Privacy policy
How the Company handles information connected with workplace shift planning and service use.
Privacy policy
This privacy policy explains how the Company collects, uses, stores, discloses, and protects personal information connected with the Mirandelio website and workplace shift planning service. It applies to visitors, account holders, workplace administrators, and authorised users.
The service may handle information about employees, contractors, managers, and workplace operations. The organisation controlling a workplace account may also determine how information is entered and used, including its own notice and employment responsibilities.
Information collection
The Company collects information supplied during account creation, workplace setup, scheduling activity, support correspondence, and website use. Collection is limited to information reasonably needed to provide, secure, maintain, and improve the service.
Information provided directly
- Name, workplace role, and account registration details.
- Login credentials and authentication information.
- Staff availability, leave requests, and roster assignments.
- Workplace preferences, permissions, and configuration details.
- Information included in submitted enquiries or support requests.
Information collected automatically
- Device type, operating system, browser, and language settings.
- Internet protocol address and approximate location information.
- Pages viewed, session times, referral sources, and interaction events.
- Service errors, diagnostic records, and security-related event data.
- Cookie identifiers and consent preferences stored through the browser.
How information is used
Personal information may be used to create and administer accounts, organise workplace access, provide scheduling functions, respond to enquiries, maintain security, investigate misuse, improve service performance, and meet legal requirements.
- Provide requested scheduling and workplace administration functions.
- Create accounts and apply role-based access permissions.
- Process availability, roster, and schedule change information.
- Respond to support requests and service communications.
- Monitor security, prevent misuse, and investigate incidents.
- Analyse service performance and improve functionality.
- Meet applicable legal, regulatory, and recordkeeping duties.
Our commitment: The Company handles personal information carefully, limits collection to relevant purposes, and applies reasonable safeguards consistent with applicable Australian privacy requirements.
Information sharing
The Company may share relevant information with authorised service providers supporting hosting, security, analytics, communications, customer assistance, and service operations. Providers receive access appropriate to their function and are expected to handle information lawfully.
Service providers
Service providers may support hosting, infrastructure, authentication, analytics, communications, customer assistance, payment administration, and security. Access is limited to information needed for the contracted function, subject to applicable arrangements.
Legal obligations
Information may be retained or disclosed where reasonably necessary to comply with applicable law, respond to lawful requests, protect rights, or establish, exercise, or defend legal claims.
Anonymous statistics
Aggregated statistics may help the Company understand website use and improve service performance.
User rights
Subject to applicable law and reasonable verification, users may request access, correction, deletion, restriction, objection, or portability regarding personal information. Some requests may be limited where retention, security, legal duties, or another lawful basis applies.
- Users may request access to personal information held by the Company.
- Users may request correction of inaccurate or incomplete personal information.
- Users may request deletion where retention is not legally or operationally required.
- Users may request an accessible copy or transfer of certain information where applicable.
- Users may object to certain processing, including direct promotional communications.
- Users may request limits on certain processing where applicable law provides that right.
Requests concerning access, correction, deletion, restriction, objection, or portability should identify the relevant account or information and provide enough detail for the Company to assess the request.
Information security
The Company uses reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss, or destruction. No internet transmission or storage system can be treated as completely secure.
Technical safeguards
- Encryption is used where appropriate for data in transit and storage.
- Authentication and access controls help restrict account access.
- Monitoring supports detection of unusual activity and service incidents.
- Backups and recovery procedures support service continuity and data restoration.
Organisational safeguards
- Access permissions are assigned according to workplace roles and service responsibilities.
- Personnel receive privacy and security guidance appropriate to their duties.
- Providers are assessed according to service function and information access.
- Incident procedures support investigation, containment, and required notifications.
Data retention
Personal information is retained only for as long as reasonably necessary for the purposes described in this policy, service administration, security, dispute handling, legal obligations, and recordkeeping. Retention periods vary by information type and context.
- Account details, role permissions, workplace associations, and login records.
- Training records, implementation notes, and service usage preferences where provided.
- Messages, support requests, feedback, and correspondence with the Company.
- Billing records, transaction references, and subscription administration information.
- Communication preferences and records of consent or objection to promotional messages.
When information is no longer required, the Company takes reasonable steps to delete it or remove identifying elements.
International data transfers
Some providers may process information outside Australia. The Company takes reasonable steps to assess providers, apply contractual safeguards where appropriate, and ensure transferred information receives suitable protection under applicable privacy requirements.
- Providers may process information in Australia or other relevant jurisdictions.
- Transfer locations depend on infrastructure and service provider arrangements.
- Reasonable contractual and organisational safeguards support international processing.
- Users may request general information about applicable transfer protections.
Cookies and similar technologies
Cookies are small files stored on a browser or device. The Company uses essential cookies for core functions and, where permitted, optional cookies for preferences, analytics, performance, or communications. Cookie choices can be managed through available controls.
Cookie categories
- Required cookies support security, consent records, navigation, and core service functions.
- These cookies help measure service performance, reliability, and page interaction patterns.
- These cookies remember selected preferences and support a more consistent service experience.
- These cookies remember choices that support requested interface or service features.
Browser settings can block or delete cookies, although some website functions may then operate differently.
Policy changes
The Company may update this policy when services, technology, legal requirements, or information practices change. The revised version will be published on the website with a new update date. Material changes may be communicated through appropriate service channels.
- Users may receive service notices concerning security, access, or material changes.
- Operational messages may support account administration and requested functions.
- Promotional communications are sent only where permitted and may include an opt-out option.
- Notification preferences can be changed through available account or service controls.
Continued use after publication does not remove rights applying under mandatory privacy law.
Privacy contact
Privacy enquiries or rights requests may be submitted through the contact channels made available on the website.
Mirandelio
Level 4, 55 Southbank Boulevard, Southbank, VIC 3006, Australia
Phone: +61 8 7264 9161
Email: content@mirandelio.sbs
Last updated October 4, 2026, for the current policy version.
This policy applies from October 4, 2026, unless replaced earlier.