CCMA privacy policy

Information handled

CCMA handles your Work ID (WWID), terminal serial, site, scan/audit time and audit status. It can also handle photos of a faulty or unregistered device when you choose to take them. The camera reads barcodes and captures those optional photos. Avoid including people, card numbers, customer details or other unrelated information in a photo.

Storage, offline work and use

Audit work can be queued on the device while offline and synchronised when connectivity returns. Information is sent to the operating organisation’s configured audit systems, including its Google Apps Script/Workspace spreadsheet and file storage, and is available to authorised audit staff. It is used to reconcile equipment, investigate faults and report on the audit. The developer does not collect audit records for advertising or sell them.

Access and retention

The operating organisation controls access to the audit and how long work records and photos are kept. Contact your audit coordinator for access, corrections or deletion requests. Clearing local app data does not remove a record already submitted, shared or held in an organisational backup. Some records may need to remain for operational or legal reasons.

Permissions and choices

CCMA has no third-party advertising, analytics or cross-app tracking, and does not request location or contacts. Manual serial entry is available when a barcode cannot be read. Photos are optional. CCMA is a workplace tool and is not directed at children.

Publisher, hosting and international processing

Palingen publishes this app and this notice. Where your organisation uses the app for workplace operations, that organisation controls the operational records it enters and the staff who can access them. Contact your administrator about those records, or contact Palingen for help routing a request.

Hosting, security, email and platform providers process information needed to deliver their services. Cloudflare hosts this policy website and relevant Cloudflare services described above. Provider networks and subprocessors can process information outside Australia. Provider logs, recovery snapshots and backups can have separate retention periods. These policy pages do not send a visit to Palingen’s visitor-printer feed.

Questions, access, correction and complaints

Use the contact below for privacy questions, access or correction requests, deletion requests and complaints. Include the app name and enough detail to locate the relevant information, without passwords, enrolment codes or unnecessary customer information. Identity may need to be verified. We will consider the request and explain any limits, including records controlled by your organisation, legal retention, backups or copies already printed or shared.

If a concern is not resolved, you can contact the Office of the Australian Information Commissioner where applicable. This policy will be updated at this address when practices change.