DisruptivX Pty. Ltd. together with its related bodies corporate (“we”, “our” or “us”) is committed to the protection of personal information within the scope of applicable laws. This global privacy policy/notice (“Privacy Policy”) sets out how we treat the personal information that we collect, use, and disclose. The Privacy Policy applies to information collected on our website located at https://www.disruptivx.global (“the Website”), as well as personal information collected in or through our products, services, and programs, or otherwise through any interaction you have with us (collectively, together with the Website, the “Services”).

We may update this Privacy Policy from time to time. The most current version will be located on our website and is also available by contacting our Data Protection Officer via email: dataofficer@disruptivx.global

What is personal information?

By using the term “personal information” in this Privacy Policy, we mean any information that can be directly associated with or used to identify a specific person, “personal information” may be used interchangeably with the term “personal data”.

Personal information we collect and process

We collect personal information from a variety of sources, including information that you provide directly and information that we automatically collect when you access and use the Services. The types of personal information that we collect will vary depending on your dealings with us.

Personal information you provide

You may provide personal information to us and our third-party service providers through the Services, when you submit information through our websites, for example by completing an online form, when you apply for or inquire about employment with us, in the course of us providing you with a requested product, service or benefit, or when you e-mail, call, or otherwise communicate with us, including in person. The types of personal information you provide differ depending on how you choose to interact with us, but may include your name, email, phone number, address, and payment card or bank account information, or any other personal information you choose to provide to us.

Information collected automatically

We and our third-party service providers may collect information automatically from you when you access and use the Services. Such information may include personal information and includes the following:

Usage information

We may collect information about how you interact with the Services. This may include information such as the dates and time you visit the Services, the page you view, referring / exit URLS, your browser type, and the domain name of your internet service provider. In some cases, we may collect this information through cookies and similar technologies. To learn more about these technologies, please see the “Device Information, Cookies and Google Analytics” sections below.

Device Information

We may collect information about the devices you use to access the Services, including your device make and model, IP address, inferred geolocation information, operating system, and unique device identifiers.

Cookies

Our websites use cookies to track user traffic patterns and to better serve you when you revisit a website. A cookie is a small data file that a website may write to your hard drive when you visit it. A cookie file can contain information, such as a user ID which the website uses to track the pages you have visited. You can refuse cookies by turning them off in your browser. However, full functionality for our websites requires the use of cookies.

Information is also generated whenever a page is accessed on our website that records information such as the time, date, and specific page. We collect such information for statistical and maintenance purposes that enables us to continually evaluate our website performance. Cookie use will vary between our sites, and products, please review the cookie statement on the site of product you use.

Google analytics

We may use Google Analytics, a web analysis service provided by Google, together with other analytics services, in order to better understand your use of the Services and how we can improve them. Google Analytics collects information such as how often users visit a website, what pages you visit when you do so, and what other websites you used prior to coming to such website. Google Analytics collects only the IP address assigned to you on the date you visit a website, rather than your name or other directly identifying information. We do not combine the information collected through the use of Google Analytics with your personal information. Although Google Analytics plants a persistent cookie on your web browser to identify you as a unique user the next time you visit a website, the cookie cannot be used by anyone but Google. Google Analytics uses its cookie(s), and the information Google Analytics collects to track your online activities over time and across different websites when you use our Services, and other websites. Google’s ability to use and share information collected by Google Analytics about your visits to the Services are governed by the Google Analytics Terms of Service and the Google Privacy Policy. Google may utilise the data collected to track and examine the use of the Services, to prepare reports on its activities, and share them with other Google services. To more fully understand how Google may use the data it collects through the Services, please review “How Google Uses Information From Sites or Apps That Use Our Services” (located here).

Correspondence

DisruptivX appreciates your questions and comments about the Services and welcome your messages through our or “Contact Us / Feedback” page. If you correspond with DisruptivX, we may collect personal information, including the content of, and metadata regarding, any correspondence you may provide us. We may share your messages with those within our organisation who are most capable of addressing the issues contained in your message. We may archive your message for a certain period of time or discard it.

How can you ‘Opt-Out’ of promotional correspondence?

To the extent permitted by applicable law, DisruptivX or our third party service providers may send you e-mails with promotional offers. If you would no longer like to receive this information from us, please click the unsubscribe link at the bottom of any such e-mail you receive from us and follow the instructions. Your e-mail address will be removed from our marketing list. Please allow us a reasonable amount of time in order to satisfy your request, as some communications may already be in process. You do not have to provide us with any personal information, however if you do not do so we may not be able to provide you with the products, services or benefits you have requested.

Our legal basis for collecting and processing your personal data

We will only collect, use, or disclose your personal information where we have a legal basis for doing so. Typically, this will be:

• where you have provided your consent;
• where we are legally obliged to do so; and
• where it is necessary as part of a contract or transaction between DisruptivX and yourself, or between DisruptivX and your employer; where it is in our legitimate interest as a supplier of risk management solutions (for example providing you with customer service or protecting the security of our systems).

