Privacy Policy

What Does This Policy Cover?

This Policy applies to Personal Data collected in connection with:

• Customers, suppliers, and business partners.
• Users of our websites, portals, and applications.
• Representatives acting on behalf of their organisations.

What Is the Lawful Basis for Processing Personal Data?

We process Personal Data only where we have a clear and lawful basis to do so, as required by applicable privacy laws such as the Australian Privacy Principles (APPs) and the General Data Protection Regulation (GDPR). These lawful bases include:

• Consent: Where you have explicitly consented to the processing of your information for specific purposes.
• Contractual Necessity: Where processing is necessary to fulfill a contract with you or take steps at your request before entering into a contract.
• Legitimate Interests: Where processing supports our legitimate business operations, provided it does not override your rights or interests.
• Legal Obligations: Where processing is required to comply with applicable laws or regulations.

We will only process your Personal Data for specified, legitimate purposes. Processing incompatible with these purposes will only occur with your explicit consent or when required by law.

What is Personal Data?

Personal Data refers to any information about an individual that can directly or indirectly identify them. This includes, but is not limited to:

• Names, email addresses, and other contact details.
• Identification numbers or unique identifiers.
• Location data or online identifiers.
• Information related to an individual's physical, cultural, or economic identity.

Sensitive Personal Data

We do not collect or process Sensitive Personal Data, also known as "Special Category Data," under applicable data protection laws such as the GDPR, unless required by law or with your explicit consent. Sensitive Personal Data includes:

• Racial or ethnic origin.
• Political opinions.
• Religious or philosophical beliefs.
• Trade union membership.
• Genetic or biometric data.
• Health information.
• Sexual orientation.
• Criminal offence records.

If such processing is necessary, we will implement additional safeguards to protect your data.

What Personal Data Do We Collect?

We collect the following Personal Data, where relevant:

• Identity and Contact Details: Name, email address, job title, and business contact information.
• Usage Data: IP addresses, browser type, login data, and platform activity.
• Sales and Payment Information: Business name, industry, billing details, and preferences related to our products and services.
• Other Voluntary Information: Feedback, survey responses, or communications provided to us.

How Do We Process Your Personal Data?

We process your Personal Data to:

• Manage accounts for the Innovate 3D Portal.
• Generate and manage sales proposals and related business operations.
• Communicate updates, training, or support information.
• Improve, troubleshoot, and secure our platforms.
• Fulfill legal, regulatory, and contractual obligations.
• Manage internal operations, including resource planning, financial management, and administration.

With your consent, we may also use your data for marketing communications or customer feedback.

Who Do We Share Your Information With?

We disclose Personal Data only when necessary to:

• Provide services, such as approved integrations or secure hosting.
• Fulfill contractual obligations with your organisation.
• Comply with legal or regulatory requirements.

We may share information with:

• Third-party service providers assisting with IT, security, or operational functions.
• Professional advisors, such as lawyers or accountants.
• Government authorities or other entities as required by law.
• Prospective purchasers during a business sale, merger, or transfer of assets.

All third parties are authorised to process your Personal Data only for specified purposes and under strict instructions.

Are Decisions About Me Automated?

We may use automated processes to make decisions involving your Personal Data to ensure the efficient operation and security of our services.

When We Use Automated Decision-Making

We will only use automated decision-making where:

• It is necessary for the performance of a contract or for legitimate business purposes, with appropriate safeguards in place to protect your rights.
• You have given explicit consent, where required by law.

Automated Security Functions

To protect the security of our platforms and comply with contractual and operational requirements, we may use automated processes to monitor and restrict access. For example, access may be blocked for users whose IP addresses indicate they are operating outside their expected region. These measures are implemented to safeguard the integrity of our services and the security of your data.

Your Rights Regarding Automated Decisions

Where automated decision-making is used:

• You have the right to request an explanation of the decision and the rationale behind it.
• You can request a human review or contest an automated decision where it has a significant effect on you.

How Do We Protect and Retain Your Data?

We implement technical and organisational measures to safeguard Personal Data from unauthorised access, loss, or misuse. Data is securely stored in certified data centres and reviewed regularly.

We retain Personal Data only as long as necessary for its purpose or as required by law. After this period, it is securely deleted or anonymised.

What About Cross-Border Data Transfers?

Your Personal Data is stored within Australia. If cross-border transfers are required, we will implement safeguards such as Data Processing Agreements (DPA) or Standard Contractual Clauses (SCC) to ensure your data remains protected.

Links to Third-Party Platforms and Forums

Our platforms and communications may include links to third-party websites or services. We provide these links for convenience or as part of requested product features or services. We are not responsible for the privacy practices, security, or content of these third-party platforms and we encourage you to review their privacy policies before using their services.

Personal information shared on public forums, such as our social media pages, may be read, collected, or used by others. We are not responsible for the data you voluntarily post in such spaces.

Your Rights

You have certain rights in relation to your Personal Data that we hold about you. These rights may vary depending on the country in which you are based. Generally, it is within your rights to:

• Request access, and obtain copies of, the personal information we have collected about you;
• Request that your Personal Data is provided to you in a format that can be easily read;
• Request that we modify or correct your personal information if it is inaccurate or incomplete; and
• Lodge a complaint if you believe we have breached your privacy rights.

Depending on your jurisdiction, you may also have the right to request the erasure of your personal data, restrict or object to certain types of processing, or withdraw your consent where applicable.

To exercise these rights, please send your request to our Privacy Team using the contact details below.

Contact Us

You can contact us if you:

• Have questions about this Privacy Policy or how we manage your personal information.
• Wish to update, correct, or amend any of your personal information.
• Want to exercise your privacy rights, such as accessing the personal information we hold about you.
• Need assistance understanding how we collect, use, or protect your information.
• Would like to raise a concern or lodge a complaint about how we handle your personal information.

To reach us, please use the following details:

• Email: privacy@innovateconnect.com.au
• Mailing Address: 32-34 Sir Dapper Dr, Burpengary QLD 4505

We aim to respond promptly and to resolve requests or complaints within 30 days.

If you are not satisfied with our response, you can contact the appropriate regulatory authority in your region for further assistance. For details on how to reach the relevant authority, please contact our Privacy Team.

Please note that we may require verification of your identity before processing certain requests to ensure the security of your information.

Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, changes in applicable laws or in our compliance practices.

Significant updates to this Privacy Policy will be communicated directly to customers and relevant third parties, such as via email or prominent notices on our platforms.

The latest version of this Privacy Policy will always be available online via our websites and platforms.