Privacy Policy
Effective date: 28 August 2026
Policy version: 1.1
Short privacy summary
Orchard Tech collects information that people choose to provide through website enquiries, employer enquiries, job applications and update-request forms. Our hosting and security providers also process ordinary technical request information needed to deliver and protect the website.
The Worker Portal can also provide an optional Hazard Alert, Contact Orchard Tech message and Training and Induction Upload. Hazard alerts are an early notification channel and do not replace immediate safety action or formal reporting. Contact messages accept text only. Training uploads accept only bounded JPG, JPEG or PNG page photos and are subject to the specific collection notice shown with the form.
We use this information to respond to enquiries, assess job applications, provide requested updates, operate worker resources, maintain security and meet legal obligations.
The Orchard Tech mobile app has a separate, more specific Orchard Tech App Privacy Policy.
1. Who is responsible
This website is operated by Suvarnabhoomi Pty Ltd ACN 141 241 769 as trustee for the Suvarnabhoomi Discretionary Trust, ABN 16 102 266 894, trading as Orchard Tech.
In this policy, “Orchard Tech”, “we”, “us” and “our” refer to that operator.
We handle personal information in accordance with applicable Australian privacy law, including the Privacy Act 1988 and Australian Privacy Principles where they apply.
2. What this policy covers
This policy covers personal information handled through:
orchardtech.com.auandwww.orchardtech.com.au;- the public Orchard Tech worker portal;
- website contact, employer, subscription and job-application forms;
- related website support and privacy communications;
- Worker Portal Hazard Alert and Contact Orchard Tech forms when enabled; and
- the Worker Training and Induction Upload and its specific Privacy Collection Notice when enabled.
More specific collection notices may apply to recruitment, employment, payroll, workplace reporting or another particular interaction. The Orchard Tech mobile app is covered by the separate App Privacy Policy linked above.
External websites are governed by their own privacy policies.
3. Information we collect
Depending on how a person uses the website, we may collect:
- name, email address, telephone or WhatsApp number and selected country;
- company name, industry and the content of an employer enquiry;
- contact-form messages and other correspondence;
- update or opportunity subscription details;
- job applied for, application message or motivation, and an optional PDF resume;
- employment, education, qualification or other information a person chooses to include in a resume;
- website and worker-library search terms or filters;
- privacy-request or complaint information;
- technical request information described below;
- hazard-alert details, including the reported farm or location, hazard category, description, optional worker contact details and an optional JPG or PNG photo;
- Contact Orchard Tech message details, which may be provided with a name and reply details or without those fields; and
- training and induction upload details, including worker name and Orchard Tech ID, evidence category and title, document code or version, completion date, trainer or supervisor, language and assistance information, work site where relevant, an optional note and up to 10 JPG, JPEG or PNG page photos with an aggregate limit of 8 MiB.
A resume or message may contain additional personal information chosen by its author. Please do not provide passports, bank details, unrelated medical records or other sensitive information unless Orchard Tech specifically requests it through an appropriate process and explains why it is needed.
4. How we collect information
We collect personal information directly when a person:
- submits a contact, employer, update or job-application form;
- uploads a resume;
- contacts us by email, phone or another communication service;
- asks for access, correction or privacy assistance; or
- otherwise provides information to Orchard Tech.
We also collect information directly when a worker submits an enabled Hazard Alert, Contact Orchard Tech message, or Training and Induction Upload. A public submission does not independently prove the sender’s identity.
We also receive technical request information automatically when a browser or device connects to the website.
5. How we use information
We may use personal information to:
- answer questions and respond to requests;
- assess and administer job applications;
- communicate about an application, enquiry or requested opportunity;
- understand an employer’s staffing enquiry;
- provide public worker information and requested documents;
- deliver requested news or opportunity updates;
- operate, maintain, troubleshoot and secure the website;
- prevent misuse, spam and security incidents;
- investigate and resolve complaints;
- maintain records needed for business, legal or dispute-resolution purposes;
- comply with applicable laws and lawful requests;
- alert the configured Orchard Tech recipient to a reported hazard so the normal workplace response can begin;
- receive and respond to a worker message through an approved channel; and
- receive, match and review training or induction evidence and transfer accepted material into Orchard Tech’s established controlled training-record process.
