Collection notice — Embed / indirect collection

Use: Partner sites and APIs that submit information about individuals
Effective date: 1 August 2026
Relevance: NZ IPP 3A; AU APP 5 |

When a partner or employer uses Comprehendly embed/API to submit information about an individual (for example a worker, applicant, or resident), that organisation must ensure the individual is told:

that personal information is being collected;
the purposes of collection;
who may receive the information (including UltraDigital Limited and listed sub-processors);
how to contact the organisation and UltraDigital Limited (privacy@stepcare.app);
that they may request access and correction.

Partners must not use embed/API unless they have provided appropriate notice or rely on another valid basis under applicable privacy law.