Privacy Policy

A.Oiteirinho Pty Ltd (ABN held under registered name) is a civil construction subcontractor based in Sydney, Australia. The Oconics platform is an internal-use tool we built for our own crew — employees and subcontractors — to manage site sign-ins, safety inductions, white card and licence verification, site photos, and payroll-related records. It is not a public marketplace.

We only collect information that is necessary to run our business safely and lawfully. Specifically:

The Oconics Worker app uses location only while you are using the app (foreground / “While Using the App”). It does not track your location in the background and does not run a background location service.

How it is used:

• When you sign in or out on site, the app records the GPS coordinates at that moment so we can confirm which registered Ocon Concrete Group project you were at.
• Location is captured only at the point of a sign-in / sign-out you initiate in the app — there is no continuous or background tracking, and nothing is recorded when the app is closed.
• You can revoke the location permission at any time in your phone’s Settings (Location → Oconics Worker). Sign-in still works; the location simply isn’t attached.
• Location is never used for advertising, performance evaluation, or sharing with any third party.

We do not sell your personal information and we do not share it for advertising. The only third parties that handle your data are service providers we use to run the platform itself:

Each of these is bound by their own privacy obligations and by the terms we have agreed with them. We may also disclose information where required by law (for example, a lawful request from the ATO, SafeWork NSW, or a court order).

While you are an active worker or subcontractor for us, your profile and activity history remain in the platform so admins can see who has done what.

After you stop working with us, we keep records for 7 years as required by Australian tax law (s 262A ITAA 1936) and Work Health & Safety record-keeping requirements. After that period the records are deleted or anonymised.

Site photos and diary entries are kept for the life of the project plus the same 7-year window so we can defend defect claims during the statutory liability period.

All traffic between your device and our servers is encrypted using TLS (HTTPS). Data at rest in our database is encrypted by our hosting provider. Access to the admin side of the platform is restricted to authorised personnel at Ocon Concrete Group. Passwords are stored as one-way hashes — we cannot read them, even ourselves.

No system is perfectly secure. If we ever become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

You have the right to:

• Ask us what personal information we hold about you;
• Ask us to correct information that is wrong or out of date;
• Ask us to delete information about you — subject to the 7-year retention obligations noted above;
• Withdraw consent for optional features (such as optional site photos) at any time;
• Make a complaint to the Office of the Australian Information Commissioner if you believe we have mishandled your information — see oaic.gov.au.

To exercise any of these rights, email us at the address at the bottom of this page.

The Oconics Worker app is for adults working on commercial construction sites. It is not directed at children under 16, and we do not knowingly collect information from anyone under that age. If you believe a child has provided us with information, contact us so we can delete it.

You can ask for your OCONICS (Oconics Worker) account and the personal information linked to it to be deleted at any time:

1. Email anthony@oconconcretegroup.com.au with the subject “Delete my Oconics account”, sent from the email address (or including the phone number) on your account so we can confirm it’s you.
2. We confirm the request, disable your sign-in straight away, and complete the deletion within 30 days.

What is deleted: your login (so you can no longer sign in), your worker profile contact details (name, phone, email, residential address, date of birth, profile photo), and the bank / tax details held for payroll (TFN, super, bank account).

What we must keep: your work health & safety and financial records are retained as the company’s compliance records and are not deleted when you close your account. These include your signed induction(including the signed induction PDF and the identity, emergency-contact and white-card details it records), your SWMS acknowledgements, your licence, white-card and insurance records, your timesheets, and any signed site records (site claims, pour records). These are required under Australian work health and safety and tax (ATO) laws (see section 5); tax-related records are held for up to 7 years and then deleted. While retained, they are used only for those compliance purposes and are no longer linked to a login you can access.

We may update this policy from time to time — for example, when we add a new feature that involves a new type of data. The “Effective” date at the top of the page shows when the current version took effect. Material changes will be notified in-app before they take effect.

Questions, requests for access or correction, or complaints can be directed to: