CX Connect Privacy Policy

This privacy policy explains how CX Connect (ABN 58 817 433 774) (CX Connect) collects and handles your personal information. In this policy “we”, “our” and “us” refer to CX Connect.

For the purposes of this policy, personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

We review this Privacy Policy regularly. The latest version is always available at cxconnect.com.au.

1. Open and transparent management

We take our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) seriously and have implemented practices, procedures and systems to ensure compliance. We are committed to maintaining the confidentiality and security of your personal information and managing it in an open and transparent way.

2. Using a pseudonym or being anonymous

Wherever lawful and practical, you may use a pseudonym or not identify yourself when dealing with us. Doing so may affect our ability to provide products and services. Accurate personal details are required to create an account with us.

For clarification on when you must identify yourself, contact us at hello@cxconnect.com.au. You may use a pseudonym for that request.

3. Collection of solicited personal information

3.1 Types of information collected

We collect a range of personal information about current and prospective suppliers and customers, including your full name, telephone number, email address, location (suburb) and details of your current role.

3.2 Personal information (that is not sensitive)

We collect personal information only where:

1. it is reasonably necessary for one or more of our functions or activities; or
2. we are required to by law.

3.3 Sensitive information

We will only collect your sensitive information when:

1. we have your consent; or
2. the collection is reasonably necessary for our functions or activities.

3.4 Exceptions to the need for your consent

We do not need your consent to collect sensitive information when:

1. it is required or authorised by law;
2. a “permitted general situation” exists under the Act; or
3. a “permitted health situation” exists under the Act.

3.5 Collection by lawful and fair means

We collect personal information by lawful and fair means, including:

1. Cookies. We use cookies to monitor your use of our website. Cookies are small files stored by your browser. You can configure your browser to refuse cookies if you prefer.
2. Google Analytics. We use Google Analytics to understand site usage. The information generated by cookies about your use of our website is transmitted to Google and used to compile statistical reports. You can configure your browser to disable Google Analytics.

3.6 Collection from you

Our preference is to collect personal information directly from you via our wizards and contact processes on the website, or via correspondence (post, telephone, email or live chat) and forms. We will collect directly unless:

1. you consent to collection from a third party; or
2. we are required or authorised by law; or
3. it is unreasonable or impracticable to do so.

4. Dealing with unsolicited personal information

If we receive your personal information from a third party without having asked for it, we will decide within a reasonable time whether we could have collected it under section 3. If not, and it is lawful and reasonable, we will destroy or de-identify it as soon as practicable.

5. Notification of collection

Before or at the time of collection (or as soon as practicable afterwards) we will take reasonable steps to notify you of:

1. our identity and contact details;
2. circumstances where we collected it without your knowledge or from another party;
3. circumstances where collection is required or authorised by law;
4. why we collected it;
5. what may happen if we do not collect all or some of it;
6. who we usually disclose it to;
7. how you may access and seek correction;
8. how to lodge a complaint; and
9. whether we are likely to disclose it overseas and, if so, the likely countries.

6. Use or disclosure

6.1 Personal information that is not sensitive

We hold personal information for the purpose of connecting you to call centre outsourcing businesses capable of meeting your requirements (Primary Purpose).

We will not use or disclose it for another purpose (Secondary Purpose) unless:

1. you consent;
2. you would reasonably expect the use or disclosure for a related (or, for sensitive information, directly related) Secondary Purpose;
3. we are required to by law;
4. a permitted general situation exists;
5. a permitted health situation exists; or
6. we reasonably believe it is necessary for enforcement-related activities conducted by, or on behalf of, an enforcement body. We will note such disclosure.

7. Direct marketing

7.1 What is direct marketing?

Promotion of goods and services directly to you, including by email, phone and post.

7.2 Adoption of direct marketing laws

We follow the Act. We may use your personal information for direct marketing if we collected it directly from you and you would reasonably expect that use or disclosure.

7.3 Personal information provided by third parties

Unless impracticable or unreasonable, we require your consent when:

• collecting your personal information from a third party for direct marketing; or
• you would not reasonably expect to receive direct marketing.

To know who provided your information, email privacy@cxconnect.com.au; we will respond within a reasonable time without charge.

7.4 Sensitive information

We will not use your sensitive information for direct marketing unless you have given written permission.

7.5 Opting-out

We always provide a simple opt-out (for example, an “unsubscribe” link). We will not use or disclose your personal information for direct marketing if you have told us not to. To withdraw consent, email privacy@cxconnect.com.au. We will action your request within a reasonable time and without charge.

8. Cross-border disclosure of personal information

We endeavour to store information on Australian servers. If not possible, we may disclose information to an overseas entity when one of the following applies:

1. we have taken reasonable steps to ensure they treat it in accordance with the Act; or
2. we reasonably believe the overseas entity is subject to comparable laws you can enforce; or
3. we obtain your informed consent; or
4. we are required or authorised by law; or
5. a permitted general purpose exists; or
6. a permitted health situation exists; or
7. we reasonably believe it is necessary for enforcement-related activities (and we will note such disclosure).

9. Adoption, use or disclosure of government-related identifiers

We will not adopt a government-related identifier as your identifier unless:

1. required or authorised by law; or
2. reasonably necessary to verify your identity for our activities or functions; or
3. reasonably necessary to fulfil obligations to an agency or State/Territory authority; or
4. required or authorised by or under an Australian law or a court/tribunal order; or
5. some permitted general situations apply; or
6. reasonably necessary for enforcement-related activities; or
7. allowed under the regulations.

10. Quality of personal information

We take reasonable steps to ensure personal information we collect, use or disclose is accurate, up-to-date, complete and relevant.

11. Security of personal information

11.1 Protection

We take reasonable steps to protect your personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

11.2 Destruction

When no longer needed for a permitted purpose and not required by law to retain, we take reasonable steps to destroy or de-identify personal information.

12. Access to personal information

On written request we will provide access to your personal information unless an exception applies, including: serious threat to life/health/safety, unreasonable impact on others’ privacy, frivolous or vexatious requests, legal proceedings discovery limitations, prejudice to negotiations, unlawfulness, legal prohibitions, suspicion of serious misconduct, prejudice to enforcement-related activities, or disclosure of evaluative information from a commercially sensitive decision-making process.

13. Correction of personal information

13.1 Correction

We will take reasonable steps, at no charge, to correct personal information that is inaccurate, out-of-date, incomplete, irrelevant or misleading. Where practicable and lawful, we will also notify third parties to whom we have disclosed the information.

13.2 When we decline to correct

If we decline to correct information, we will provide written reasons and advise how to complain.

14. Making a complaint

If you have a concern or complaint about our handling of personal information or any breach of the APPs, email privacy@cxconnect.com.au describing the issue. We aim to respond within 30 days. If unresolved, you may escalate to an external dispute resolution entity and, if necessary, to the Office of the Australian Information Commissioner.

If you would like a copy of this Privacy Policy, email privacy@cxconnect.com.au and we will provide it free of charge.

This policy was last updated November 2025