Updated 17 October 2026 — Indigenous Job Match privacy notice

Indigenous Job Match (IJM) is operated by Cultural Nexus Indigenous Corporation (ABN 14 905 985 838; ICN 10462). This notice explains our handling of information through the IJM website, job board and related support. Contact admin@indigenousjobmatch.com.au for privacy requests or complaints.

Information we collect and why

Registration collects your name, email, general location, skills, career summary and age group to provide career support, manage your account and arrange suitable introductions. We ask for an age band rather than a full date of birth. Your phone number, resume, photo, LinkedIn profile and cultural information are optional. Required fields are marked on the form; contact us if you need help completing them. Please do not include your home address, identity documents, bank details or unrelated health information in a profile or resume.

For employers, we collect business and representative contact details, ABN, role information and material needed to review an organisation or vacancy. We also handle enquiries, safety reports, service correspondence, account activity and technical information needed to run and protect the service.

Your cultural information and choice

Information about Aboriginal or Torres Strait Islander identity, community and cultural connections may be sensitive. Sharing it is optional. The registration form asks separately whether you consent to IJM using the cultural information you choose to provide for your career support. You can decline and still register. If you decline, IJM must contact you before using that information for matching or referrals. Consent to career support is not consent to public display, marketing or disclosure to an employer.

You can ask us to correct or remove optional information or withdraw consent for future use. We will explain any legal reason that prevents deletion. Do not upload someone else's cultural, family or personal information without appropriate authority.

Young jobseekers

IJM accepts registrations from people under 18. IJM manages contact and will discuss suitable support, the information needed for a particular opportunity and whether a parent, guardian or trusted support person should be involved. Capacity to understand and agree to a particular use of information must be considered individually. Registering is not agreement to every future disclosure or placement.

Employer introductions and applications

The job board is configured to hide candidate profiles from employers. Choosing “Available for work” tells IJM about your availability; it does not give employers direct profile access. For an IJM-managed introduction, we will discuss the employer, purpose and information to be shared and seek your agreement first. Cultural information requires a separate agreement before employer disclosure.

If you follow an application link to an employer or another website, information you submit there goes to that service under its own privacy notice. Read that notice before submitting. An external application is separate from an IJM-managed referral.

Service providers and overseas handling

Our candidate system is Job Boardly, operated by Glacier Systems Pty Ltd. Squarespace hosts the main IJM website. Service providers may also handle site operation, email delivery, support, security and payments where those functions are used. Authorised IJM personnel may access information to deliver support and respond to incidents. Information may also be disclosed where required or authorised by law, or to advisers engaged to assist with a relevant matter. We do not sell candidate information.

An Australian provider does not necessarily store all information in Australia. Job Boardly's published sub-processor list identifies services in the United States, Germany and France. The relevant processing depends on the functions used. Its data processing agreement describes its contractual safeguards. Contact IJM for questions about a particular disclosure or provider. Other countries' laws and protections may differ from Australia's.

Security and retention

We use restricted profile access, review controls and mandatory two-factor authentication for Job Boardly board administrators. Job Boardly describes encryption in transit and at rest in its published agreement. These are specific safeguards, not a guarantee of complete security or a claim of end-to-end encryption across every IJM system.

Keep your login details private. Report suspected misuse promptly. IJM retains information for the service, safety and legal purposes for which it is needed, and must delete or de-identify it when no longer required, subject to lawful retention requirements.

Job Boardly's published default flags an end-user account after 12 months without activity, sends a warning and deletes it if the user does not log in within 30 days. Provider backups and legally required records may have different retention periods. Contact IJM for an account closure or deletion request; we will explain the applicable process and any information that must be retained.

Cookies and communications

The job board provides a cookie notice and a “Cookie settings” control in its footer. Available choices depend on location and the technologies in use. Essential technologies support sign-in and security; optional technologies may support preferences, analytics or marketing. Job alerts and marketing choices can be changed using the relevant unsubscribe or preference control, or by contacting IJM. Necessary account and safety communications are separate.

Access, correction and complaints

Contact admin@indigenousjobmatch.com.au to request access, correction, deletion, withdrawal of consent or to raise a privacy concern. We will verify your identity proportionately and explain our response, including reasons and review options if a request cannot be met. We will handle requests within applicable legal time limits. If Australian privacy law applies and your concern remains unresolved, you can contact the Office of the Australian Information Commissioner. Other applicable laws may provide additional rights, including rights to object, restrict processing or obtain portable data.

For safety concerns and safe reporting guidance, see Safety and Support. Do not email passwords, identity documents or harmful images. Safety reports are handled with restricted access, but absolute confidentiality cannot be promised where lawful escalation is necessary.

Scope and updates

This IJM-specific notice describes IJM's arrangements. General group statements about particular systems or security certifications should not be read as verified claims about every IJM service. We will update this page when arrangements change and provide further notice where required. This notice does not ask you to waive privacy rights or treat use of a website as blanket consent to sensitive-information processing.