Candidate Privacy Statement

This statement was last reviewed 29 October 2026.

This Candidate Privacy Statement (Statement) only covers information that Aurecon collects as part of its recruitment and selection process. If you provide personal information in another context, such as in a client or supplier context, then please refer to our general Privacy Policy.

Aurecon operates subsidiary and related companies (Related Companies) and is committed to protecting your privacy across our operations. Aurecon is bound by and operates in conjunction with applicable privacy laws, including but not limited to the Privacy Act 1988 (Cth) (Privacy Act).

Set out below is information that Aurecon is required to communicate to individuals (Candidates) in connection with personal information collected about individuals during Aurecon’s recruitment processes. This Statement may be amended from time to time, and where this occurs, this page will be updated accordingly.

All applications for employment with Aurecon are treated as confidential in accordance with privacy laws.

Definitions

• Personal Information: information relating to an individual which may be provided to or collected by Aurecon as part of the recruitment process. Such information may personally identify an individual or make the person's identity reasonably apparent.
• Sensitive information: information such as health details, racial or ethnic origin, criminal history, or government-issued identifiers.

Your personal and sensitive information

This Statement relates to Candidates' personal and sensitive information collected by any means for the purpose of Aurecon’s recruitment and selection processes.

If a Candidate does not provide their personal and/or sensitive information, Aurecon may be unable to progress the Candidate's application or offer of employment, or to consider the Candidate for future employment opportunities.

Types of personal information collected during our recruitment processes may include:

• ID information, such as your name, postal or email address, telephone numbers, licences, date of birth and gender details;
• contact details such as social media handles you use on recruitment websites;
• resume and other correspondence;
• work history and education history;
• health information, disabilities and psychometric testing results;
• other information Aurecon considers necessary to our recruitment processes.

Sensitive information may be required to be collected in some circumstances. Aurecon will only collect sensitive information if it is necessary for the purpose of considering an individual’s potential employment with Aurecon and it is relevant to the inherent requirements of the position.

All information collected will be used and disclosed by Aurecon only as outlined in this document. Aurecon takes reasonable steps to ensure that a Candidate's personal and sensitive information is held securely.

How we collect your personal information

It is Aurecon's usual practice to collect personal information about Candidates:

• directly from Candidates, for example where a Candidate provides information by applying to a printed or online advertisement, submitting information through Aurecon’s online platforms for recruitment or expressions of interest, or through communications with Aurecon personnel, including over the phone;
• where relevant, through a third-party recruitment service provider;
• from third parties or government agencies, with a Candidate's consent. For example, Aurecon may seek information about a Candidate's:
• prior employment history through reference checks;
• eligibility to work in Australia through a visa status check;
• educational qualifications by requesting confirmation of qualifications or results from an academic institution;
• aptitude or other psychometric testing;
• ability to perform the inherent requirements of the position through medical and other allied health professionals, a criminal record history check and/or a working with children check;
• through publicly available networking sites, such as Facebook or LinkedIn.

We may also collect information about you because we are required or authorised by law to collect it.

If your application is successful and you are offered employment with Aurecon, as a condition of employment we will ask you to provide evidence of your identity and legal entitlement to work in Australia. We will also ask for personal information, such as emergency contact details, tax file number and bank account details, which will form part of your employee file.

How we use your personal information

Candidates' personal information may be used to:

• assess a Candidate's application (or an application submitted on the Candidate's behalf by a recruitment service provider) for advertised positions and for communications in relation to such applications;
• identify and contact Candidates about future employment opportunities, including by adding Candidates to Aurecon’s talent pools and talent communities. If you do not wish to be included or contacted for these purposes, you may opt out at any time by contacting Aurecon as set out under 'How to contact Aurecon' or by requesting the deletion of your candidate information for example through Aurecon’s External Careers Site in Workday. To do so, you must log into your candidate account, select the Settings tab, and choose "Delete My Information.";
• undertake statistical reporting and analysis in relation to recruitment;
• manage business risks, investigate, resolve and defend complaints or legal claims, comply with court orders, and meet other legal obligations and regulatory requirements associated with the recruitment process;
• facilitate third-party providers acting on Aurecon’s behalf to provide recruitment services, including virtual interviews, interview availability selection and recruitment messaging.

If you are successful in securing a position with Aurecon, we may also use your personal information for employment and business-related purposes.

Unless authorised by privacy laws, a Candidate's personal information will not be used for any other purpose without the Candidate's consent.

When Aurecon may disclose your personal information

Aurecon may disclose your personal information to Related Companies and third-party providers for the purposes of:

• considering your application and contacting you in relation to recruitment programs or future positions of interest with Aurecon and its Related Companies;
• statistical reporting and analysis in relation to recruitment;
• enabling Aurecon and its Related Companies to disclose a Candidate's personal information to organisations located overseas, including organisations located in Australia, Singapore and Ireland, for the purposes outlined above and in accordance with 'How we use your personal information'. Aurecon takes reasonable steps to ensure that the organisations comply with applicable privacy laws and that appropriate safeguards are in place to protect your personal information. These organisations may carry out:
• information technology services;
• website usage analysis;
• management, recruitment and administrative tasks.

Use of automated tools

Aurecon may use automated systems including artificial intelligence (AI) to assist in the recruitment process, such as tools that help us screen applications or schedule interviews. These tools do not remove human intervention at each stage of our recruitment process, nor do they make final hiring decisions, which are always made by our hiring team.

Accuracy and storage of personal information held

Aurecon will endeavour at all times to maintain an accurate record of each Candidate's personal information.

To assist Aurecon to keep its records up to date, Candidates should ensure all personal information provided to Aurecon is accurate and up to date and notify Aurecon of changes where appropriate.

Aurecon retains Candidate personal information for a fixed period from the completion of the recruitment process unless an additional period of retention is required or permitted by law, or is reasonably necessary to manage a legal claim, complaint or regulatory obligation. At the end of the applicable retention period, the information will be securely deleted or de-identified in accordance with Aurecon’s records management requirements. If a Candidate is employed by Aurecon, relevant recruitment information may be transferred to and retained as part of their employee record.

Personal information held by Aurecon will be stored and managed in accordance with our general Privacy Policy.

How to contact Aurecon

If you have any enquiries about the personal information held about you, or if the personal information held about you is incorrect, please email us at data@aurecongroup.com. If you have a problem, complaint or would like to provide feedback, please contact a local Aurecon office near you using the Contact Us page on our website.