If we use contact information for direct marketing, we will do so with consent or as otherwise permitted by law. A recipient can ask us to stop at any time by using an unsubscribe facility provided with the communication or contacting us.
6. Job applications and resumes
A job application may include contact details, the role applied for, a short message and an optional PDF resume.
We use this information to assess the application, contact the applicant and administer recruitment. Where relevant and lawful, information may be provided to Orchard Tech personnel, recruitment service providers, or a prospective client or host business involved in assessing or arranging the opportunity.
Applicants should provide only information relevant to the application. Orchard Tech may need to provide an additional collection notice if it later requests identity, work-right, health, background-check or other information not collected by the current website form.
7. Technical information, cookies and browser storage
When a person visits the website, Orchard Tech’s hosting, content-delivery and security providers may process:
- IP address and routing information;
- request date and time;
- requested page, file or search URL;
- browser, device, user-agent and request-header information;
- referring page, response status, cache and routing information; and
- security, diagnostic and error information.
We use this information to deliver requested content, understand whether the service is functioning, protect the website, investigate faults and meet legal obligations. Hosting and security providers can generate aggregate traffic, request, performance, error and security statistics. We do not use this information to create advertising profiles or track people across unrelated websites.
The website may use essential cookies or browser or session storage for security, technical compatibility, language or protected-access functions. Blocking essential storage may prevent parts of the website from working.
Some pages currently load technical assets from third-party content-delivery networks or external hosts. Those providers receive ordinary request information when a browser loads their asset. Orchard Tech will update this policy and provide any required choices before introducing materially different behavioural analytics, advertising or cross-site tracking.
8. Worker portal
The public Worker Portal provides published documents and resources without requiring a worker account. It does not request a worker’s device location through the website.
When enabled, the Hazard Alert is a lightweight early-alert channel. It may accept text and one optional JPG or PNG image. The service decodes and reconstructs an accepted hazard image as a new JPEG before email handoff, removing the source filename and image metadata. A Hazard Alert does not replace moving to safety, telling the farm manager or supervisor, calling 000 when required, or completing the established formal report and paperwork.
When enabled, Contact Orchard Tech accepts message text only. A worker may provide a name and reply details or leave those identity fields blank. The service does not promise technical anonymity because the message wording and ordinary hosting or security request information may still identify a person. It refuses file attachments and instructs workers not to include private-document information.
When enabled, the Training and Induction Upload accepts the fields described in the specific Privacy Collection Notice and up to 10 JPG, JPEG or PNG page photos with a combined limit of 8 MiB. It does not accept PDF or HEIC files in this release. Each source image is decoded, bounded, flattened, resized where necessary and rewritten as a new generic JPEG. The original upload, original filename, EXIF and GPS metadata, appended bytes and other original file structure are not included in the rebuilt page. All original uploads are deleted before email handoff, and the entire training submission fails closed if any page cannot be safely validated and rebuilt.
Rebuilt training pages and validated form details are handed to the fixed restricted mailbox workerforms@orchardtech.com.au through Orchard Tech’s authenticated email service. Hazard alerts and Contact Orchard Tech messages are handed only to their configured Orchard Tech recipient. Submissions are not published or saved in the WordPress Media Library.
The training form is an intake channel only. A handoff reference does not prove mailbox delivery, training or induction completion, competency, review or Orchard Tech verification. Hazard and contact handoffs likewise do not prove delivery, acknowledgement, action or resolution.
If protected employee-document access is enabled, the portal may use an essential, signed access cookie for up to two hours and use a protected digest derived from request information for rate limiting. The access code is checked but is not intended to be retained as readable text.
9. Who receives information
Personal information may be disclosed to:
- authorised Orchard Tech personnel and contractors who need it for their work;
- website hosting, security, email, communications, IT-support and recruitment service providers;
- a prospective client or host business where relevant to an application and consistent with the applicable notice, consent and law;
- professional advisers, insurers or auditors where reasonably necessary; and
- regulators, law-enforcement bodies, courts or other parties where authorised or required by law.
