Harrison.ai Careers Privacy Notice

Issued: 25 September 2025

1. About Harrison.ai

Harrison.ai works with leading health care organisations to develop AI solutions that support clinicians, practitioners and their patients. By responsibly harnessing data and technology, we aim to improve patient outcomes, enhance efficiency and strengthen healthcare delivery.

Harrison-AI Pty Ltd together with its affiliates (see Group Entities listed in Section 12 below) (collectively, ‘Harrison.ai’, ‘we’, ‘our’, or ‘us’) is committed to protecting the privacy and security of your personal information.

2. What this Privacy Notice covers

Thank you for your interest in joining our team! This Privacy Notice explains how we collect, use, disclose and safeguard personal information collected from you when we consider your application for current career opportunities and when you express interest in future roles at Harrison.ai. 

This Privacy Notice does not cover your use of our products or services. To learn more about Harrison.ai’s privacy practices regarding your use of our products and services, please see our Harrison.ai Privacy Notice.

3. Personal information we collect

The personal information we collect about you include, but are not limited, to: 

• Contact information such as full name, home address, telephone or mobile number, email address, job site information (e.g., LinkedIn profile). 
• Identification details such as citizenship status, residency and work permit status. 
• Employment and education details relating to your previous and current employment and education, including your cover letter, resume/CV, work experience or other relevant experience, educational background and achievements. 
• Job preferences including career trajectory and interests.
• References from your previous employers or academic supervisors. 
• Background check information where permitted or required by law, once you have accepted a conditional offer from us. 
• Mandatory assessments to assess your suitability for the role such as phone screens, interviews and skills assessments.
• Publicly available information such as your public profile on career networking sites such as LinkedIn.
• Online usage information such as cookie information and traffic data when you browse our websites. 
• Sensitive information which may include demographic information such as your racial or ethnic origin, age, gender, as well as your background check results and health data (e.g., disability status). 
• Voluntary information that you choose to provide us (e.g., through voluntary opt-in surveys or voluntary assessments such as behavioural assessments). 

4. How we collect personal information

We may collect personal information about you from the following sources: 

• Directly from you. We generally collect personal information about you directly from you. 
• From referrals. If you are referred, we collect information from the individual who referred you. 
• From recruitment and staffing partners or other jobs websites. We collect information from recruitment and staffing partners or other jobs websites if you apply to us through those sources. 
• From references. We may receive references from your previous employers, supervisors or colleagues. 
• From third party data providers such as organisations who have the rights to provide us with information about your education, work experience or contact information. 
• Background check providers. Where permitted or required by law, we receive background check information from background check providers. 
• From publicly available sources such as information that you have chosen to make public online. 
• Automatically collected information for example, when you apply through our website, we may collect technical information such as your device type, IP address, device identifiers, and how you arrived at our site. 

For personal information that is required to assess your suitability for a career opportunity, please see section 10 on how you can withdraw your application or request deletion. 

5. How we use your personal information

We use your personal information for the following purposes:

• To proactively reach out to you. Where we have identified you as a potential candidate from information we’ve collected from public sources or third parties, we may use that information to suggest opportunities for you. If you have previously applied for a role with Harrison.ai, we may contact you about future career opportunities that may interest you. 
• To review and process your application. Where you apply for a role at Harrison.ai, we may use your information to review and process your application. 
• To assess your suitability such as to assess your skills, qualifications and interests against our career opportunities. 
• To facilitate the recruiting process. We use your information to facilitate the recruiting process, including scheduling interviews and communicating with you. 
• For verification. We use your information to verify you and to check your references. Where permitted or required by law, we use your information to conduct background checks if you are offered a role with us. 
• To evaluate and improve our processes, including assessing interview scheduling times. 
• For reporting. We may use your information to analyse recruiting metrics for aggregated reporting. 
• As legally required. We may use your information as legally required, such as confirming your eligibility to work in the country in which you applied for a job. 
• For other purposes with your consent. We may use your information according to any purposes provided to you during the consent opt-in process.

