This Privacy Policy applies to all personal information collected by Nexshift Technologies Pty Ltd (we, us or our) via the website located at www.nexshift.app (Website).
Clause 1
What Information Do We Collect?
The kind of Personal Information that we collect from you will depend on how you use the website. The Personal Information which we collect and hold about you may include:
We collect the following personal information from users of our platform: full name, business email address, username, role and site assignment within the platform, login activity and session data, IP address, usage data relating to platform interaction, manufacturing and operational data entered by users during platform use, account credentials, and any information voluntarily provided through customer support communications.
Clause 2
Types of Information
The Privacy Act 1988 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.
Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:
(a)whether the information or opinion is true or not; and
(b)whether the information or opinion is recorded in a material form or not.
If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as "Personal Information" and will not be subject to this privacy policy.
Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.
Sensitive Information will be used by us only:
(a)for the primary purpose for which it was obtained;
(b)for a secondary purpose that is directly related to the primary purpose; and
(c)with your consent or where required or authorised by law.
Clause 3
How We Collect Your Personal Information
(a)We may collect Personal Information from you whenever you input such information into the Website, related app or provide it to us in any other way.
(b)We may also collect cookies from your computer which enable us to tell when you use the Website and also to help customise your Website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.
(c)We obtain your consent before placing non-essential cookies on your device, and you may manage your cookie preferences at any time through our cookie management tool or by contacting us directly.
(d)We generally don't collect Sensitive Information, but when we do, we will comply with the preceding paragraph.
(e)Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party — in cases like this we will take steps to make you aware of the information that was provided by a third party.
(f)We ensure that all third parties who provide Personal Information to us, or to whom we disclose Personal Information, are contractually bound to handle your information in accordance with the Australian Privacy Principles and this Privacy Policy. These third parties may include service providers such as hosting providers, analytics platforms, and payment processors.
Clause 4
Purpose of Collection
(a)We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about developments in our business.
(b)We customarily only disclose Personal Information to our service providers who assist us in operating the Website. Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties.
(c)We engage third-party service providers in the following categories: cloud infrastructure providers, analytics and monitoring tools, payment processors, and customer support platforms. All service providers execute Data Processing Agreements requiring compliance with Australian Privacy Principles, and are prohibited from using your Personal Information for their own purposes.
(d)We will only send you direct marketing material if you have expressly consented to receive it, including product updates, promotional offers, industry insights, and webinar invitations. You may withdraw your consent at any time by using the unsubscribe mechanism in our communications or by contacting us directly, and we will process your request within 5 business days.
Clause 5
Security, Access and Correction
(a)We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. When your subscription ends, you will have 90 days to export your account and operational data. Following the expiry of that period, or upon completion of your data export (whichever occurs earlier), your data will be deleted within 30 days. Business records required for legal and regulatory compliance may be retained for up to 7 years in an anonymised or de-identified form. When we no longer require your Personal Information we will take reasonable steps to destroy, anonymise or de-identify it.
(b)For the purposes of this clause, 'anonymise' means the removal of all identifiers so that the information cannot reasonably be linked to an individual, and 'de-identify' means the removal of direct identifiers while retaining statistical utility for business analysis purposes.
(c)
The Australian Privacy Principles:
(i)permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and
(ii)allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).
(d)Where you would like to obtain such access, please contact us in writing on the contact details set out at the bottom of this privacy policy.
(e)We will respond to your data access or correction request within 5 business days of receipt. For correction requests, we will implement verified corrections within 5 business days of approval. We may request reasonable identification verification to protect your account security before processing your request.
(f)If we become aware of an eligible data breach involving your Personal Information, we will notify you without unreasonable delay (typically within 30 days) via email to your registered account address. Notification will include the nature of the breach, types of information affected, steps we are taking to respond, and recommended protective actions. We will simultaneously notify the Office of the Australian Information Commissioner where required by law.
(g)You may request export of your manufacturing operational data in standard formats (CSV, JSON) within 5 business days by contacting us in writing. Exports include production records, quality metrics, maintenance logs, and user activity data. You may also request earlier deletion of your account and operational data by providing written confirmation to ensure account security.
Clause 6
Complaint Procedure
If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us on the contact details set out at the bottom of this policy. All complaints will be considered by Ricky Aston and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.
Clause 7
Overseas Transfer
(a)Your Personal Information may be stored on servers located in the United States of America via our hosting providers Railway and Cloudflare. Your Personal Information may be transferred overseas or stored overseas for a variety of reasons.
(b)Where we transfer your Personal Information overseas, we take reasonable steps to ensure overseas recipients handle your information in accordance with the Australian Privacy Principles. For transfers to countries without substantially similar data protection laws, we will obtain your express consent and implement contractual safeguards requiring recipients to protect your information consistent with Australian standards.
Clause 8
How to Contact Us About Privacy
If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us at: [email protected]