Privacy Policy
Effective Date: 12 January 2025
At candorivexi, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our budget contingency planning services. We're committed to transparency and compliance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
Information We Collect
Personal Information
When you interact with our services, we collect information that helps us provide better financial planning support. The type of data we gather depends on how you engage with us.
- Contact details including your name, email address, phone number, and postal address
- Financial information such as income details, existing savings, and budget parameters you provide for planning purposes
- Account credentials and authentication data when you create a user profile
- Communication records including emails, chat logs, and support ticket history
- Device information like IP addresses, browser types, and operating systems
- Usage data showing how you navigate our website and which features you access most frequently
| Data Category | Collection Method | Primary Purpose |
|---|---|---|
| Identity Information | Direct submission via forms | Account creation and service personalization |
| Financial Details | User input in planning tools | Budget analysis and contingency recommendations |
| Technical Data | Automated collection via cookies | Website functionality and security monitoring |
| Communication Records | Email and support interactions | Customer service and query resolution |
| Behavioral Analytics | Website interaction tracking | Service improvement and user experience optimization |
Information We Don't Collect
We don't collect sensitive information unless absolutely necessary for our services. This includes racial or ethnic origin, political opinions, religious beliefs, or health information. If we ever need such data, we'll obtain your explicit consent first.
How We Use Your Information
Your data serves specific purposes that directly relate to delivering quality financial planning services. We don't use your information for unrelated activities without your permission.
Service Delivery
The primary use of your information is providing budget contingency planning services. This means analyzing your financial situation, generating personalized recommendations, and maintaining your account access. We process your data to create planning models, track your progress, and adjust strategies based on your changing circumstances.
Communication and Support
We use your contact details to respond to inquiries, send service updates, and provide technical assistance. This includes notifications about your account, changes to our services, and educational content related to financial planning. You can control which communications you receive through your account preferences.
Improvement and Development
Aggregated and anonymized data helps us understand how people use our services. We analyze patterns to identify features that work well and areas needing improvement. This might involve A/B testing different interfaces or measuring how certain planning tools perform across various user groups.
Marketing Communications
We'll only send promotional materials if you've opted in. Even then, every message includes a clear unsubscribe option. We respect your inbox and won't bombard you with irrelevant content.
Information Sharing and Disclosure
We don't sell your personal information. Period. However, running a modern web service means working with trusted partners who help us deliver features you expect.
Service Providers
Third-party vendors assist with hosting, payment processing, analytics, and customer support. These companies access only the data necessary for their specific function and are contractually obligated to protect your information. Examples include cloud storage providers, email delivery services, and payment gateways.
Legal Requirements
Sometimes we're legally required to disclose information. This happens when responding to court orders, government investigations, or protecting against fraud. We'll notify you about such requests unless prohibited by law.
Business Transfers
If candorivexi is acquired or merged with another company, your information may transfer as part of that transaction. You'd be notified beforehand, and the new entity would need to honor this privacy policy unless you consent to changes.
| Third Party Type | Data Shared | Protection Measures |
|---|---|---|
| Payment Processors | Transaction details and billing information | PCI-DSS compliance and encrypted transmission |
| Cloud Hosting Services | Account data and application information | Data encryption at rest and in transit |
| Analytics Platforms | Anonymized usage patterns | IP anonymization and data aggregation |
| Email Service Providers | Contact information and communication preferences | Secure API connections and access controls |
| Customer Support Tools | Support tickets and conversation history | Role-based access and audit logging |
Data Security Measures
Protecting your information isn't just about technology—it's about processes, training, and constant vigilance. We've implemented multiple layers of security to safeguard your data.
Technical Safeguards
- 256-bit SSL encryption for all data transmitted between your browser and our servers
- Database encryption ensuring stored information remains protected even if physical security is compromised
- Regular security audits conducted by independent third-party experts
- Automated backup systems with geographically distributed storage locations
- Intrusion detection systems monitoring for unauthorized access attempts
- Multi-factor authentication options for account access
Organizational Practices
Our team receives regular training on data protection principles and handling sensitive information. Access to personal data is restricted based on job roles, and we maintain detailed logs of who accesses what information and when. Background checks are conducted for employees with data access privileges.
Incident Response
Despite best efforts, no system is completely immune to breaches. If a security incident affects your data, we'll notify you within 72 hours as required by Australian privacy law. Our response plan includes immediate containment measures, forensic analysis, and remediation steps to prevent recurrence.
Your Rights and Choices
Australian privacy law grants you significant control over your personal information. Here's what you can do and how to exercise these rights.
Access and Correction
You can request a copy of all personal information we hold about you. We'll provide this within 30 days, free of charge. If you spot inaccuracies, let us know and we'll correct them promptly. Access your account settings to update most information directly.
