This Privacy Policy applies to all personal information collected by Nexshift Technologies Pty Ltd (we, us or our) via the website located at nexshift.app (Website) and the Nexshift platform (Platform).
Clause 1
What Information Do We Collect?
The kind of Personal Information that we collect from you will depend on how you use the website. The Personal Information which we collect and hold about you may include:
We collect the following personal information from users of our platform: full name, business email address, username, role and site assignment within the platform, login activity and session data, IP address, usage data relating to platform interaction, manufacturing and operational data entered by users during platform use, account credentials, and any information voluntarily provided through customer support communications.
If you contact us through the Website, we collect the details you provide, such as your name, company, email address, phone number and message.
Our customers may also enter Personal Information about their own employees, contractors and visitors into the Platform, for example in incident reports, inductions and visitor sign-in records. We hold that information on our customer's behalf, and use it only to provide the Platform to that customer.
Clause 2
Types of Information
The Privacy Act 1988 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.
Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:
(a)whether the information or opinion is true or not; and
(b)whether the information or opinion is recorded in a material form or not.
If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as "Personal Information" and will not be subject to this privacy policy.
Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.
Sensitive Information will be used by us only:
(a)for the primary purpose for which it was obtained;
(b)for a secondary purpose that is directly related to the primary purpose; and
(c)with your consent or where required or authorised by law.
Clause 3
How We Collect Your Personal Information
(a)We may collect Personal Information from you whenever you input such information into the Website, related app or provide it to us in any other way.
(b)We may also collect cookies from your computer which enable us to tell when you use the Website and also to help customise your Website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.
(c)Our marketing Website uses Google Analytics cookies to understand how visitors use it. You can block or delete cookies through your browser settings, or opt out of Google Analytics using Google's browser add-on. The Platform uses only the cookies needed to keep you signed in.
(d)We generally don't collect Sensitive Information, but when we do, we will comply with the preceding paragraph.
(e)Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party. In cases like this, we will take steps to make you aware of the information that was provided by a third party.
(f)We only share Personal Information with service providers who need it to help us run the Website and Platform. We choose providers whose terms require them to protect the information and use it only to provide their services to us. Our current providers are listed in clause 7.
Clause 4
Purpose of Collection
(a)We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about developments in our business.
(b)We customarily only disclose Personal Information to our service providers who assist us in operating the Website. Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties.
(c)We engage third-party service providers for cloud hosting, network and security services, email notifications, AI processing (only where NexIQ is used) and website analytics. Each is listed in clause 7. Their terms do not permit them to use your Personal Information for their own purposes.
(d)We will only send you direct marketing material if you have expressly consented to receive it, including product updates, promotional offers, industry insights, and webinar invitations. You may withdraw your consent at any time by using the unsubscribe mechanism in our communications or by contacting us directly, and we will process your request within 5 business days.
Clause 5
Security, Access and Correction
(a)We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. When a customer's subscription ends, the customer has 90 days to export its data. After that period, or once the customer confirms its export is complete (whichever is earlier), we delete the data from our live systems within 30 days. Copies in our backups are deleted automatically as those backups expire, usually within 7 days, and we do not restore or use them in the meantime. We may keep information for longer only where the law, a legal hold or a court order requires it. Our own business records, such as invoices, are kept for as long as tax law requires. When we no longer require your Personal Information we will take reasonable steps to destroy, anonymise or de-identify it.
(b)For the purposes of this clause, 'anonymise' means the removal of all identifiers so that the information cannot reasonably be linked to an individual, and 'de-identify' means the removal of direct identifiers while retaining statistical utility for business analysis purposes.
(c)
The Australian Privacy Principles:
(i)permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and
(ii)allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).
(d)Where you would like to obtain such access, please contact us in writing on the contact details set out at the bottom of this privacy policy.
(e)We will respond to your data access or correction request within 30 days of receipt, and usually sooner. Verified corrections will be made as soon as practicable. We may request reasonable identification verification to protect your account security before processing your request.
(f)If we become aware of an eligible data breach involving your Personal Information, we will notify you as soon as practicable via email to your registered account address. Where the information belongs to one of our customers, we will notify that customer within 72 hours of becoming aware of the breach, as set out in our agreement with them, so that they can notify the individuals affected. Notification will include the nature of the breach, types of information affected, steps we are taking to respond, and recommended protective actions. We will simultaneously notify the Office of the Australian Information Commissioner where required by law.
(g)We will provide a customer with an export of its operational data in CSV or another commonly used format. To request one, contact us in writing and we will provide it within 5 business days. Exports include production records, quality metrics, maintenance logs, and user activity data. You may also request earlier deletion of your account and operational data by providing written confirmation to ensure account security.
Clause 6
Complaint Procedure
If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us on the contact details set out at the bottom of this policy. All complaints will be considered by Ricky Aston and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner or, if you are in New Zealand, the Office of the Privacy Commissioner.
Clause 7
Overseas Transfer
(a)The Nexshift platform, including its database, uploaded files and the servers that receive data from connected machines, is hosted in Sydney, Australia, using DigitalOcean. Personal Information held on the platform is stored in Australia.
(b)
Some of the service providers we use are located overseas, and limited Personal Information may be disclosed to them or processed by them outside Australia:
(i)email notifications sent by the Platform are delivered through SMTP2GO, a New Zealand company, using its data centre in Sydney, Australia. A notification contains the recipient's name and email address and a summary of the item it relates to, such as the title, severity, site, location and reporter of an incident, or a product code and batch number. The full record is only available after signing in;
(ii)if your organisation turns on the optional NexIQ AI Insights feature, your question and the operational data needed to answer it are sent to Anthropic for processing in the United States. Anthropic's commercial terms do not permit it to train its models on that data, and NexIQ can be switched off at any time;
(iii)traffic to our Website and Platform passes through Cloudflare's global network, which provides DNS, content delivery and security services. Data passes through in transit only and is not stored there; and
(iv)our marketing Website uses Google Analytics, provided by Google, which may process visitor data in the United States. Google Analytics does not run inside the Platform.
(c)Before disclosing Personal Information overseas, we take reasonable steps to ensure the recipient handles it in a way that is consistent with the Australian Privacy Principles, including by choosing providers whose terms protect the information. NexIQ is off unless your organisation chooses to turn it on.
Clause 8
How to Contact Us About Privacy
If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us at: [email protected]