Privacy

Who we are

WorkOn Health is a workforce-management product for New Zealand residential aged-care operators. The operator of this site is the data controller for marketing-page visitors; once you become a customer, your facility is the data controller for your staff and resident records and WorkOn Health is the data processor.

What this public page collects

The public landing surface does not set marketing or analytics cookies, does not embed third-party scripts, and does not record visitor identifiers. The only data your browser sends is what HTTP requires to fetch the page.

What we collect from customers

Once a facility signs in, we collect the data the operator loads or generates inside the product: staff records, resident or client identifiers, roster rows, timesheet records, payroll-export rows, and an append-only audit trail of administrative actions. We collect this on the operator's instructions, in order to deliver the rostering service.

Where data lives

Customer data is stored in tenancy-isolated PostgreSQL databases hosted in a New Zealand-served region. Encryption at rest is enforced by the database provider. Application secrets and customer-managed keys are held under AWS KMS in ap-southeast-2 (Sydney).

Your rights under the NZ Privacy Act 2020

You can ask for a copy of the personal information we hold about you, ask us to correct it if it is wrong, and ask us to delete it (subject to statutory record-keeping obligations for payroll, audit, and clinical records). If you are a staff member at a facility that uses the product, please raise the request with your facility first; we will respond to facility-routed requests in line with the operator's timeline.

How to reach us

For privacy questions, complaints, or access requests:
Use the contact page and mark your message "Privacy".

You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.