Privacy

Privacy policy

This notice explains how Jengu, the healthcare recruitment service at www.jengu.com.au, handles personal information. The legal entity name and ABN will be added here before publication. Until then, “Jengu” means the operator of this website.

We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Health information is sensitive information under that Act. A CV often contains it, even when we do not ask for a medical history.

A nurse in blue scrubs, smiling
Clinicians talking with a patient beside a hospital bed

What we collect

If you register as a candidate, we ask for:

  • your name, email, mobile, suburb, state or territory, and postcode
  • your profession, specialty, years of experience and the work you want
  • your availability and your right to work in Australia
  • an AHPRA registration number, if you choose to give one
  • your CV, which may include employment history, qualifications and health information such as immunisation or fitness for work
  • whether you agree to occasional updates about roles

If you use the contact form, we collect your name, email, organisation if you give one, the kind of enquiry, and your message. Privacy requests use the same form. Choose “Privacy request”.

If you register a vacancy, we also collect your phone number, the role, how many positions, the state or territory and suburb, the employment type, start date, shift details, the credentials you need, an optional pay note, a description, and an optional position description file.

We also process a network address, briefly, to limit misuse of the forms. We store a hash of it with a short-lived counter, not a profile of where you are. Cloudflare Turnstile checks that a form was sent by a person. We do not use it to build a marketing record.

Why we collect it

We collect candidate information to consider you for nursing, allied health and medical work across Australia, to check that a role is a plausible fit, and to prepare a conversation with you and, if you want to proceed, with an employer. We cannot do that anonymously. The contact form is how employers, candidates and people making a privacy request reach us.

We collect sensitive information, including health information that may be in a CV, only with your consent and only for recruitment and the compliance that goes with it. The consent checkbox is that consent. We do not ask you to give us a full medical history in the form.

An AHPRA number is a professional registration number. We use it to understand your registration. We do not adopt it, or any government identifier, as our own identifier for you.

Marketing

We only send optional notes about roles and news if you tick the marketing box. You can ask us to stop by sending a privacy request through the contact form. Saying no to marketing does not affect whether we consider you for work.

Who we share it with

We do not sell personal information. We share it only as needed:

  • with an employer, when you have agreed to be introduced for a particular role
  • with people at Jengu who are handling that introduction
  • with service providers who host the site, store files, check forms, or, if we switch it on, send operational email
  • where the law requires it

CVs are stored in a private storage bucket. There is no public link to them. Staff and systems that do not need a CV cannot fetch it from the website.

People at Jengu who handle your registration can use the systems we keep for that work, including a copy of your CV. Those copies are not published.

Overseas processing

Our infrastructure provider, Cloudflare, operates a global network. Personal information may be processed outside Australia. We take steps we reasonably can so that overseas handling stays consistent with the APPs. If we store information in a particular country, we will say so in an updated notice.

How long we keep it

We keep a candidate profile while you are looking for work with us, and for a further period that lets us meet recruitment, insurance and legal obligations. The exact schedule will be set before this notice is published. If we receive something we did not ask for and do not need, we will delete it or de-identify it.

You can ask us to correct your details, or to delete a profile we no longer need, through a privacy request on the contact form.

Access and correction

You can ask for a copy of the personal information we hold about you, and ask us to correct it if it is wrong, out of date or misleading. Use the contact form and choose “Privacy request”. We may need to confirm you are the person the record is about before we release it. We will not charge you for making the request. If a copy takes unusual effort, we will explain any charge before we proceed.

If something goes wrong

If we suspect a data breach that is likely to cause serious harm, we will assess it under the Notifiable Data Breaches scheme and, where the scheme requires it, tell the Office of the Australian Information Commissioner and the people affected.

Complaints

Please tell us first, through a privacy request on the contact form, and give us a chance to put it right. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We will post any updated notice on this page. If a change affects how we use information we already hold, we will take reasonable steps to let the people affected know, usually the next time we are in touch.

This policy was published on 11 November 2026.