Orbix Central Privacy Policy

Orbix Central (“we”, “us”, “our”) respects your privacy and is committed to protecting the personal information we handle. This Privacy Policy explains how we collect, use, store, disclose and protect personal information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What personal information we collect

We may collect the following kinds of personal information:

• Account information — name, email address, and password (handled securely via our identity provider).
• Business information — company name, contact details, and records you store in your Orbix Central workspace (customers, orders, invoices, projects, support tickets and similar).
• Usage information — details of how you use the platform, such as pages visited and actions performed, to improve our service.
• Device and security information — IP address and browser details, used to secure your account and protect against fraud or abuse.

2. How we collect personal information

We collect personal information directly from you when you create an account, use the platform, or contact us for support. We may also collect information automatically through cookies and similar technologies (see our Cookie Notice below).

3. Why we collect and use personal information

We use personal information to:

• Provide, operate and maintain the Orbix Central platform and your account.
• Authenticate users and secure the platform.
• Provide customer support and respond to enquiries.
• Process and record the business transactions you carry out in your workspace.
• Comply with our legal obligations and enforce our Terms of Service.
• Improve and personalise the service, and communicate service updates where we are entitled to do so.

Direct marketing. Where we send you marketing communications (such as news about our service), we will give you a simple way to opt out of receiving them at any time — for example an “unsubscribe” link or contacting us via the details below. Opting out will not stop essential service or account communications.

Our role regarding business data. For the business information and records you (and the users in your workspace) store in Orbix Central — such as your customers, orders, invoices and support tickets — you and your organisation are the controller of that personal information. Orbix Central acts as a processor: we hold and process it only to provide the service to you, in accordance with your instructions and these Terms, and we do not use it for our own independent purposes.

4. Disclosure of personal information

We do not sell your personal information. We may disclose personal information to:

• Service providers who help us operate the platform (for example, cloud hosting, identity and security providers), under contracts that require them to protect your information.
• Other users within your workspace, where your information forms part of a shared business record (for example, a customer record visible to your team).
• Authorities or other parties where required or permitted by law, such as to comply with a legal obligation or to protect our rights.

5. Cross-border disclosure

Your personal information may be stored or processed using cloud infrastructure that is located overseas (for example, infrastructure in the United States or other regions). Where we disclose information to overseas recipients, we take reasonable steps to ensure they handle it consistently with the APPs. By using Orbix Central, you consent to this cross-border disclosure.

6. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. This includes encryption in transit (HTTPS), application-layer security, and access controls. However, no method of transmission or storage is completely secure.

7. Data retention

We keep personal information only for as long as necessary for the purposes for which it was collected, or as required by law. You or your workspace administrator may delete business records at any time.

8. Access and correction

You have a right to access the personal information we hold about you and to request that it be corrected if it is inaccurate. To do so, please contact us using the details below. We may need to verify your identity before actioning your request.

9. Notifiable Data Breaches (NDB)

If we experience a data breach that is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

10. Cookies and similar technologies

Orbix Central uses cookies and similar technologies for essential functions such as keeping you signed in and securing the platform. Some cookies are set by our providers (for example, our identity provider and security services) for the same purpose. See our Cookie Notice and consent banner for details. You can control non-essential cookies through your browser settings or the consent banner on our site.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date above and, where appropriate, by other means. Continued use of Orbix Central after changes take effect constitutes acceptance of the updated policy.

12. Complaints and contact

If you have a question or complaint about how we handle your personal information, please contact us:

• Email: privacy@orbixcentral.com
• Post: Orbix Central, ABN 40 718 494 067, NSW, Australia

If you are not satisfied with our response, you may make a complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.