WIRCO Privacy Policy v2.1
This Privacy Policy v2.1 applies to WIRCO (Work Injury Rehabilitation Compliance Operations). This document outlines our advanced, end-to-end privacy protocols—designed to exceed Australian privacy law requirements and set a new standard in the handling of sensitive compliance data. Our platform is built to guarantee maximum confidentiality, zero leakage, and irreversible data control.
1. Scope and Consent
By submitting your information through any form—Facebook lead forms, contact forms, SMS links—you agree to the terms of this Privacy Policy. This includes agreement to ephemeral communication protocols, restricted access, revocation rights, and deletion protocols. Your timestamped agreement is logged at the time of form submission, recorded against your IP address and form ID.
2. Two-Way Confidentiality Agreement
All information shared between you and our team is 100% confidential and exists solely within our encrypted ecosystem. No information will be shared externally—under any circumstances—unless explicit written consent is provided by both parties. This applies equally to clients and to our organization. We do not share anything with external lawyers, providers, or agencies unless both parties consent.
3. Ephemeral Communication by Design
Our platform is designed around the principle of impermanence. Information is delivered through encrypted portals that expire upon logout, revocation, or termination. Nothing is emailed in raw form, nothing is downloadable, and nothing is stored beyond its necessity. Your data lives only as long as the engagement does—and is wiped irreversibly upon disengagement.
4. Encryption and Access Controls
All communications occur via encrypted infrastructure hosted on privately-owned servers. Every interaction—text, voice, document, or visual—is end-to-end encrypted. No third party (including hosting providers, telecommunications companies, or forensic investigators) can access your data. Our infrastructure is physically controlled and operated solely by us.
5. Mobile-Only Access and Protection Features
All client access occurs via secure mobile interface only. Desktop and browser access are strictly prohibited. The system includes:
– Copy/paste prevention
– Screenshot and screen recording blocking
– Session expiration upon inactivity
– Device fingerprinting to prevent unauthorized access from unknown devices
6. Termination and Irreversible Data Erasure
Upon termination of the client relationship—either by the client or by us—all data is destroyed using secure deletion protocols (e.g. LUKS, shred, srm). Data cannot be recovered or reconstructed. Clients agree to this as part of their access conditions. Once access is revoked, the platform disappears and the record is gone.
7. Compliance with Australian Law
Our privacy protocols are designed in alignment with the Australian Privacy Act 1988 (Cth), the Australian Consumer Law, and the Notifiable Data Breaches (NDB) scheme. However, our system exceeds those requirements by implementing zero-retention protocols, consent-based data lifecycle governance, and anti-discoverability architecture. We support greater data sovereignty for individuals than current legislation mandates.
8. Transitional Disclosure
While our private infrastructure is in active deployment, some functions may still be served via hybrid secure platforms. However, all clients accessing our services during this time pre-consent to these protocols and acknowledge the data destruction and non-transfer policies upon engagement.
9. Encrypted Phone Communication Protocol
All phone communication between WIRCO and our clients is conducted via cloud-based encrypted platforms that implement end-to-end 256-bit encryption.
This means:
– No call content can be intercepted, recorded, or retrieved by any telecommunications provider, government entity, or third-party authority.
– Call metadata (timestamps, durations) is stored only within our secure cloud instance and is not accessible to external networks.
– Voice content is fully encrypted in transit and never stored in plaintext, ensuring total protection of verbal communication.
All phone communications are treated with the same privacy and confidentiality protocols as written data within our ecosystem.
10. Questions and Disputes
For concerns, disputes, or access revocation requests, contact our Privacy Officer at privacy@wirco.com.au. We take all concerns seriously and will act within the spirit of this policy and your signed access agreement.
11. Legal Compliance Statement
WIRCO’s privacy protocols are not arbitrary—they are designed in strict alignment with the Australian Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and the Queensland Information Privacy Act where applicable.
Given the sensitive nature of our work and the psychological vulnerability of many of our clients, WIRCO has implemented security and confidentiality protocols that are intended to exceed minimum compliance standards.
Specifically:
– Under **APP 6 (Use and Disclosure)**, we only use client data for the original purpose of compliance intelligence, never for secondary purposes unless both parties provide explicit written consent.
– In accordance with **APP 11.1 (Security)**, all data is protected using 256-bit end-to-end encryption and hosted on private servers inaccessible to third parties.
– Under **APP 11.2**, WIRCO practices zero-retention data governance: client data is destroyed using LUKS or equivalent protocols upon disengagement.
– In line with **APP 2**, both clients and staff may operate under pseudonyms or professional identities, where lawful and appropriate.
– As per **APP 8**, no client data is disclosed or stored offshore. All data remains under Australian jurisdiction within our privately controlled infrastructure.
Our privacy policies are not just about protecting ourselves—they exist to protect our clients from coercion, exposure, and unnecessary legal risk. We support greater data sovereignty and believe all civilian access to lawful information should be shielded with maximum discretion.
All information exchanged between WIRCO and the client is subject to strict, non-transferable confidentiality.
WIRCO will not disclose any information to any third party—including but not limited to spouses, legal representatives, doctors, unions, WorkCover staff, insurers, or case managers—without receiving explicit, signed written instructions from the client. Under no circumstances will access be granted to third parties unless both parties (client and WIRCO) agree in writing.
Clients are equally bound not to forward, disclose, or present any information, reports, insights, screenshots, or downloaded material from WIRCO to any third party without WIRCO’s explicit, signed written consent.
If permission is granted, WIRCO will issue a cryptographically secured, time-bound access link valid for six (6) hours only, using HTTPS transport-layer encryption and tokenized session control. The access link is embedded with metadata tracking, which records the IP address, approximate geolocation, device fingerprint, and browser environment of any third-party viewer. This data is retained internally and allows WIRCO to verify the identity, origin, and circumstances under which any third party accesses protected compliance material.
This ensures the integrity of our proprietary analysis, the safety of sensitive information, and protects both parties from legal or procedural compromise. Breach of this policy will result in immediate termination of access and deletion of all records.
The link will expire automatically and cannot be regenerated without further authorization. Any unauthorized sharing, disclosure, or transmission of this data will be immediately flagged, and access logs will be permanently stored in connection with the client’s record for risk documentation and internal response.
12. Operational Anonymity, Non-Contractual Access & Legal Classification
WIRCO is a private compliance data platform and intelligence relay system. It is not a service provider or legal consultancy and does not offer advice, advocacy, or representational services of any kind.
Our staff operate under pseudonymous designations to protect their safety due to the high volume of psychologically vulnerable individuals and the sensitive nature of their investigative services. WIRCO’s team members are not publicly identified, and our infrastructure does not operate from a public-facing address for privacy and security reasons.
WIRCO does not enter into service contracts with users. Instead, users access intelligence data through a conditional, encrypted, one-way interface. Consent is obtained at the data entry stage (typically via Facebook lead forms), and continued access is subject to strict protocol adherence.
Because WIRCO does not operate under a contractual model, it does not provide recommendations or instructions. Information is presented algorithmically, procedurally, or diagnostically—but never as advice. Clients are free to use or ignore the structured data presented, and all data is erased upon access revocation or system termination.
By using WIRCO’s interface, clients agree to receive structured data only and acknowledge that no advice, legal interpretation, or service engagement has been entered into or implied.