Data Deletion Request

To help us process your request efficiently, please include the following in your email:

• Your full name
• Your registered email address (the one used to sign up for StaffX)
• Your business name (if applicable)
• The type of data you wish to have deleted (your personal account, employee records, or all business data)
• Any additional context or reason for the request (optional)

Upon a verified deletion request, we will permanently delete:

• Your user account and login credentials
• Your personal profile information (name, email, phone)
• Your business profile and configuration data
• Employee records associated with your business account
• Attendance, roster, and leave records
• Any reports or payroll data generated within the platform
• All stored files and uploaded documents

We may retain limited data for the following reasons:

• Tax and financial records — retained for 7 years under the Australian Taxation Administration Act 1953
• Employment records — retained for 7 years under the Fair Work Act 2009
• Legal disputes — data may be retained if required for ongoing legal proceedings
• Fraud prevention — minimal anonymised data may be retained to prevent future fraudulent activity

We will inform you of any data we are unable to delete and the legal basis for retention.

To protect the security of your data, we will verify your identity before processing any deletion request. We may ask you to confirm your registered email address or answer security questions. We will respond to your request within 5 business days to acknowledge receipt and advise of any verification steps required.

If you are the business owner and wish to delete your entire business account, please be aware that this will also delete all associated employee records, attendance logs, rosters, and reports. This action is irreversible. We recommend exporting any data you need to retain before submitting your request.

Employee accounts linked to your business will also be deactivated. If employees have their own login access, they will lose access to the platform upon business account deletion.

If you have questions about our data deletion process or your privacy rights under the Australian Privacy Act 1988, please contact our Privacy Officer:

Surpass Business Solutions Pty Ltd — Trading as Staff X — Privacy Officer
12 Kerry Road, Archerfield, QLD, Australia
Email: privacy@staffx.au
Phone: 1300 228 876

You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you are not satisfied with our response.