Privacy Policy

HCR Media (HCR, we, us or our) operates hcrmedia.net and the related services offered through the website. This policy applies when you browse the site, create an account, purchase or manage a membership, access member content, submit or apply for an opportunity, join HCR Talent, submit a business brief, contact us or otherwise interact with HCR.

We aim to manage personal information openly and responsibly. Where the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to us, we handle personal information in accordance with those requirements. Other privacy laws may also apply depending on where you live.

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. It may include information that identifies you directly as well as information that can identify you when combined with other data.

De-identified or aggregated information that cannot reasonably identify an individual is not treated as personal information under this policy.

Depending on how you use HCR, we may collect your name, email address, telephone number, billing or business address, location, time zone, age or eligibility confirmations, account credentials, customer and subscription identifiers, order history, membership tier, payment status, preferences and communications.

We may also collect professional information such as your role, skills, experience, portfolio, profile links, availability, rates, work preferences, application answers, uploaded material and other information included in a Talent application or job application.

For business users, we may collect organisation details, contact information, job title, budget, location, work arrangement, project dates, deliverables, applicant instructions and information needed to review or publish an opportunity.

Our website and service providers may automatically collect device type, browser type, operating system, IP address, approximate location, referring page, pages viewed, dates and times of access, interactions with site features, cookie identifiers, fraud signals and diagnostic data.

This information helps keep the site secure, maintain account sessions, understand performance, troubleshoot problems, prevent misuse and improve navigation and communications.

HCR uses Shopify to operate the online store, customer accounts, checkout, orders and subscriptions. Shopify and payment providers process transaction and payment information required to complete a purchase, detect fraud, manage recurring billing and support refunds or disputes.

HCR generally does not store complete payment-card details. Those details are handled by Shopify and the relevant payment provider under their own terms and privacy practices. We may receive transaction confirmations, payment status, limited card details, billing information and identifiers needed to manage your purchase.

We collect information directly from you when you complete forms, create an account, purchase, communicate with us, apply, submit a role or use member tools. We collect some information automatically through cookies, logs and similar technologies.

We may also receive information from Shopify, payment providers, analytics providers, email or customer-support tools, fraud-prevention providers, social platforms, businesses submitting opportunities and other users where reasonably necessary to operate HCR.

We may use personal information to create and administer accounts; process purchases, renewals, cancellations and refunds; provide tiered access; deliver courses and resources; display or moderate job listings; review Talent applications; connect relevant applicants and businesses; respond to enquiries; provide service messages; and maintain records.

We may also use information to personalise the service, measure site performance, understand demand, improve products, prevent fraud or misuse, enforce our Terms, protect users and HCR, comply with legal and accounting obligations, manage disputes and establish or defend legal claims.

When you apply for an opportunity or join HCR Talent, information you provide may be reviewed by HCR and disclosed to the relevant employer, business or authorised representative where this is part of the stated process. Once disclosed, that party may handle the information under its own privacy policy and legal obligations.

When a business submits a role, HCR may use and publish relevant business and opportunity information, excluding details identified as private. The submitting business is responsible for having authority to provide the information and for giving accurate application instructions.

We may disclose personal information to Shopify, payment processors, hosting and cloud providers, email and communications services, analytics providers, customer-support tools, security and fraud-prevention providers, accountants, insurers, professional advisers and contractors who support the service.

We may also disclose information where you direct or consent to the disclosure; where required or authorised by law, a regulator, court or law-enforcement authority; to investigate suspected fraud, safety concerns or Terms violations; or in connection with a proposed or completed sale, merger, restructure or transfer of the business.

Shopify and other technology providers may store, process or access information outside Australia. Their locations and infrastructure may change over time. Depending on the provider, information may be processed in countries including the United States, Canada and other locations where a provider or its subcontractors operate.

Where required by applicable law, we take reasonable steps in the circumstances to address overseas handling of personal information. However, privacy protections and enforcement processes can differ between countries.

HCR and its providers may use cookies, pixels, local storage and similar technologies to keep accounts signed in, remember preferences, maintain security, operate checkout, measure traffic, understand interactions and improve marketing.

You can manage some technologies through browser settings or any consent controls made available on the site. Blocking essential cookies may prevent account access, checkout or other features from functioning correctly.

Where permitted, we may use your contact details and interactions to send HCR news, opportunity updates, product information or other relevant marketing. You can unsubscribe using the link in a marketing message or contact HCR.

Unsubscribing from marketing does not prevent essential account, transaction, security, subscription or support communications.

We use reasonable technical and organisational measures intended to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure. These measures may include access controls, hosted platforms, security monitoring and limiting access to people who need information for a legitimate purpose.

No internet transmission, email, database or storage system is completely secure. You are responsible for keeping account credentials confidential and for notifying HCR promptly if you suspect unauthorised access.

Retention periods depend on the type of information, why it was collected, whether an account or subscription remains active, legal and accounting requirements, fraud prevention, dispute handling and the need to establish or defend claims.

When personal information is no longer reasonably required and no legal basis requires it to be retained, we may delete, destroy or de-identify it. Backup systems may retain residual copies for a limited period.

You may request access to personal information we hold about you, ask us to correct information you believe is inaccurate, or make another privacy request available under applicable law. We may need to verify your identity and clarify the scope of a request before responding.

We may refuse or limit a request where permitted or required by law, including where disclosure would affect another person's privacy, reveal confidential or commercially sensitive information, prejudice an investigation or be unlawful. If we refuse a request, we will explain the reason where required.

HCR is not directed to young children and does not knowingly seek to collect personal information from children who cannot lawfully consent or transact. A parent or guardian who believes a child has provided personal information may contact HCR to request review or deletion, subject to applicable law.

HCR may link to third-party websites, application portals, social platforms or employer pages. We do not control their privacy, security or content. Review their policies before providing information.

Names, trade marks and logos may appear for identification, editorial, portfolio, example or opportunity-description purposes. Unless expressly stated, their appearance does not mean the owner sponsors, partners with or endorses HCR.

Contact HCR with your name, contact details, the interaction or account involved and a clear description of the concern. Do not send passwords, complete payment-card details or unnecessary identity documents through a general form.

We will review the matter and respond within a reasonable period. If the Privacy Act applies and you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner or another relevant regulator.

We may update this policy when our services, providers, information practices or legal obligations change. The revised policy will be published on this page with an updated effective date. Where required, we will provide additional notice or seek consent.