Privacy Policy for Brixalenova
Introduction
This Privacy Policy describes how Brixalenova (the Company) collects, uses, discloses and protects personal data when individuals visit or interact with brixalenova.com. It applies to information collected through this site and, where relevant, related channels used to support the services described here. The Policy is intended to meet applicable requirements in Australia and to reflect comparable privacy principles found in other jurisdictions, while recognising that local laws may differ.
The site provides general information about financial risk preparedness, including diversification, reserves and contingency planning. In the course of delivering these services, the Company may process personal data about users, such as contact details and information about their interests or concerns. This Policy explains the main categories of data involved, the purposes for which they are used, the legal bases that may apply and the rights available to individuals. By using the site, users acknowledge that their personal data may be processed in accordance with this Policy.
How personal data is collected
The Company collects personal data when users provide it directly, such as by completing forms or contacting the Company, and when they use the site, in which case certain information is collected automatically. In some cases, data may also be obtained from third party service providers that support analytics, security or communication. The types of data collected depend on how the user interacts with the site and which services are requested.
Information provided directly by users
- Identification details such as name, title or preferred form of address provided when completing forms or making enquiries.
- Contact information including email address and phone number used to respond to questions or arrange discussions.
- Location related details such as city, region or postcode that help the Company understand the user’s context.
- Information about the user’s interests or concerns regarding financial risk preparedness, provided in message fields.
- Preferences for communication methods and timing, as indicated in contact or request forms.
Information collected automatically
- Technical details about the device and browser used to access the site, such as type, version and operating system.
- Log information including Internet Protocol (IP) address, access dates and times, pages viewed and referring pages.
- Information about interactions with emails or on site messages, such as opens, clicks and unsubscribe actions.
- Approximate location data derived from IP address, where permitted, to understand regional usage patterns.
- Cookie identifiers and similar online identifiers used to remember preferences and support security features.
How personal data is used
Personal data collected through this site is used to operate, maintain and improve the services offered, to respond to enquiries, and to support analytical reviews and personal consultations related to financial risk preparedness. The Company does not sell personal data. Use of data is guided by applicable Australian requirements and, where relevant, comparable standards from other regions, and is limited to purposes that have been explained to users or are compatible with those purposes.
- To provide, operate and maintain the site and related services, including handling contact requests and enquiries.
- To respond to questions, provide general information about financial risk preparedness and manage ongoing user relationships.
- To personalise certain aspects of the user experience, such as remembering preferences where permitted by law.
- To monitor, analyse and improve site performance, content relevance and security using aggregated and individual level data.
- To send service related communications, such as important updates to policies, terms or technical notices about the site.
- To comply with legal and regulatory obligations, respond to lawful requests and protect the rights, property and safety of the Company, users or others.
- To maintain records of consents, requests and communications for accountability and audit purposes where appropriate.
Privacy commitment: The Company is committed to handling personal data in a lawful, fair and transparent manner. This Privacy Policy explains what information may be collected when users visit the site, how it may be used and shared, and which choices and rights are available. The Company aims to collect only the data needed to provide and improve services related to financial risk preparedness and to keep that data secure for as long as it is retained.
When personal data may be shared
Personal data may be shared with carefully selected service providers that assist with operating the site, delivering communications, hosting data, providing analytics or supporting security. Where required, data may also be disclosed to regulatory or law enforcement authorities. In all cases, sharing is limited to what is necessary for the relevant purpose, and the Company seeks to ensure that recipients handle the data securely and in line with applicable obligations.
Service providers and partners
The Company engages third party service providers to support functions such as hosting, data storage, analytics, communication and security. These providers may process personal data on behalf of the Company and only in accordance with instructions. The Company seeks to ensure that such providers implement appropriate safeguards and use the data solely for agreed purposes.
Processing to meet legal obligations
In some circumstances the Company is legally required to process or retain personal data, for example to comply with record keeping obligations, respond to lawful requests from authorities, or meet requirements under consumer or financial services laws. Such processing is carried out only to the extent necessary to meet those obligations and may continue even if the user seeks deletion of other data.
Aggregated and anonymous statistics
The Company may create aggregated or anonymised statistics from usage data to analyse trends, improve the site and understand how services are used. These statistics do not identify individual users and may be shared in summary form with service providers or partners where appropriate.
User rights
Subject to applicable law, users have certain rights in relation to their personal data, which may include access, rectification, deletion, restriction, portability and objection. The exact scope of these rights can vary depending on the jurisdiction and the legal basis on which the data is processed. The Company will consider and respond to each request in accordance with relevant requirements and may ask for additional information to confirm identity and clarify the scope of the request.
- Users may request access to personal data held about them, subject to identity checks and applicable legal restrictions.
- Users may request correction of inaccurate personal data and completion of incomplete data held by the Company.
- Users may request deletion of certain personal data, subject to legal obligations that may require continued retention for a period.
- In certain circumstances, users may request a copy of personal data they have provided in a structured, commonly used and machine readable format, and may ask for it to be transmitted to another organisation where technically feasible.