Data Portability
Want to take your data elsewhere? You can download your information in commonly used formats like CSV or JSON. This includes your financial planning data, account history, and any documents you've uploaded. The export feature is available in your account dashboard.
Deletion Requests
You have the right to request deletion of your personal information. We'll comply unless we're required to retain certain data for legal or regulatory reasons. After deletion, some information may persist in backup systems for up to 90 days before permanent removal.
Marketing Opt-Out
Unsubscribe from promotional emails by clicking the link in any message or adjusting preferences in your account. You'll still receive essential service notifications like security alerts and account updates.
| Right | How to Exercise | Response Time |
|---|---|---|
| Access Personal Data | Submit request via email or account portal | Within 30 days of verified request |
| Correct Inaccurate Information | Update directly in account or contact support | Immediate for self-service; 5 business days via support |
| Request Data Deletion | Email privacy request to designated contact | 30 days for completion, 90 days for backup removal |
| Export Your Data | Use account dashboard export feature | Immediate generation, delivered within 24 hours |
| Withdraw Consent | Manage preferences in account settings | Takes effect within 48 hours |
Cookies and Tracking Technologies
Our website uses cookies to function properly and provide a better experience. You have control over how these technologies are used.
Types of Cookies We Use
Essential Cookies: These keep the site working. They handle things like session management, security features, and basic navigation. You can't turn these off without breaking core functionality.
Performance Cookies: These help us understand which pages are popular, where users spend time, and which features get ignored. The data is aggregated and doesn't identify individuals.
Functional Cookies: These remember your preferences like language settings, display options, and customized views. They make repeat visits more convenient.
Managing Cookie Preferences
Most browsers let you block or delete cookies through their settings. Keep in mind that disabling certain cookies may limit functionality. Our cookie banner appears on your first visit, allowing you to accept or customize which types you'll allow.
Data Retention Periods
We don't keep your information indefinitely. Retention periods depend on the type of data and legal requirements.
- Account information: Retained while your account is active, plus 7 years after closure for compliance purposes
- Financial planning data: Kept for the duration of service use, plus 5 years as required by financial record-keeping regulations
- Communication records: Maintained for 3 years to support service quality and dispute resolution
- Website analytics: Aggregated data retained for 2 years; individual session data deleted after 14 months
- Marketing consent records: Kept until you withdraw consent, plus 3 years for proof of compliance
- Payment transaction details: Retained for 7 years per Australian tax and accounting requirements
When data reaches the end of its retention period, we securely delete or anonymize it. Anonymized data may be retained longer for statistical and research purposes, but it can't be linked back to you.
International Data Transfers
Your information is primarily stored on servers located in Australia. However, some service providers operate internationally, which may involve transferring data overseas.
Transfer Safeguards
When data moves outside Australia, we ensure adequate protection through standard contractual clauses, Privacy Shield frameworks (where applicable), or verified certifications. Countries we may transfer data to include the United States (for cloud hosting), Singapore (for backup storage), and the European Union (for analytics services).
You have the right to request information about which countries receive your data and the safeguards in place. We'll provide details within 30 days of your request.
Children's Privacy
Our services aren't designed for individuals under 18. We don't knowingly collect information from minors. If you're a parent who discovers your child has provided us with personal information, contact us immediately and we'll delete it.
Budget contingency planning typically involves employment income, credit arrangements, and financial decisions that require legal capacity. For these reasons, our terms of service require users to be at least 18 years old.
Changes to This Privacy Policy
We review and update this policy periodically to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated through email notification and a prominent notice on our website at least 30 days before taking effect.
The effective date at the top of this page shows when the current version was published. We maintain an archive of previous versions available upon request if you want to review what changed over time.
Continuing to use our services after a policy update means you accept the changes. If you disagree with modifications, you can close your account before they take effect.
Complaints and Dispute Resolution
If you believe we've mishandled your personal information, we want to hear about it. Our complaints process ensures concerns are addressed fairly and promptly.
Internal Process
Submit complaints to our privacy officer using the contact details below. We'll acknowledge receipt within 3 business days and investigate thoroughly. Most complaints are resolved within 30 days. You'll receive a written response explaining our findings and any corrective actions taken.
External Options
If you're not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC). They provide a free complaint resolution service and can investigate potential breaches of the Privacy Act. Visit www.oaic.gov.au for more information.
Privacy Contact Information
Privacy Officer, candorivexi
92 Magellan St, Lismore NSW 2480, Australia
Phone: +61 2 6652 5896
Email: support@candorivexi.com
We aim to respond to all privacy inquiries within 5 business days.