer can see only its own records, and the database itself enforces this. Within a company, access depends on each person's role. Changes are logged, and data is backed up daily.
Access, correction and deletion
- Workers, visitors and applicants: ask the company that recorded you first. If you can't reach them, email ben@tovelly.com.au and we will pass the request on and help.
- Users: you can see and correct your records in DATUM, or email ben@tovelly.com.au.
- We respond within 30 days.
Deleting your account
Email ben@tovelly.com.au from the address you sign in with. We delete your sign-in within 30 days. If you are your company's only admin, tell us whether to delete the company's records too, and export them first if you need to keep them.
Complaints
Email us first and we will try to resolve it. If you are not satisfied, contact the Office of the Australian Information Commissioner at oaic.gov.au.