- Where processing is based on legitimate interests or involves direct marketing, users may object to certain processing activities.
- Users may request restriction of certain processing activities, for example while a complaint or accuracy concern is being reviewed.
To exercise privacy rights or raise concerns, users should contact the Company using the channels provided on the site, describing the nature of the request and providing sufficient information to verify identity. The Company will assess and respond in line with applicable requirements and may not always be able to fully comply, for example where legal obligations or the rights of others are affected.
Data security
The Company takes reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction. No system can be completely secure, but the measures described below are designed to reduce risks and to safeguard data in proportion to its sensitivity and the purposes for which it is processed.
Technical measures
- Using secure server configurations, encryption technologies and access controls to protect data in transit and at rest where appropriate.
- Implementing authentication measures and role based permissions to limit access to systems containing personal data.
- Applying regular updates, patches and security monitoring to systems and applications used to operate the site.
- Backing up key systems and data, and testing recovery procedures to reduce the impact of potential incidents.
Organisational measures
- Limiting access to personal data to authorised personnel who need it for their role and providing guidance on confidentiality obligations.
- Using internal policies and procedures to govern how personal data is collected, stored, shared and deleted.
- Including appropriate data protection terms in agreements with service providers that process personal data on behalf of the Company.
- Maintaining records of key processing activities, consents and requests, where appropriate, to support accountability.
Data retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting or reporting obligations. Retention periods vary depending on the type of data, the nature of the relationship with the user and regulatory requirements. When data is no longer needed, the Company will take reasonable steps to delete it or store it in a form that no longer identifies the user.
- Account related data may include login identifiers, settings, preferences and records of consents given or withdrawn.
- Learning data includes information about how users navigate the site, which pages they visit and how long they stay, helping the Company understand which topics are of greatest interest.
- Communications data includes messages sent through contact forms, enquiries, feedback, and records of interactions with the Company’s support or advisory staff.
- Financial data may include high level information about a user’s financial situation, such as approximate asset ranges or general risk concerns, where voluntarily provided for discussion purposes.
- Marketing data includes preferences for receiving updates, records of marketing consents, and information about how users interact with optional communications.
Specific retention periods may be communicated in additional notices or agreed documents where appropriate.
International data transfers
Personal data may be stored or processed in locations outside the user’s country, including outside Australia, for example where the Company uses cloud hosting, analytics or communication providers with international infrastructure. In such cases, the Company seeks to ensure that appropriate safeguards are in place, such as contractual protections or reliance on recognised transfer mechanisms, so that personal data continues to receive a level of protection consistent with applicable requirements.
- Using data centres or cloud services that provide documented security certifications and safeguards appropriate to the nature of the data.
- Entering into contractual arrangements with overseas service providers that include data protection obligations and, where relevant, standard contractual clauses or similar mechanisms.
- Assessing, where reasonable, the legal and regulatory environment of the destination country in relation to data protection and access by public authorities.
- Limiting the scope of personal data transferred internationally to what is necessary for the relevant service and, where possible, using aggregation or pseudonymisation.
Cookies and similar technologies
The site may use cookies and similar technologies to support essential functions, remember user preferences, measure how the site is used and, where applicable, tailor content. Some cookies are set by the Company, while others may be set by third party service providers. Further details, including categories of cookies, purposes and retention periods, are provided in the Cookie Policy, which should be read together with this Privacy Policy.
Types of cookies used
- Essential cookies support core site functions such as page navigation, secure form submission and session management, and cannot be switched off through on site tools.
- Performance cookies collect information about how users interact with the site, such as pages visited and error messages, to help improve performance and user experience.
- Personalisation cookies, where used, help tailor content or recommendations to user interests, subject to consent requirements and local law.
- Functionality cookies remember user choices, such as language or region, and help provide enhanced, more personalised features.
Users can manage cookie preferences through browser or device settings and, where offered, on site preference tools, but disabling certain cookies may affect site functionality.
Changes to this Privacy Policy
The Company may update this Privacy Policy from time to time, for example to reflect changes in services, data processing practices or legal requirements. Any updated version will be posted on this page with a revised effective date and, where appropriate, a notice in another prominent location on the site.
- Important changes to this Privacy Policy or other key legal documents governing the use of the site.
- Service related messages about the availability, security or technical status of the site where necessary.
- Responses to specific requests, enquiries or forms submitted by the user through the site or related channels.
- Optional updates about services or information on financial risk preparedness, where the user has given appropriate consent or where permitted by law.
Users are encouraged to review this Policy periodically to stay informed about how personal data is handled.
How to contact the Company
Questions about this Privacy Policy, or requests to exercise privacy rights, may be submitted through the usual contact channels indicated on the site. The Company may ask for additional information to verify identity or clarify the request before responding within a reasonable period, subject to applicable legal requirements.
Brixalenova
365 Little Collins St, Melbourne, VIC 3000, Australia
Phone: +61 3 8611 4723
Email: content@brixalenova.com