Privacy Policy

1. Who we are

Thie website is operated by Aivarex Pty Ltd (“Aivarex”, “we”, “us”), ABN77 685 034 575, of 29 Latrobe Street, East Brisbane, QLD 4169, Australia. Aivarex is the data controller for personal data collected through the Assessment. Our privacy contact is info@aivarex.com.au.

2. Scope

This policy explains how we collect, use, disclose and protect personal data when you use our website and associated services and platform and receive our communications from us. It applies to individuals in the EU/EEA and the UK(under the GDPR and UK GDPR) and in Australia (under the Privacy Act 1988 (Cth) and the Australian Privacy Principles).

3. Personal data we collect

The personal data we collect falls into four categories. First, identity and contact details that you may provide: your full name, job position ort itle, company name, company email address, and business phone number. Second,your organisation profile: industry, company size, and country. Third,assessment content: your answers to the maturity questions, your free-textcomment on where supply resilience sits as a priority, and the maturity scoresand ratings we derive from them. Fourth, technical data collectedautomatically: your IP address, browser and device information, and alocally-stored session identifier used to save your progress (described insection 11).

We do not intentionally collect special-category data, and you should notenter sensitive personal information in the free-text field.

4. How we collect it

We collect this data directly from you when you complete a form orassessment, and automatically through your browser (technical data and localprogress-saving).

5. Why we use it, and our legal bases (GDPR Article 6)

We process your personal data for the following purposes, each with alegal basis under Article 6 of the GDPR. We run assessments, calculate yourmaturity scores and display your dashboard on the basis of performing a serviceyou requested (Article 6(1)(b)) together with our legitimate interests inoperating the tool (Article 6(1)(f)). We generate your report and email it toyou on the basis of performing the service you requested and/or your consent(Article 6(1)(a) and (b)). We contact you about your results and aboutAivarex’s related products and services on the basis of your consent (Article6(1)(a)), which you give via the tick-box when you submit. We produceanonymised and aggregated benchmarks and improve assessment on the basis of ourlegitimate interests (Article 6(1)(f)). And we comply with legal obligationsand keep records on the basis of legal obligation (Article 6(1)(c)).

Where we rely on consent, you can withdraw it at any time (see section9); withdrawal does not affect processing carried out before withdrawal. Wherewe rely on legitimate interests, we have balanced those interests against yourrights and you may object (see section 9). For Australian data subjects, wecollect and use personal information for these related primary anddirectly-related secondary purposes consistent with the Australian PrivacyPrinciples.

6. A copy of your report is sent internally

When you submit, your report is emailed to you and a copy is sent toAivarex so that our team can follow up with you about your results. This formspart of the lead-generation purpose to which you consented.

7. Who we share your data with

We share personal data only with service providers (processors) who hostand operate the Assessment and deliver email on our behalf, including MicrosoftCorporation (Microsoft Graph / Microsoft 365) for email and Amazon WebServices, Inc. for hosting and storage. These providers are bound by contractto process data only on our instructions. We do not sell your personal data.

8. International data transfers

Aivarex is based in Australia. If you are in the EU/EEA or the UK, yourpersonal data will be transferred to and stored in Australia and/or othercountries where our providers operate. Australia is not currently the subjectof an EU adequacy decision, so where required we rely on appropriate safeguards– principally the European Commission’s Standard Contractual Clauses (and theUK Addendum or IDTA) – to protect your data on transfer. You may request a copyof the safeguards we use via the privacy contact above.

9. Your rights

Subject to applicable law, you have the right to access the personal datawe hold about you; to rectify inaccurate or incomplete data; to erase your data(the “right to be forgotten”); to restrict or object to processing, includingobjecting to direct marketing at any time; to data portability, meaning toreceive your data in a portable format; to withdraw consent at any time; and tolodge a complaint with a supervisory authority.

To exercise any right, contact info@aivarex.com.au. You can unsubscribefrom marketing at any time using the link in our emails or by contacting us. Asto supervisory authorities: in the EU/EEA you may complain to your local DataProtection Authority; in the UK, to the Information Commissioner’s Office(ICO); and in Australia, to the Office of the Australian InformationCommissioner (OAIC).

10. How long we keep your data

We keep your Assessment submissions and contact details for 24 monthsfrom your last interaction with us, after which we delete or anonymise them,unless a longer period is required by law or to resolve disputes. Aggregated oranonymised benchmark data, which does not identify you, may be keptindefinitely.

11. Cookies and local storage

The Assessment stores a small amount of data in your browser’s localstorage (your answers-in-progress and a random session identifier) so that youcan leave and resume without losing progress. This data stays on your device,and you can clear it at any time via your browser or the “Start fresh” option.We do not use third-party advertising cookies in the Assessment; however, we douse analytics cookies, and your acceptance of these terms forms your consent.

12. Automated processing

Your maturity ratings are calculated automatically from your answers.This is a self-assessment scoring aid and does not produce legal or similarlysignificant effects about you within the meaning of Article 22 of the GDPR; wedo not make solely automated decisions of that kind.

13. Security

We use appropriate technical and organisational measures — includingencryption in transit, access controls, and reputable infrastructure providers— to protect your personal data. No method of transmission or storage iscompletely secure, but we work to protect your information and to notify youand the regulators of any breach as required by law.

14. Children

The Assessment is intended for business professionals and is not directedat children. We do not knowingly collect data from anyone under 16.

15. Changes to this policy

We may update this policy from time to time. The “Last updated” dateshows the latest version, and we will notify you of material changes whereappropriate.

16. Contact us

For questions or requests, contact us at info@aivarex.com.au, or by postat Aivarex Pty Ltd, 29 Latrobe Street, East Brisbane, QLD 4169, Australia.

‍