Privacy Policy

Last updated: 30 October 2026

This Privacy Policy explains how NEXPATH SOFTWARE PTY LTD (“NexPath”, “we”, “us” or “our”) collects, uses, discloses and protects personal information when you visit nexpathsoftware.com.au, contact us, request a quote or engage us to provide services.

We are an Australian company based in Queensland. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where they apply to us. This policy is intended to be read together with our Terms of Service and Cookie Policy.

1. Scope

This policy applies to personal information we collect through this website, by email, by phone, through a quote or contact form, and in the course of providing services to clients. It does not apply to information that is not personal information, or to the practices of third parties we do not control.

If you provide information about another person, you should ensure that you are authorised to do so and that the person is aware of this policy.

2. Information we collect

We may collect the following categories of personal information:

• Contact information: name, organisation, role, email address, phone number and business address.
• Enquiry information: the content of your message, the service you are interested in, project stage, timeline, indicative budget and any information you choose to include in a brief.
• Engagement information: information necessary to deliver, administer and support the services you engage us for, including project correspondence, approvals, meeting notes and billing contacts.
• Technical information: browser type, device type, approximate region, pages visited and basic server logs collected by our hosting provider for security, performance and diagnostic purposes.

We do not intentionally collect sensitive information through this website. Please do not include sensitive personal, health, financial or commercial information in a general enquiry form. If an engagement requires sensitive information, we will agree the handling arrangements separately.

3. How we collect information

We collect personal information directly from you when you complete a form, send an email, call us, participate in a meeting or correspond with us during an engagement. We may also collect information indirectly through our hosting provider’s server logs or through the normal operation of email and collaboration tools.

We do not use advertising networks, social media tracking pixels or third-party analytics on this website. The site may use essential cookies or local storage required for basic functionality. More information is set out in our Cookie Policy.

4. Purposes of collection and use

We use personal information for the following purposes:

• To respond to enquiries and provide information about our services.
• To prepare and provide quotes, proposals and statements of work.
• To deliver, administer, support and improve the services you engage us for.
• To communicate about a project, including decisions, changes, risks and operational matters.
• To manage billing, accounting and business records.
• To operate, secure and improve this website.
• To comply with legal, regulatory, tax and contractual obligations.
• To establish, exercise or defend legal claims where necessary.

Where the APPs apply, we use personal information for the purpose for which it was collected, a related purpose that you would reasonably expect, or another purpose permitted by law. We do not sell personal information.

5. Disclosure

We may disclose personal information to third parties in limited circumstances, including:

• Service providers: hosting, email, collaboration, accounting and professional advisers who help us operate the business, subject to appropriate confidentiality and security obligations.
• Client organisations: where the information relates to a project and disclosure is necessary to deliver the agreed services.
• Professional advisers: lawyers, accountants, insurers and auditors where required for the conduct of our business.
• Legal or regulatory authorities: where disclosure is required or authorised by law, a court order or a regulatory process.
• Business transactions: in connection with a merger, acquisition, restructure or sale of assets, subject to appropriate confidentiality protections.

We do not disclose personal information to third parties for their own marketing purposes.

6. Overseas disclosure

We are based in Australia and seek to keep personal information within Australia where practicable. Some service providers used for email, collaboration, hosting or accounting may store or process information outside Australia. Where an overseas disclosure occurs, we take reasonable steps to ensure that the recipient is subject to privacy protections consistent with the APPs, or we rely on an exception permitted by law.

If you require information about the locations used for a specific engagement, contact us and we will provide the available details.

7. Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps include access controls, role-based permissions, secure transmission where appropriate, restricted retention and confidentiality obligations for service providers.

No method of transmission over the internet or electronic storage is completely secure. While we take security seriously, we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will assess our notification obligations under the applicable law and notify affected individuals and the Office of the Australian Information Commissioner where required.

8. Retention

We retain personal information only for as long as it is needed for the purpose for which it was collected, for a related purpose, or as required by law. Retention periods depend on the type of information and the context, including contractual, tax, accounting and dispute-resolution requirements.

When information is no longer required, we take reasonable steps to destroy or de-identify it. If information is held in backup systems, it is handled under the same retention and security controls until it is overwritten or deleted in the ordinary course.

9. Access and correction

You may request access to personal information we hold about you and ask us to correct information that is inaccurate, incomplete or out of date. We will respond within a reasonable period and may need to verify your identity before providing access.

There are circumstances in which we may decline access or correction, including where the request would interfere with the privacy of another person or where the law permits us to refuse. If we decline, we will explain the reason and the available complaint path, unless it would be unreasonable to do so.

10. Direct marketing

We may use your contact details to respond to an enquiry or to communicate about a service you have engaged us for. We do not send unsolicited marketing communications to people who have not had a relevant business relationship with us. If we send a business update, it will include a clear way to opt out. You can also ask us to stop sending marketing communications at any time.

11. Children

This website and our services are directed at organisations and business users. We do not knowingly collect personal information from children under 15 through this website. If you believe a child has provided personal information, contact us and we will take reasonable steps to delete it.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first so that we can investigate and respond. We will acknowledge your complaint and aim to resolve it within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992. The OAIC can review certain privacy complaints and provide information about your rights.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. The current version will always be published on this page with the date it was last updated. If a change is material, we will take reasonable steps to bring it to the attention of affected individuals.

14. Contact

Privacy enquiries and requests can be sent to:

NEXPATH SOFTWARE PTY LTD
Level 3 601 Coronation Drive Toowong QLD 4066, Australia
Email: support@nexpathsoftware.com.au
Phone: 07 2143 8164

Please include enough detail for us to identify the information or issue you are asking about. We will not ask you to send sensitive information by email unless it is necessary and a secure method has been agreed.

15. Related documents and interpretation

This Privacy Policy should be read together with our Terms of Service and Cookie Policy. Those documents explain the commercial terms that apply to an engagement and the limited technologies used by this website. Where there is a conflict between this policy and a signed agreement that contains specific data-handling terms, the signed agreement prevails for the information it covers.

References to “we”, “us” and “our” mean NEXPATH SOFTWARE PTY LTD. References to “you” mean the individual whose personal information we handle, or the organisation acting on that individual’s behalf. If a term is defined in an engagement agreement, that definition applies to the extent of any inconsistency.