We use personal information in accordance with applicable laws in the countries/states in which we operate.

How We Use The Personal Information We Collect?

We will use the personal information we collect for the purpose disclosed at the time of collection, or otherwise as set out in this Privacy Policy. We will not use your personal information for any other purpose without first seeking your consent, or where authorized or required by law.

We will use information collected directly from you for purposes that include:

• to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products, and services that you request from us;
• to the extent permitted, to provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
• sending information that you request from us, including responding to inquiries or requests for information about or from DisruptivX;
• evaluating your qualifications for career positions at DisruptivX;
• other business purposes, including, without limitation, verifying your identity, age, and/or payment details, investigating complaints about the Services, research and analysis, marketing, advertising, and dispute resolution;
• in connection with a merger or similar consolidation of DisruptivX into or with another entity;
• complying with law enforcement, government agencies, or a governmental mandate;
• complying with or as permitted by any DisruptivX policies and any applicable legal requirements;
• to notify you about changes to our service;
• to ensure that content from our websites is presented in the most effective manner for you and your computer; and
• engaging in other activities discussed under this Privacy Policy or by DisruptivX in its discretion.

In addition, we will use personal information collected about you for purposes that include:

• to administer our websites and for internal operation, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• to improve our websites to ensure that content is presented in the most effective manner for you and for your computer;
• to allow you to participate in interactive features of our service, when you choose to do so or are required to do so by your employer;
• as part of our efforts to keep our websites safe and secure;
• security purposes, including monitoring, risk assessment, addressing integrity and security issues related to the Services, and fraud and crime prevention/detection;
• to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you; and
• to make suggestions and recommendations to you and other users of our websites about goods or services that may interest you or them.

In addition to the uses mentioned or described elsewhere in this Privacy Policy, we may add personal information to our database.

How We Store And Protect Your Personal Information?

We store personal information in a combination of computer storage facilities and other records. We take reasonable measures to secure and protect your personal information from misuse, interference, and loss, and unauthorised access, modification, or disclosure on the Services. Nevertheless, no security system is impenetrable. We cannot guarantee that personal information that users of the Services transmit or otherwise supply will be secure.

Where we provide personal information to third parties, we use contractual measures to protect this information.

Additionally, we take reasonable steps to destroy or permanently de-identify personal information when we no longer need it.

Your Consent

We will ask you for your explicit consent before capturing and processing your personal data, in the limited circumstances for which consent is appropriate or required by applicable law. By providing consent you are giving us permission to process your personal data specifically for the purposes identified.

You may withdraw consent at any time by contacting our Data Protection Officer via email: dataofficer@disruptivx.global

In other cases, our interfaces (e.g., an email footer) will provide an option for withdrawing consent.

Disclosure Of Your Personal Data To Third Parties

We may also disclose all of the categories of personal information that we collect to third parties who work with us in our business to provide, promote or improve the products or services you have requested or are interested in, process payments, perform statistical analysis, protect against potential fraud, or perform any other functions consistent with the operation of the Services, such as:

• our related bodies corporate;
• our affiliated organizations in the countries set out below;
• third-party service providers (such as trainers, auditors, banks, and mortgage rooms);
• national regulators and accreditation bodies;
• marketing agencies;
• consultants and professional advisers in the course of the professional services they render to us;
• analytics and search engine providers that assist us in the improvement and optimization of our websites; or
• service providers who help us manage our relationships with our customers and our marketing channels (such as Salesforce, Hubspot and ZoomInfo).

We may disclose your personal information to third parties:

• in the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets; or if we are under a duty to disclose or share your personal information in order to comply with any legal obligation.

We Do Not, And Do Not Intend To, Sell Your Personal Data.

Do we send your information overseas?

Depending on your relationship with us or the type of service we provide to you we may disclose some of your personal information, for the purposes described above, to our international offices. We may also disclose your personal information to other countries specified by you from time to time in order to provide services to you.

Some of these countries may not have the same or substantially similar privacy laws as those set out in this privacy policy.

By providing your personal information to us, you consent to our disclosure of your personal information to organisations in those countries (where relevant or necessary) even though it may not receive the same protections that it would in your own country. You may request us not to transfer your personal information to the countries listed in the Privacy Policy, but if you do so we may not be able to provide the services or products you have requested from us.

Retention Of Your Personal Data

Where DisruptivX holds and processes your personal information for contractual purposes (e.g. if you have purchased something from us), we will hold and process this data for as long as we are legally obliged to do so. Where you have provided your consent for us to hold and process your personal information (for example to provide you with updates on relevant products and services we may offer), to the extent permitted by applicable law, we will do so until you ask us not to.

Linked Websites

For your convenience, some hyperlinks may be posted on the Services that link to other websites not under our control. We are not responsible for, and this Privacy Policy does not apply to, the privacy practices of those websites or pages not under our control or of any companies that we do not own or control. We do not endorse any of those websites or pages, the services or products described or offered on such sites or pages, or any of the content contained on those sites or pages.