Worker submissions may be disclosed to the fixed restricted Orchard Tech mailbox and the specifically delegated compliance, operations or safety role that needs the information. Workers cannot choose or alter the email recipient.
We require service providers to handle information for the services they provide and subject to applicable contractual and legal obligations.
10. Overseas processing
The website is delivered through Cloudflare and hosted by WP Engine. Both are United States-based providers and may process technical request information using international infrastructure and subprocessors.
Technical information may be processed in the United States, the European Economic Area and other countries in which these providers or their approved subprocessors operate. Email, communications, content-delivery and other service providers may also process information outside Australia.
Where Australian privacy law applies to an overseas disclosure, Orchard Tech takes the reasonable steps required by that law, subject to any applicable exception. A person may contact us for more information about likely overseas processing relevant to their interaction.
11. External links and communications
The website and worker portal link to government agencies, workplace regulators, PALM Scheme resources, Facebook and other external services. When a person follows an external link, that provider receives ordinary request information and applies its own privacy policy.
If a person communicates with Orchard Tech through WhatsApp, email, telephone or another service, that service provider and telecommunications provider handle the communication under their own terms and privacy practices.
12. Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, related recruitment or service administration, security, complaint handling, legal obligations and legitimate recordkeeping needs.
Retention depends on the type of record. Enquiries, job applications, resumes, communications, technical logs and backups may have different retention periods. When information is no longer required, we take reasonable steps to destroy or de-identify it where permitted by law.
Original training page uploads are intended to exist only while a request is validated and rebuilt and are deleted before email handoff. Interrupted private temporary files are subject to bounded cleanup. Rebuilt training pages and the intake email are deleted from the worker-forms mailbox within 30 days after transfer or rejection and do not normally remain there for more than 90 days, except while review is genuinely unresolved or a documented legal hold, investigation or lawful requirement applies. The accepted formal record is retained separately under the applicable approved company record schedule. Provider logs and backups follow their separate retention cycles.
13. Security
We use reasonable technical and organisational safeguards appropriate to the information and risks. These may include HTTPS, access controls, service-provider protections, security monitoring, backups and restricted staff access.
Worker forms use bounded request and file limits, server-side validation, anti-automation and rate controls, private temporary storage, fixed recipients, one-time submission claims and duplicate-request protection. Accepted images are reconstructed rather than forwarding the original file structure. No Cloudmersive, Cisco Talos or other external malware-submission service receives the training pages in this release.
No internet transmission or storage system is completely secure. Orchard Tech assesses suspected eligible data breaches and, where the Notifiable Data Breaches scheme applies, notifies affected people and the Office of the Australian Information Commissioner as required.
14. Access, correction and privacy complaints
A person may contact Orchard Tech to:
- ask whether we hold personal information about them;
- request access to or correction of that information;
- request deletion where appropriate; or
- make a privacy complaint.
We may need to verify identity before providing access or making a change. If we cannot provide access, correction or deletion, we will explain the reason and available complaint avenues where required.
Orchard Tech aims to respond within 30 calendar days.
Please first send a complaint to Orchard Tech using the details below. If Orchard Tech does not respond within 30 days, or the person is dissatisfied with the response, they may contact the Office of the Australian Information Commissioner.
A free copy of this policy in another reasonably requested format can be requested using the same contact details.
15. Changes to this policy
We will review this policy when website functions or information handling materially change. The current effective date will remain displayed on this page. We will provide an appropriate notice where a change materially affects people’s privacy.
16. Contact
Privacy contact: Hari Yellina
Legal operator: Suvarnabhoomi Pty Ltd ACN 141 241 769 as trustee for the Suvarnabhoomi Discretionary Trust, ABN 16 102 266 894, trading as Orchard Tech
Email: hari@orchardtech.com.au
Phone: +61 439 323 232
Postal address: 12 Happy Valley Road, Robinvale VIC 3549, Australia
Please use the subject line Privacy request.
