Privacy policy

1. Scope and review

This policy covers website visitors, people contacting us and prospective business contacts. Project-specific handling of client data may also be governed by a separate agreement and collection notice. The extent to which the Privacy Act applies to CXTech must be confirmed during review; this draft is not a statement of independently verified legal compliance.

[CONFIRM LEGAL ENTITY, ABN, PRIVACY ACT COVERAGE AND EFFECTIVE DATE BEFORE PUBLISHING]

2. What we collect and how

The contact form collects your full name, work email address, company name and the message you choose to provide. Our systems also record technical details such as IP address and browser/device information when processing enquiries.

Website conversion tracking records consultation button clicks and successful enquiry submissions, together with the page, referring website, landing page, campaign parameters (UTMs), IP address and browser information. Attribution information is held in browser session storage and event records in our database. Emails and follow-up communications may create correspondence records, delivery records and unsubscribe preferences.

Please do not include sensitive information, health information, passwords or confidential client records in the contact form. If sensitive information is needed for an engagement, we will arrange an appropriate process and obtain consent where required.

You may contact us to ask about anonymous or pseudonymous enquiries where practicable. Without a usable email address or sufficient enquiry details, we may be unable to respond or arrange a consultation.

3. Why we use personal information

We use enquiry details to respond to questions, assess consulting requirements, arrange consultations, prepare proposals and manage business relationships. Technical and attribution records help us maintain security, troubleshoot the website and understand which sources lead to enquiries. We may also use information to meet legal obligations and resolve complaints.

If we send promotional communications, we will do so in accordance with applicable privacy and spam requirements and provide an opt-out. Contacting us does not by itself authorise unrelated marketing or sale of your information.

4. Storage, security and retention

Enquiries and conversion records are stored electronically in the website’s Lovable Cloud database. Enquiry notifications and correspondence may also be retained in business email systems. Email delivery and unsubscribe records are retained by the email service. Access controls restrict public access to enquiry records; no internet transmission or storage system can be guaranteed completely secure.

There is currently no confirmed automatic deletion period for enquiries or conversion records. [CONFIRM RETENTION PERIODS, BACKUP DELETION AND INTERNAL ACCESS PROCEDURES]. Our retention approach should keep information only as long as reasonably needed for its purpose or a legal requirement, and securely delete or de-identify it when no longer required, subject to applicable obligations.

Where a data breach occurs, we will assess it and, where required by the Notifiable Data Breaches scheme, notify affected individuals and the OAIC.

5. Who receives information

Information may be accessed by authorised CXTech personnel and contractors who need it to handle your enquiry or deliver an agreed service. Providers processing website hosting, database storage, email delivery and technical support may also receive it. Our website uses Lovable Cloud, and enquiry notifications are sent through Google Gmail. We may disclose information to professional advisers or authorities when required or permitted by law.

Dedicated offshore delivery teams may need access for an agreed engagement, subject to the engagement’s access and confidentiality arrangements. We do not sell enquiry information. We do not treat every form submission as permission to send its contents to Salesforce, Genesys or an AI model.

6. Overseas handling

Cloud and email providers, their support teams and offshore contractors may handle information outside Australia. The specific hosting regions and recipient countries have not yet been confirmed. [CONFIRM OVERSEAS RECIPIENTS, COUNTRIES AND PROVIDER ARRANGEMENTS BEFORE PUBLISHING].

Where APP 8 applies, we must take the required reasonable steps in relation to overseas recipients, subject to statutory exceptions. Submitting an enquiry is not intended to waive those obligations.

7. Analytics and third-party content

The website records first-party conversion events. It also contains integration points for Google Analytics or Tag Manager, but an active measurement configuration has not been confirmed. [CONFIRM ANY ACTIVE ANALYTICS, COOKIES AND CONSENT REQUIREMENTS BEFORE PUBLISHING].

Pages containing the embedded founder video connect to YouTube (Google), which may collect technical information and use cookies under its own policies. External links, including LinkedIn articles, lead to websites with their own privacy practices. You can manage browser cookies and site storage using browser settings.

8. Access, correction and privacy choices

To request access to personal information we hold about you, seek a correction, ask about deletion or withdraw consent where relevant, email enquiry@cxtechconsulting.com. Tell us enough to locate the relevant record without sending unnecessary sensitive documents. We may need to verify your identity before releasing or changing information.

We will respond within a reasonable period. Access or deletion may be limited by lawful exceptions or record-keeping obligations; if a request is refused, we will explain the reason where appropriate and available complaint options. Unsubscribe links in applicable emails allow you to manage communication preferences.

9. Complaints and contact

Send privacy questions or complaints to enquiry@cxtechconsulting.com, with details of your concern and your preferred response method. We will investigate and aim to respond within 30 days, or let you know if more time is needed; this is a proposed process to confirm during review.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au/privacy/privacy-complaints or 1300 363 992. The OAIC can explain complaint eligibility and next steps.

10. Policy updates

We may update this policy as our services and data handling change. The reviewed version and its effective date will be made available on this page. This document remains a draft until the items above and actual business practices have been reviewed.