6. Legal bases for processing (for EEA and UK users)

If you are an individual in the European Economic Area (EEA) or United Kingdom (UK), we collect and process information about you only where we have a lawful basis to do so under applicable data protection laws. The relevant legal bases depend on the type of information and the purpose we process it. This means we collect and process information about you only where: 

• we need it to administer a contract with you; 
• it satisfies a legitimate interest (which is not overridden by your data protection interests) such as assessing your suitability, evaluating our recruiting processes, protecting our legal rights and interests; 
• you give us consent to do so for a specific purpose; or 
• we need to process your data to comply with a legal obligation. 

If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place or information that has been deidentified sot that we can no longer identify you.  Where we are using your information because we have a legitimate interest to do so, you have the right to object to that use.

7. Disclosing personal information

We disclose your personal information in line with the purposes described above. Disclosures may include: 

• Harrison.ai companies for the purposes defined above. 
• Service providers on our behalf to facilitate the recruitment process (e.g., background check providers)
• Compliance and legal obligations where disclosure is required by law, court order or lawful request by regulators or authorities. 
• Other disclosures with your consent (e.g., referees you provide us) or as otherwise required or permitted by law. 

8. Information storage and security

We take all reasonable steps to protect your personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Records are held securely for future retrieval in accordance with applicable laws and good business practice. 

The protective steps we take include:

• confidentiality requirements of our employees and subcontractors;
• limiting access to Information to employees who have a need to use the information; and
• security measures for restricted access to our systems.

Although we use industry-standard safeguards to protect your information, no system is impenetrable and due to the inherent nature of the Internet, we cannot guarantee that information, during transmission through the Internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion. If you believe your interaction with us is no longer secure, please notify us immediately using the contact details below.  

We will retain information about you no longer than necessary to carry out the purposes provided in this Privacy Notice and as required or permitted under appliable law. 

• If you are offered and accept a role with Harrison.ai: We will retain your information in order to manage your employment or assignment with us, and we will surface a separate privacy notice that will apply to your relationship with Harrison.ai. 
• If your application is not successful or you withdraw or decline our offer: We will retain your information for the purposes provided in this Privacy Notice, such as to keep you in mind for current or future roles, to help us evaluate and improve our recruitment processes, and for record-keeping. If you’d rather we didn’t keep your information on file, please let us know by following the process in section 10 below.

9. International Transfers

We operate globally and may transfer, process and store your personal information outside your country of residence to wherever we or our third-party service providers. Where data is transferred internationally, we use appropriate technical and operational safeguards as well as European Commission Standard Contractual Clauses, binding corporate rules or other appropriate legal mechanisms.

10. Your choices

Where applicable under local law, you may have certain rights with respect to your personal information: 

• Access – the right to request access to the personal data we hold about you. In some instances, reasonable charges may apply to provide copies. 
• Correction / rectification – the right to request that we correct / amend any personal data we hold about you which you believe is inaccurate. 
• Erasure / (right to be forgotten) – the right to request that we erase/ delete your personal data. 
• Restriction of processing – the right to request that we restrict the processing of your personal data.
• Object to processing – the right to object to the processing of your personal data. For example: you have the right to object to the use of your personal data for direct marketing purposes.
• Data Portability – the right to request that we send the data that we have collected to another organisation, or directly to you, under certain conditions and in a format that can be read by computer.
• Withdrawal of consent – where processing is based on consent, you may withdraw it at any time.

If you provide voluntary information on a voluntary opt-in basis, you can withdraw your consent at any time and there be no adverse consequences on your application for not providing that information or withdrawing your consent.

To exercise your rights, please send a description of your personal information concerned in writing stating your name and your relationship with us (if applicable) to the contact details in section 12 below. In some cases, we may require proof of your identity to verify your request and to protect your personal information against unauthorised access. We will carefully consider your request and may discuss with you how it can best be fulfilled.

11. Updates to this Privacy Notice

From time to time, we make changes to this Privacy Notice, processes and systems in relation to how we handle your personal information. Updates will be posted on our website with a revised ‘last updated’ date.

12. How to contact us

If you have any questions about this Privacy Notice, the personal information we hold about you, or you would like to exercise any of your rights, please contact us using the details below. 

If you are not satisfied with the response, you can contact the Office of the Australian Information Commissioner. For further information about privacy, the protection of privacy and credit reporting can also be found on visit the Office of the Australian Information Commissioner’s website at www.oaic.gov.au.

If you are based in the European Economic Area, United Kingdom or Switzerland, you also have the right to lodge a complaint with your local supervisory authority.