User-Provided Content

Except as expressly set forth in this Privacy Policy, any information, communications, or material that you submit to the Services is done at your own risk and without any expectation of privacy.

Social Media Platforms

Any information, communications, or material that you submit to any pages associated with DisruptivX on social media platforms is done at your own risk and without any expectation of privacy. All such submissions are subject to the terms of use and privacy policy of such social media platforms.

Children

The Services are intended for a general audience and are not intended for use by children under 13 years of age. We do not knowingly collect information about children or sell products to children. Consistent with the Children’s Online Privacy Protection Act, we will not knowingly collect any information from children under the age of 13.

Your Rights As A Data Subject

Depending on your jurisdiction, and subject to applicable data protection laws, you, the Data Subject, may have a number of data protection rights such as: the right of access to your information; the right to delete, restrict/block, object to, amend/update or correct or port your personal information and the right to withdraw your consent for processing. More details regarding these rights are available on any form on this website where you are asked to enter any personal data. If you are using one of our products or services contracted by your employer, please contact your customer representative.

Exercising Rights As A Data Subject

If you elect to exercise any of the rights listed above, including access, consent, or withdrawal of your consent for us to process your data, you can do so by contacting our Data Protection Officer using the contact details under Data Subject Requests below. If you are using one of DisruptivX Products or Services contracted by your employer, please contact your customer representative. If a third party is involved in the processing of your personal data, we will pass on to them your request arising from the rights listed above, as applicable. Certain data protection laws (like those in Europe and California) make the distinction between those who act as “controllers” or “businesses” and those who act as “processors” or “service providers” of personal data. A controller determines how and why your personal information is to be used. A processor or service provider only processes personal data on behalf of the controller under the controller’s instruction.

For many of our services, our customers are the controller, and we are acting as their processor. It may be up to the controller to make sure you can exercise your rights over your personal data. If you have questions about how personal data is handled by our customers, you will need to review their privacy notices and, if necessary, contact them directly.

Residents Of Australia

This portion of our Privacy Policy applies to our Australian customers only and, applies to the extent of any inconsistency with the information above.

This section explains how we handle personal information relating to individuals who are Australian customers, so as to ensure we meet any obligations under the Australian Privacy Act.

In this section, “personal information”, is defined in the Australian Privacy Act, and means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, or recorded in a material form or not. Personal information includes a person’s name, address, contact details, date of birth, gender, sexuality, and race.

By electing to acquire our Services, you will be deemed to consent to us using your personal information in a manner consistent with this Privacy Policy, including monitoring your use of our website.

We retain the personal information that we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with the Services you requested or to comply with an applicable legal requirement).

Direct Marketing

We will not use or disclose personal information for the purposes of direct marketing to you unless:

• you have consented to receive direct marketing materials; or
• you would reasonably expect us to use your personal details for this purpose; or
• we believe you may be interested in the material, but it is impractical for us to obtain your consent.

In every instance, we will ensure that our direct marketing material incorporates an option for you to elect to receive no further such communications.

Please note also that even if you have requested not to receive further direct marketing communications, we may nevertheless continue to provide you with information about changes to our terms and conditions for the supply of goods or services, questionnaires, and other factual information. This form of communication is not regarded as “direct marketing” under the Australian Privacy Act.

Overseas Disclosure

Personal information may be sent outside of Australia to our related bodies corporate, as permitted by the Australian Privacy Act, which are located in the United States of America. We take reasonable steps to ensure that the overseas recipients of your personal information do not breach our privacy obligations relating to your personal information. However, you should note that United States jurisdictions may not offer the same level of statutory privacy protection for personal information as Australia does. By providing your personal information to us, you consent to our disclosure of your personal information to these entities.

Access, Correction, And Further Information

We will take such steps as are reasonable to ensure that the personal information which we collect remains accurate, up to date and complete.

You may request access to any personal information we hold about you at any time by contacting to our Data Protection Officer via email: dataofficer@disruptivx.global

Upon such request we will endeavour to provide you with access to your personal information held by us unless we are permitted under the Australian Privacy Act to refuse to provide you with such access. Please contact us if you:

• wish to have access to the personal information which we hold about you;
• consider that the personal information which we hold about you is not accurate, complete, or up to date; or
• require further information on our personal information handling practices.

There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in actually providing you with access.

If you consider that the information which we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, we will take reasonable steps, consistent with our obligations under the Australian Privacy Act, to correct that information if you so request.

We will respond to all requests for access and/or correction within a reasonable time.

Complaints

If you have a complaint about the way in which we have handled any privacy issue, including your request for access or correction of your personal information, you should send to our Data Protection Officer via email: dataofficer@disruptivx.global

If you remain unsatisfied with the way in which we have handled a privacy issue, we suggest you approach an independent advisor or contact the Office of the Australian Information Commissioner for guidance on alternative courses of action which may be available. We will provide our full cooperation in the event that you elect to pursue this course of action.