Privacy Policy

ExchangeSpeed Pty Ltd (“ExchangeSpeed”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and protect information about you when you visit our website at exchangespeed.com.au, contact us by email, submit a brief, or otherwise interact with us (collectively, the “Services”). It is designed to comply with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Information we collect

Information you provide

When you submit a brief, send us an email or otherwise contact us, you may provide us with personal information including your name, organisation, email address, telephone number, role, the industry you operate in, and any other information you choose to share with us in your message.

Information collected automatically

When you visit our website, our servers and analytics providers may automatically collect technical information, including your IP address, approximate location, browser type and version, device type, operating system, referring website, the pages you view on our site, and the time and duration of your visit.

Cookies and similar technologies

Our website may use a small number of cookies and similar technologies to operate correctly, remember preferences, and understand how visitors use the site. You can control cookies through your browser settings; disabling some cookies may affect parts of the Services.

2. How we use your information

We use the personal information we collect to:

• respond to your enquiries and engage with you about potential work;
• provide, maintain and improve the Services;
• communicate with you about ExchangeSpeed and its work, where you have opted in or where we are otherwise lawfully permitted to do so;
• comply with legal, regulatory and contractual obligations;
• detect, prevent and address fraud, abuse or technical issues; and
• conduct internal business operations and analysis.

Where the GDPR applies, we rely on the following lawful bases for processing: your consent; performance of a contract with you; our legitimate interests (such as understanding how our website is used and growing our business); and compliance with legal obligations.

3. How we share information

We do not sell your personal information. We may share your personal information with:

• Service providers — trusted third parties who perform services on our behalf, such as hosting, analytics, email delivery and customer-relationship management, under written agreements that require them to protect your information.
• Professional advisers — lawyers, accountants and similar advisers, where reasonably necessary.
• Legal and regulatory bodies — where required by law or where we have a good-faith belief that disclosure is necessary to comply with legal process, protect rights, or address fraud or security issues.
• Successors in interest — if we are involved in a merger, acquisition or sale of all or part of our business, your information may be transferred as part of that transaction.

4. International transfers

ExchangeSpeed is based in Australia. If you are located outside Australia, please be aware that information we collect may be transferred to, stored and processed in Australia or in other countries where our service providers operate. Where required by law, we put in place appropriate safeguards (such as standard contractual clauses) for such transfers.

5. Data retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal, accounting or reporting obligations, or to enforce our agreements. When personal information is no longer required, we will securely delete or de-identify it.

6. Your rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• the right to access the personal information we hold about you;
• the right to request correction of inaccurate or incomplete information;
• the right to request deletion of your personal information;
• the right to object to or restrict certain processing;
• the right to data portability;
• the right to withdraw consent where processing is based on consent; and
• the right to lodge a complaint with a supervisory authority, such as the Office of the Australian Information Commissioner (OAIC) or, in the EU, your local data-protection authority.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding.

7. Security

We take reasonable technical and organisational steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee the absolute security of information transmitted to or stored by us.

8. Children’s privacy

Our Services are directed to operators and businesses, not children. We do not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

9. Third-party links

Our website may contain links to third-party websites that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective” date at the top of this policy indicates when it was last revised. Material changes will be notified through our website or by other appropriate means. Continued use of the Services after such changes constitutes acceptance of the updated policy.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: