Privacy Policy
Effective 21 June 2026
This policy explains how A.Oiteirinho Pty Ltd, trading as Ocon Concrete Group (“we”, “us”, “our”), collects, uses, stores, and shares personal information when you use the Oconics platform — including the Oconics mobile app and the oconics.com.au web app. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. Who we are
A.Oiteirinho Pty Ltd (ABN held under registered name) is a civil construction subcontractor based in Sydney, Australia. The Oconics platform is an internal-use tool we built for our own crew — employees and subcontractors — to manage site sign-ins, safety inductions, white card and licence verification, site photos, and payroll-related records. It is not a public marketplace.
2. What data we collect, and why
We only collect information that is necessary to run our business safely and lawfully. Specifically:
3. Location — what you need to know
The Oconics app uses location in two different ways. Which ones apply to you depends on whether automatic sign-on is switched on for your account — it is off unless you turn it on.
a) When you sign on or off by hand — everyone
When you sign on or knock off, the app records where you are at that moment, so we can confirm which Ocon Concrete Group site you were at. That is a single reading taken when you press the button. Nothing is recorded in between.
b) Automatic sign-on and sign-off — only if you turn it on
With this on, Oconics checks where you are in the background — even when the app is closed or not in use — and uses your phone’s geofencing to sign you on automatically when you arrive at an Ocon site, and sign you off when you leave, so your timesheet is right without you having to remember.
This means your phone does check your location in the background, including when the app is shut. It has to: you drive onto site with the phone in your pocket and the app closed, and that is exactly the moment we need to record. It is the only way to make your start and finish times right without you having to remember to press anything.
Your phone only compares your position against Ocon Concrete Group job sites. Away from those sites nothing is recorded and no trail of your movements is kept — the only thing saved is the time you arrived at or left a site, and the location fix at that moment, on your timesheet. It is never used for advertising, never sold, and never shared with anyone outside Ocon Concrete Group.
Three separate switches all have to be on before any of this happens: the office has to enable it for you, you have to accept it on your own phone, and your phone’s location permission has to be set to “Allow all the time”. If any one of them is off, no background location is collected at all.
You can turn it off three ways, and any one of them on its own is enough to stop it: the Turn off button on the “Auto sign-in when you arrive” card in the app; your phone’s Settings (Location → Oconics); or by asking the office to switch it off for you. Turning it off does not affect your pay or your ability to sign on by hand.
Either way
- Everything above about how location is used, kept and never shared applies to both ways of signing on, not just the automatic one.
- It is not used to monitor how you are performing your work — only to record which site you were on and when.
- You can revoke the location permission at any time in your phone’s Settings (Location → Oconics). Signing on by hand still works; the location simply isn’t attached.
- Times recorded automatically can be corrected. If the app gets your start or finish time wrong, tell the office and they can change it — and anything that looks unusual is flagged for a human to check before it is used for pay.
5. How long we keep your data
While you are an active worker or subcontractor for us, your profile and activity history remain in the platform so admins can see who has done what.
After you stop working with us, we keep records for 7 years as required by Australian tax law (s 262A ITAA 1936) and Work Health & Safety record-keeping requirements. After that period the records are deleted or anonymised.
Site photos and diary entries are kept for the life of the project plus the same 7-year window so we can defend defect claims during the statutory liability period.
6. How we protect it
All traffic between your device and our servers is encrypted using TLS (HTTPS). Data at rest in our database is encrypted by our hosting provider. Access to the admin side of the platform is restricted to authorised personnel at Ocon Concrete Group. Passwords are stored as one-way hashes — we cannot read them, even ourselves.
No system is perfectly secure. If we ever become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.
7. Your rights
You have the right to:
- Ask us what personal information we hold about you;
- Ask us to correct information that is wrong or out of date;
- Ask us to delete information about you — subject to the 7-year retention obligations noted above;
- Withdraw consent for optional features (such as optional site photos) at any time;
- Make a complaint to the Office of the Australian Information Commissioner if you believe we have mishandled your information — see oaic.gov.au.
To exercise any of these rights, email us at the address at the bottom of this page.
8. Children
The Oconics app is for adults working on commercial construction sites. It is not directed at children under 16, and we do not knowingly collect information from anyone under that age. If you believe a child has provided us with information, contact us so we can delete it.
9. Delete your account and data
You can ask for your OCONICSaccount and the personal information linked to it to be deleted at any time:
- Email anthony@oconconcretegroup.com.au with the subject “Delete my Oconics account”, sent from the email address (or including the phone number) on your account so we can confirm it’s you.
- We confirm the request, disable your sign-in straight away, and complete the deletion within 30 days.
What is deleted: your login (so you can no longer sign in), your worker profile contact details (name, phone, email, residential address, date of birth, profile photo), and the bank / tax details held for payroll (TFN, super, bank account).
What we must keep: your work health & safety and financial records are retained as the company’s compliance records and are not deleted when you close your account. These include your signed induction(including the signed induction PDF and the identity, emergency-contact and white-card details it records), your SWMS acknowledgements, your licence, white-card and insurance records, your timesheets, and any signed site records (site claims, pour records). These are required under Australian work health and safety and tax (ATO) laws (see section 5); tax-related records are held for up to 7 years and then deleted. While retained, they are used only for those compliance purposes and are no longer linked to a login you can access.
10. Changes to this policy
We may update this policy from time to time — for example, when we add a new feature that involves a new type of data. The “Effective” date at the top of the page shows when the current version took effect. Material changes will be notified in-app before they take effect.
11. Contact us
Questions, requests for access or correction, or complaints can be directed to: