Privacy Policy

Last updated: November 27, 2025

This Privacy Policy explains how Dittor Pty Ltd ("Dittor") collects, uses, protects, and shares your personal information and your rights in relation to that information. If you have any questions, please don't hesitate to contact us using the contact details at the end of this Privacy Policy.

When we refer to “Dittor”, “we” or “us”, we mean Dittor Pty Ltd and its related companies. Capitalized terms that are not defined in this Privacy Policy have the meanings given to them in Dittor's subscription agreement (“Subscription Terms”).

This Privacy Policy applies in connection with your use of Dittor's online workforce management software services, or any other Dittor services and products that refer or link to this Privacy Policy including our associated support services (together, the “Services”) that Dittor either provides to your employer organization or to you directly and any other interactions that you have with us, including when you visit our website or speak with us over the phone.

Dittor's Services are mostly intended for use by employer organizations. The party to the Subscription Terms will control its instance of the Services and be responsible for the personal information it discloses to Dittor.

Please note that if Dittor is providing the Services to your employer organization, we use your personal information to allow you to access and use the Services for and on behalf of your employer organization. However, there will be circumstances under which we use your personal information for purposes that are not for and on behalf of your employer organization, for example, if you use the Services or contact us outside of the context of your relationship with your employer organization and when you browse our website.

If you are a California resident, please review our California Consumer Privacy Act disclosures that contain privacy disclosures where we act as a business under the California Consumer Privacy Act.

This Privacy Policy does not apply to any third-party websites, applications, or software that integrates with the Services or any other third-party products, services, or businesses.

Personal Information Collected and Received by Dittor

Dittor collects and receives several different types of personal information, including the following:

Information Type	Examples
Profile Information	Personal information that is provided by you when you sign up and use our Services such as your name, date of birth, email address, phone number, residential address, gender (including gender neutrality) and profile photo.
Financial Information	Transaction history, credit card details and other billing information; financial details including bank account, tax and superannuation/pension information if your instance of the Services includes HR or Payroll products.
Employment Information	Information about your employer(s), term of employment, your remuneration, and position or job function; shift information, including the time and date of shifts worked and scheduled; photos of you when you clock in and out of shifts (if your instance of the Services has this feature turned on); onboarding forms and documents.
Job Applicant Information	Resume or job application information such as the details provided in your resume, your eligibility to work, your education, training/certifications, previous employment details and job application videos (optional).
Sensitive Information	Biometric information if your instance of the Services has a “kiosk” installed and facial recognition features are enabled; identity information such as social security number, copies of passport and driver's licence or identification card and citizenship and immigration status information; membership of a professional or trade association.
Precise Geolocation Information	If you clock in and/or clock out of your shift on a phone or mobile device.
Usage and Activity Information	Information on how the Service is accessed and used, as well as usernames and passwords; records of your communications and interactions with us.
Device Information	Information about your device (e.g. desktop, laptop, phone, tablet) used to access the Services such as connection type and settings, operating system, browser type, IP address, time zone settings, the time spent on webpages, unique device identifiers and other diagnostic data; cookies (and related online tracking technologies).
Your Content	Content submitted to Dittor's websites, or when you participate in any interactive features; information you create and submit to us or enter into the Services.
Preferences, Interests, and Opinions	Your preferences in receiving marketing communications from us; your feedback and opinions about us and the Services.
Support Information	Information provided by you to our support teams providing assistance to you in relation to our Services including: contact information, written and oral summaries of the issue, documents, images & recordings.

Certain aspects of your personal information, for example profile information, are required for many Services and if you fail to supply such information as requested for any specific Service, we may be unable to provide you with the Services in full and your enjoyment of such Services may be more limited.

How Dittor Collects Personal Information

We may collect personal information about you when:

You provide it to us directly – e.g. by submitting a form, contacting us or entering it in using the Services.
We receive it from another party or source – e.g. your employer organization, our related companies, public information and the parties described under "Sharing and disclosure of personal information" below.
We collect it automatically – e.g. via cookies and log data relating to your use of the Services.

We may combine personal information with information we collect through other means, and create new information from reviews, investigations and analysis.

Purposes of Information Collected

Information is collected, stored, used and disclosed by Dittor for purposes including the following:

To provide the Services to you and our customers (e.g. your employer organization) and to administer, assess, maintain and improve the performance of the Services.
To allow you to access and use the Services (including authentication).
To personalize and optimize your experience when using the Services and to ensure the Services are relevant to you, your device, and to deliver targeted content based on your information, location and preferences.
To provide you with assistance and support in relation to your use of the Services, such as responding to a request or complaint that you may have.
To research and develop the Services for the purpose of improving the Services, and to allow you to participate in surveys or interactive features of our Services when you choose to do so.
To communicate with you about the Services and deliver promotional materials, special offers and general information about the Services which are similar to those you already use or enquired about unless you have opted not to receive such information.
To protect the safety and security of the Services including detecting and responding to security incidents and other malicious or unlawful activity, and to detect, prevent and address technical issues.
To protect Dittor's legitimate business interests including for fulfilling and exercising our obligations and rights including in circumstances where we are required to comply with regulatory orders and audit processes, and for exercising or defending legal claims.
To generate statistical data to uncover collective insights about the use of our Services.
To verify your identity and to detect fraud and potential fraud, including fraudulent payments and fraudulent use of the Services.
In connection with business transfers to facilitate the sale, purchase, merger or demerger of any business by us, including assessing potential transfers and managing transitional arrangements.
Other uses where you have provided your consent.

Sharing and Disclosure of Information

Dittor may share or disclose the personal information listed above to various third parties. These third parties are likely to include:

Your and our representatives.
Technology and media vendors / partners (e.g. telecommunication service providers) that perform services for us, support the delivery of the Services, or connect with the Services (e.g. third-party applications, data storage services).
Social media platforms (e.g. where you interact with our account or link your account to us or the Services).
Our lawyers, accountants and professional advisors.
Other third-party service providers, such as third-party branding service providers.
Our related companies.
Law enforcement authorities and government agencies where we are required or permitted to do so by law, or as a result of a legal process.
Any third party that your employer directs us to share or disclose your personal information to.

Dittor operates in multiple countries. We may handle personal information, and transfer it to recipients, in these countries and other countries, including the Philippines and Vietnam.

Security of Information

Dittor uses technical and organizational measures to secure the information that we collect and store about you and we will use endeavours to protect your information from unauthorised access, alteration, disclosure or destruction.

Please note that no security system is impenetrable and we cannot and do not guarantee the security of your information during transmission through the internet or while stored on our systems or otherwise in our care.

Retention

Your personal information will be retained for the period that is necessary to fulfil the purpose it was originally collected for, or to fulfil the purpose outlined in this Privacy Policy, or to meet legislative or regulatory obligations, such as financial reporting requirements.

After it is determined that your personal information reaches the end of its retention period, we will either delete or anonymize your information or, if this is not possible then we will store your information and isolate it from any further use until deletion is possible.

Cookies

We also use cookies and similar technologies to collect information and improve our Services.

Marketing

From time to time we may send you direct marketing communications regarding our Services. We may contact you by electronic messages (e.g. email), online (e.g. through our Services) and by other means, unless you opt-out or we are subject to legal restrictions from doing so.

Rights in Relation to Personal Information

You may have rights to access, correct, delete or restrict the use of your personal information, or to withdraw your consent to the use of your personal information.

If you reside in Delaware, you may have the right to request from us a list of the categories of third parties to whom we have disclosed your personal data.

Please note that in order to verify your request or the applicability of any of these rights to your circumstances, we may ask you for further information and to verify your identity before responding to such requests.

If we deny your request, we will explain why as required by applicable law. In some states in the United States, you may have the right to appeal our denial, which you may exercise by responding to the message we send to you communicating our denial stating that you appeal our decision. In these cases, we will reconsider your request and then notify you of our decision.

Where a request relating to any of the above rights has been made and information has been shared with third parties, Dittor will take steps to notify third parties of the request.

If you have any questions about these privacy rights, or how to exercise them, please contact us using the contact details at the end of this Privacy Policy. We will respond to your request as required by applicable laws and in accordance with permitted or required timeframes set out in applicable laws.

In certain circumstances, for example, if we only hold your personal information because we are providing the Services to your employer organization, it may be more appropriate for you to exercise these rights against your employer organization rather than against Dittor, in which case we will advise you to do so if you contact us in the first instance.

Complaints

If you have a complaint regarding our handling of your personal information or concerning our privacy practices, you may file a complaint with us using the contact details set out at the bottom of this Privacy Policy.

We may need to contact you to request further details of your complaint. In the unlikely circumstances we are unable to resolve your complaint to your satisfaction, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Privacy Policy Changes

Dittor may change this Privacy Policy at any time. Dittor will post any such changes online. If the changes are material, we may provide a more prominent notice in-app or send you an email notice. If you disagree with any changes to this Privacy Policy, you will need to stop using the Services and deactivate your account.