Compliance, Privacy & WHS Alignment

1. Privacy Policy

Rugged At Work (“Rugged”, “we”, “us”) is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Health Records and Information Privacy Act 2002 (NSW).

Information We Collect

• Personal Information: Name, work role, and business contact details.
• Work-Related Health Risk Data: Self-reported musculoskeletal risk factors and physical exposure data.
• Usage Data: System audit logs and aggregated workforce risk data.

Purpose & Use

We collect information only where reasonably necessary to identify and prioritise workplace musculoskeletal risk and support WHS decision-making. We do not use data for fitness-for-work determinations, medical diagnoses, or disciplinary actions.

Disclosure & Storage

Information is disclosed only to the engaging organisation (in role-appropriate forms) and necessary third-party service providers. Data is stored securely with access restricted via role-based permissions. We do not sell or trade personal information.

2. WHS Alignment Statement

Rugged is designed to support organisations in meeting their obligations under Australian Work Health and Safety (WHS) legislation.

Legislative Context

Rugged supports Persons Conducting a Business or Undertaking (PCBUs) and Officers in meeting their Primary Duty of Care and Due Diligence obligations by improving risk visibility.

Framework Alignment

• Hazardous Manual Tasks: Aligned with the Model Code of Practice, Rugged identifies risk factors (force, posture, frequency) to guide the selection of controls.
• Risk Management: Supports the four-step process: Identify, Assess, Control, and Review.
• Psychosocial Risk: Aligned with the Model Code of Practice: Managing Psychosocial Hazards at Work through work design and risk indicator identification.

Boundary of Service

Rugged is a decision-support system. It does not replace the requirement for worker consultation, nor does it assume the PCBU’s legal responsibilities. Legal responsibility for WHS outcomes remains with the client organisation at all times.

3. Security & Data Protection

We maintain a risk-based security posture to protect the confidentiality and integrity of our data.

Technical Safeguards

• Access Control: Role-based permissions ensure the “Principle of Least Privilege.”
• Data Protection: Technical safeguards are in place to protect data from unauthorised access, alteration, or loss.
• Operational Security: Environments are separated, and all administrative access is logged and audited.

Incident Management

Rugged maintains a formal Data Security Incident & NDB Response Procedure. In the event of an eligible data breach likely to result in serious harm, we will notify affected clients and the Office of the Australian Information Commissioner (OAIC) without undue delay.

4. Terms of Use & Disclosures

Intellectual Property

All content, methodologies (including the Rugged Score™), software, and branding on this site are the exclusive property of Rugged At Work. Users may not scrape, reverse-engineer, or reproduce our proprietary risk-scoring logic without express written consent.

Website Disclaimer

The information provided on this website and through our tools is for informational and risk-identification purposes only. While our system supports WHS decision-making, it does not constitute legal, medical, or clinical advice.

Modern Slavery & Ethical Sourcing

Rugged At Work maintains a zero-tolerance approach to modern slavery. We are committed to ethical business practices and ensuring our limited supply chain (primarily Tier 1 technology providers) aligns with the Modern Slavery Act 2018.

Digital Accessibility

We are committed to making our tools accessible to all workers. We strive to align our digital interfaces with the Web Content Accessibility Guidelines (WCAG). If you experience difficulty using our systems, please contact us for assistance.

5. Contact Information