Privacy Policy

Last Updated: [DD Month YYYY]

Business Entity: [COMPANY NAME PTY LTD]
ABN: [XX XXX XXX XXX]
Privacy Contact: privacy@matrixb2b.com

1. Introduction

[COMPANY NAME PTY LTD] ("we," "us," "our") is committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Matrix B2B website and products.

By using our website and products, you consent to the collection, use, and disclosure of your personal information as described in this policy.

2. Information We Collect

We collect the following types of information:

2.1 Personal Information You Provide

• Email Address: When you sign up for our waitlist or download our products, we collect your email address to send you download links and product updates.
• Preferences: Your preferences for receiving updates about our products (waitlist subscription, download notifications).

2.2 Information Automatically Collected

We automatically collect certain information when you visit our website through Google Analytics:

• Usage Data: Pages visited, time spent on pages, navigation paths, and interactions with website features
• Device Information: Browser type and version, operating system, device type (desktop, mobile, tablet)
• Technical Data: IP address, approximate geographic location (country/city level), referral source
• Event Tracking: Button clicks (download, waitlist signup), form submissions, and other interactions

2.3 Information We Do Not Collect

We do not collect:

• Credit card or payment information (payment processing is handled by third-party providers)
• Information from third parties or data brokers
• Sensitive personal information (health, race, religion, political affiliations, etc.)
• Information about children under 18

3. How We Collect Your Information

We collect personal information through:

• Direct Collection: When you voluntarily submit your email address through our waitlist signup form or download form
• Automatic Collection: Through Google Analytics when you visit and interact with our website

We do not collect personal information from third parties. All information is collected directly from you or automatically through your use of our website.

4. Purpose of Collection and Use

We collect and use your personal information for the following purposes:

4.1 Primary Purposes

• Product Delivery: To send you download links for the Quick Order Matrix and other products via email using Resend (email delivery service)
• Email Verification: To verify your email address before providing download access using time-limited verification links
• Waitlist Notifications: To notify you when the Matrix B2B Premium Theme launches, if you've joined our waitlist

4.2 Secondary Purposes

• Website Analytics: To understand how visitors use our website and improve user experience through Google Analytics
• Product Improvement: To analyze which features are most popular and guide product development
• Technical Support: To respond to inquiries and provide customer support

4.3 What We Don't Do

We do not:

• Send unsolicited marketing emails (you must opt in via waitlist or download)
• Sell or rent your personal information to third parties
• Use your information for purposes other than those described in this policy
• Send promotional emails from third parties

5. Disclosure of Personal Information

We do not sell, trade, or rent your personal information to third parties. We may disclose your information to:

5.1 Service Providers

We use the following third-party service providers to operate our website and deliver our products:

• Resend (USA): Email delivery service used to send download links and notifications
• AWS S3 (USA/Singapore): Secure file hosting for product downloads using presigned, time-limited URLs
• Google Analytics (USA): Website analytics and usage tracking
• Vercel (USA): Website hosting and database infrastructure (Vercel Postgres)

These service providers may have access to your personal information only to perform services on our behalf and are obligated to protect your information.

5.2 Legal Obligations

We may disclose your personal information if required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Requests from law enforcement or government agencies
• Compliance with applicable laws and regulations

6. Overseas Disclosure of Personal Information

Your personal information may be disclosed to overseas recipients located in:

• United States: Resend (email), AWS S3 (file hosting), Google Analytics (analytics), Vercel (hosting)
• Singapore: AWS S3 may store data in Singapore region

When we disclose your information overseas, we take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles. However, you acknowledge that overseas recipients may not be subject to the Privacy Act 1988 (Cth) and you may not be able to seek redress under the Privacy Act.

We select service providers with strong privacy and security practices that are comparable to Australian standards.

7. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorized access, modification, or disclosure. Our security measures include:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Email Verification: JWT (JSON Web Token) based email verification with time-limited tokens to prevent unauthorized access
• Secure Database: Personal information is stored in Vercel Postgres with industry-standard security controls
• Time-Limited Downloads: Download links use presigned AWS S3 URLs that expire after a set period
• No Payment Data Storage: We do not store credit card information (future payments will be processed through secure third-party providers)

While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Email Addresses: Retained until you request deletion or unsubscribe from all communications
• Download Records: Retained indefinitely to prevent abuse and provide re-download access
• Analytics Data: Retained according to Google Analytics' data retention settings (typically 26 months)
• Verification Tokens: Automatically expire and are deleted after use or expiration (typically 24-48 hours)

When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it.

9. Access and Correction of Personal Information

Under the Australian Privacy Principles, you have the right to:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate, incomplete, or out-of-date information
• Deletion: Request deletion of your personal information (subject to legal obligations)

How to Request Access or Correction

To access, correct, or delete your personal information:

1. Email us at privacy@matrixb2b.com
2. Include "Privacy Request" in the subject line
3. Provide sufficient details to identify you (email address used for signup)
4. Specify what information you wish to access, correct, or delete

We will respond to your request within 30 days. There is no fee for making a request, but we may charge a reasonable fee to cover administrative costs for providing access to large amounts of information.

In some circumstances, we may refuse your request (e.g., if providing access would unreasonably impact another person's privacy). If we refuse, we will provide you with written reasons and inform you of your right to complain.

10. Complaints and Concerns

If you have concerns about how we handle your personal information or believe we have breached the Australian Privacy Principles, you can lodge a complaint with us.

Internal Complaint Process

1. Email your complaint to privacy@matrixb2b.com
2. Include "Privacy Complaint" in the subject line
3. Provide details of your concern and how you believe we have breached the APPs
4. We will acknowledge your complaint within 7 days
5. We will investigate and respond within 30 days

External Complaint Process

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au
• Mail: GPO Box 5218, Sydney NSW 2001

11. Cookies and Tracking Technologies

We use Google Analytics, which sets cookies on your device to track website usage.

Cookies We Use

• Google Analytics Cookies: _ga, _gat, _gid - Used to distinguish users, throttle request rate, and track sessions

Purpose of Cookies

• Understand how visitors navigate our website
• Identify popular features and content
• Measure website performance and user engagement
• Improve user experience based on analytics data

How to Opt Out

You can control cookies through your browser settings:

• Most browsers allow you to refuse or delete cookies
• You can install the Google Analytics Opt-out Browser Add-on
• Disabling cookies may affect website functionality

For more information about Google Analytics' privacy practices, visit Google's Privacy Policy.

12. Children's Privacy

Our website and products are not directed at children under 18 years of age. We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as soon as possible.

If you are a parent or guardian and believe we have collected information about your child, please contact us at privacy@matrixb2b.com.

13. Third-Party Websites

Our website may contain links to third-party websites (e.g., Shopify, GitHub, Google). This Privacy Policy applies only to our website.

We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We may notify you via email if you are subscribed to our waitlist or have downloaded our products
• Continued use of our website after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Your Consent

By using our website and products, you consent to:

• The collection, use, and disclosure of your personal information as described in this policy
• The overseas disclosure of your information to service providers in the USA and Singapore
• The use of cookies and tracking technologies by Google Analytics

You can withdraw your consent at any time by:

• Emailing us at privacy@matrixb2b.com to request deletion of your information
• Disabling cookies in your browser settings
• Ceasing to use our website and products

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Privacy Officer
Email: privacy@matrixb2b.com
Business Name: [COMPANY NAME PTY LTD]
ABN: [XX XXX XXX XXX]
Address: [Street Address, City, State, Postcode, Australia]

We are committed to resolving privacy concerns promptly and fairly.

17. Interpretation

This Privacy Policy should be read in conjunction with our Terms and Conditions. In the event of any inconsistency, this Privacy Policy prevails on privacy-related matters.