Privacy Policy for CATALYX

Effective Date: 27 August 2025

1. Our Commitment to Privacy

CATALYX ("we," "us," or "our") is dedicated to protecting the privacy and confidentiality

of our clients, partners, and website visitors. This Privacy Policy outlines our practices

concerning the collection, use, disclosure, and management of personal information.

We conduct our business in compliance with the Australian Privacy Act 1988 (Cth) and

the Australian Privacy Principles (APPs).

2. Consent

By using our website, engaging our services, or providing us with your personal

information, you consent to the collection, use, and disclosure of your information as

described in this Privacy Policy.

3. What Personal Information We Collect

We collect personal information that is reasonably necessary for our business

functions. The types of information we may collect and hold include:

• Identity and Contact Data: Your full name, email address, telephone number,

job title, and the name of your organisation.

• Client Service Data: Information about your business, IT infrastructure, and

systems necessary to provide our consultancy services. This may include project

details, strategic plans, network configurations, system performance data,

hardware/software details, log files, diagnostic data, and securely managed

system credentials.

• Financial and Transactional Data: Billing information, payment details, and

records of services you have engaged us for.

• Technical and Website Usage Data: Your IP address, browser type, device

information, and information about how you navigate and interact with our

website, collected through cookies and similar technologies.

4. How We Collect Personal Information

We collect information through various channels, including:

• Directly from you: When you fill out a contact form on our website, email us, call

us, or provide information during meetings and consultations.

• As part of our service delivery: When we work on your projects and require

information to fulfil our contractual obligations.• Automatically: When you visit our website, we may automatically collect

technical data about your equipment and browsing actions.

We may combine personal information we collect from you with information obtained

from other sources to help us improve its overall accuracy and completeness.

5. How We Use Your Personal Information

Our primary purpose for collecting personal information is to provide you with

exceptional IT consultancy services. Specifically, we use your information to:

• Deliver Services: To provide the IT consultancy, strategy, and transformation

services you have requested.

• Communicate Effectively: To respond to your inquiries, provide you with

proposals, and keep you updated on project progress.

• Manage Our Business: For administrative purposes, including invoicing,

account management, and record-keeping.

• Improve Our Offerings: To analyse how our services are used, identify areas for

improvement, and enhance the user experience on our website.

• Marketing: To send you relevant information about our services, industry

insights, or events that we believe may interest you. You may opt out of

marketing communications at any time.

6. Disclosure of Personal Information

We understand the importance of your data's confidentiality. We will not sell, rent, or

trade your personal information. We will only disclose your information in the following

circumstances:

• To Service Providers: We may share information with trusted third-party service

providers who assist us in operating our business (e.g., cloud hosting providers,

accounting software, CRM systems). These providers are contractually bound to

protect your information and use it only for the purposes we specify.

• As Required by Law: If we are required to disclose information by an Australian

law, court order, or government regulation.

• In a Business Transfer: In the event of a business transition, such as a merger,

acquisition, or sale of assets, your personal information may be among the

assets transferred.

• With Your Consent: We will share your information with other third parties with

your explicit consent.We will take reasonable steps to ensure that any international recipients of your data

are subject to laws or contractual obligations that uphold the Australian Privacy

Principles.

7. Data Security

We take the security of your personal information very seriously. We have implemented

appropriate technical, administrative, and physical security measures to protect the

information we hold from misuse, interference, loss, and unauthorised access,

modification, or disclosure. Access to your information is limited, and our policies and

procedures are designed to safeguard it.

8. Data Retention

We will retain your personal information only for as long as is necessary for the

purposes for which it was collected. Our retention periods are determined based on

several factors, including:

• The duration required to provide our services to you.

• Our legal and regulatory obligations under Australian law.

• The need to retain information for potential or actual legal claims.

We will review and securely dispose of personal data on a regular basis when it is no

longer needed.

9. Sensitive Information

CATALYX will not collect Sensitive Information (as defined in the Privacy Act 1988, which

includes information about health, ethnicity, or political opinions) without your explicit

consent, unless required or permitted by law. Any sensitive information collected will be

held under a higher level of security protection.

10. Your Privacy Rights

You have the right to request access to the personal information we hold about you. You

also have the right to request that we correct any information that is inaccurate, out-of

date, or incomplete. To make a request, please contact our Privacy Officer. We will

respond within a reasonable timeframe.

11. Cookies and External Links

Our website uses cookies to enhance your browsing experience. You can control cookie

preferences through your browser settings. Our site may also contain links to external

websites; we are not responsible for their privacy practices and encourage you to review

their policies.

12. Complaints and QuestionsIf you have a question about this Privacy Policy or a complaint about how we have

handled your personal information, please contact our Privacy Officer. If you are not

satisfied with our response, you have the right to complain to the Office of the

Australian Information Commissioner (OAIC).

13. Contact Our Privacy Officer

For any privacy-related matters, please contact us at:

• Email: support@catalyx.com.au

• Address: 10, EWENS PASS, WANDI, PERTH, WA, 6167

We may update this Privacy Policy from time to time. The latest version will always be

available on our website.