Privacy Policy
Last Updated: 17/08/2026
Who We Are
Welcome to One Click Services. We provide Application Programming Interfaces (APIs) relating to identity checks that enable businesses to integrate and enhance their services. Our website address is: https://oneclickservices.com.au.
We are committed to complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988, the Privacy (Tax File Number) Rule 2015, and the Identity Verification Services Act (IVS) 2023 – ensuring that personal information processed through our APIs is handled securely and transparently.
Personal Information We Collect
Through the use of our APIs and related services, we may collect and process the following types of personal information:
- Data provided by client systems to our APIs for processing (e.g., name, dob, document type, document numbers, document expiry, passport image (NFC), transactional data).
- Technical data such as API request metadata (e.g., IP addresses, request timestamps, and API keys).
- Contact details of our clients and their authorized representatives for account management (e.g., email addresses, names).
- Logs and analytics data to monitor API usage and ensure operational efficiency.
We do not store any sensitive document details such as card numbers or certificate numbers, only if the transaction was a success or failure.
How We Collect Personal Information
We collect personal information in the following ways:
- Directly from our client companies when they use our APIs or contact us for support.
- Automatically from API requests, including metadata generated during interactions.
- From user interactions on our website or customer portals.
Purpose of Collecting Personal Information
We collect and use personal information to:
- Enable the secure and efficient operation of our APIs and related services.
- Provide technical support and account management to our clients.
- Monitor API performance, detect fraud, and maintain operational security.
- Comply with legal and regulatory requirements.
Disclosure of Personal Information
Your data is your data and we, nor any third party required for the service, will ever use it in a way not directly stated. Data is only disclosed to those necessary to provide the service.
- to document issuers or official record holders via third party systems for the purpose of confirming your identity
- to the business leveraging the API for the purpose of its service
- to Microsoft’s Azure who assist in operating our APIs and services
- when required by law or regulatory bodies to comply with legal obligations.
Data Retention
- Data processed through our APIs is retained only as long as necessary to fulfill its purpose or comply with legal obligations.
- Document details extracted from e-passports; including name, date of birth, expiry, and biometric data, is removed when the invitation token expires (generally around 7 days).
- API request logs, including metadata, are stored securely for operational and auditing purposes for up to 7 years.
Your Rights
As an API provider, we typically act as a processor for data provided by our clients. However, individuals whose data is processed through our APIs have the following rights:
- Access: Request information about data processed through our APIs.
- Correction: Request corrections to inaccurate or incomplete data.
- Deletion: Request deletion of data, subject to legal and operational requirements.
Requests can be directed to the client company that owns the data, or to us directly for technical support. We will assist within the bounds of our role as a processor.
How We Protect Your Data
We employ robust security measures, following the Information Security Manual (ISM) to protect data processed through our APIs:
- Encryption of data in transit and at rest using industry-standard protocols.
- Secure access controls to restrict unauthorized access.
- Regular security audits and vulnerability testing.
Cookies and Tracking
While our primary focus is API services, our website may use cookies for:
- Authentication and session management.
- Tracking website traffic and performance analytics.
You can manage cookies through your browser settings. Note that disabling cookies may impact website functionality.
Client Responsibilities
Clients leveraging our APIs are responsible for:
- Ensuring that personal information provided to our APIs complies with all relevant privacy laws and regulations.
- Providing notices and obtaining appropriate consents from individuals whose data is processed via our APIs.
Hosted Identity Verification Services and the DVS
Where a business uses our hosted identity verification service, you may be directed from that business’s website or application to a One Click Services verification page. We provide this service so the business can complete an identity verification without operating its own verification interface.
During this process, One Click Services may collect and process identification information provided by you solely as necessary to perform the requested identity verification. The relying business may use the Commonwealth Government’s Document Verification Service (“DVS”) to verify your identity, using information available from your identity documents.
One Click Services transmits the verification result to the business that requested the verification. We do not retain the underlying identification information after it is no longer required to complete the verification, except for transaction, security, audit or compliance records that we are required or permitted to retain.
The business requesting the verification is responsible for determining why your identity needs to be verified and how it subsequently collects, uses, stores and discloses the verification information it receives. You should refer to that business’s privacy policy for further information.
You have the right to request access to, and correction of, your Identification Information that the relying business collect, use and disclose in connection with the DVS. You can also express your concerns or make a compliant about how the relying business collect, use or disclose your Identification Information in connection with the DVS.
If you do not consent to the use of your Identify Information for verification via the DVS, the relying business will not be able to verify your identity using this method. This may impact their ability to provide you with our products or services.
Our Privacy Policy explains how One Click Services handles personal information while providing the identity verification service, including your rights to access or correct information and make a privacy complaint.
Complaints and Contact Information
If you believe we have breached the APPs or mishandled personal information processed through our APIs, please contact us:
We will investigate and respond to your complaint within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Changes to This Policy
We may update this policy periodically to reflect changes in laws, services, or practices. Updates will be published on this page with a revised “Last Updated” date.
Accessibility of This Policy
This policy is available free of charge. If you require it in an alternative format, please contact us.