Privacy Policy

This policy applies to personal information handled by OrionX, an Adelaide-based software and automation consultancy. In this policy, “we”, “us” and “our” mean OrionX.

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. This policy applies to our website, enquiries and ordinary business communications. It does not govern a client system that has its own privacy terms or a third-party website that we link to.

When you contact us, we may collect:

• your name, email address and optional phone number;
• your business name and role;
• the contents of your enquiry and later correspondence; and
• how you heard about us, if you choose to answer that question;
• project, operational or technical information you choose to provide.

Our hosting and security providers may automatically process limited technical information needed to deliver and protect the website, such as IP address, browser and device type, requested page, timestamps and security events.

We use Cloudflare Web Analytics to understand aggregate website use and performance without advertising cookies or cross-site visitor profiles. It may process the page visited, referring website, broad country, browser, device type and performance information. When you send an enquiry, we also attach limited first-party attribution such as the first landing page, enquiry page, referring host, campaign parameters and a detected referral category. These fields help us understand which pages and channels lead to genuine enquiries.

Please do not send passwords, API keys, payment-card details, health information or other sensitive material through the contact form.

We use personal information to:

• respond to and assess your enquiry;
• arrange a call, prepare a scope or provide requested information;
• deliver and support services where you engage us;
• operate, secure and improve our website and business systems;
• understand which pages, searches and referral channels lead to enquiries;
• keep business, tax and contractual records; and
• comply with law and protect our rights and those of others.

We do not sell personal information. We do not add contact-form enquiries to a marketing list without permission.

Contact-form submissions and their limited attribution fields pass through Cloudflare infrastructure and are delivered to our business mailbox using Resend. They may then be held in our email and business records. Website attribution is held in session storage in your browser until the tab or browser session ends. We use reasonable technical and organisational safeguards, including access controls, encrypted transmission, operational logging and restricted account access.

No internet transmission or storage system is completely secure. If you believe information sent to us has been compromised, contact us promptly using the details below.

We disclose personal information only where reasonably necessary to operate our business, provide a requested service, obtain professional advice, comply with law, or protect people and systems. Recipients may include hosting, email, cloud, professional-advisory and other service providers that support our operations.

Our website, aggregate analytics and contact process use Cloudflare, and enquiry delivery uses Resend. Resend stores account data, email metadata, logs and API records in the United States. Other infrastructure providers may process information in Australia and overseas. We take reasonable steps to select reputable providers and limit disclosure to what is needed for the service.

We may also disclose information where required by a court, regulator, law-enforcement body or other lawful authority.

We generally keep enquiry correspondence, including the limited attribution attached to it, for up to 24 months after our last substantive contact so we can respond to follow-up questions and understand previous discussions. If an enquiry becomes a client engagement, relevant records may be kept for the engagement and any longer period required for tax, legal, insurance, security or dispute purposes.

Platform security and delivery logs are retained for the period set by the relevant provider and account plan. When information is no longer reasonably required, we delete it or de-identify it where practical.

You may ask what personal information we hold about you, request a copy, ask us to correct inaccurate information, or request deletion. Email solutions@orionx.com.au with enough detail for us to identify the relevant records. We may ask you to verify your identity before acting on a request.

We will respond within a reasonable period. We may need to retain some records where required by law or where they are reasonably necessary for a legal claim, security investigation or existing agreement.

If you have a concern about how we handled personal information, emailsolutions@orionx.com.au. Explain what happened and the outcome you are seeking. We aim to acknowledge a complaint within five business days and respond within 30 calendar days.

If the Privacy Act 1988 (Cth) applies to the matter and you are not satisfied with our response, you may contact theOffice of the Australian Information Commissioner.

We may update this policy when our services, providers or legal obligations change. The date at the top shows the latest revision.

Privacy enquiries can be sent tosolutions@orionx.com.au or by post to OrionX, Richmond, Adelaide SA 5033.