Stratex Online, operated by IQX Business Solutions (“IQX”, “we”, “our” or “us”), respects privacy and is committed to protecting personal information in accordance with applicable privacy and data protection laws.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you interact with the Stratex Online website, use the Stratex Online SaaS solution, or receive related services from us.

By accessing or using the Stratex Online website or Stratex Online services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of this Policy

This Privacy Policy applies to personal information collected or processed through:

• the Stratex Online website;
• electronic communications with Stratex Online or IQX, including email and online forms;
• the Stratex Online SaaS solution;
• support, implementation, consulting and remote access services provided by IQX in relation to Stratex Online, where authorised by the customer; and
• related sales, marketing, administration, security and customer support activities.

This Policy does not apply to third-party websites, applications, platforms or services that are not operated or controlled by IQX, even where they are linked from the Stratex Online website or service.

Where IQX processes personal information on behalf of a customer under a customer agreement or Data Processing Agreement, the customer is usually the controller of that personal information and IQX acts as processor. In that case, IQX processes the personal information in accordance with the customer’s documented instructions and the applicable agreement.

For customer Stratex Online environments, the customer is normally responsible for determining which of its users are authorised to access the service and what roles or permissions those users receive.

2. Personal Information We Collect

The personal information we collect depends on your relationship with Stratex Online, IQX and the services you use.

2.1 Website and enquiry information

When you visit the Stratex Online website or contact us, we may collect:

• name;
• business contact details, including email address and telephone number;
• company or organisation name;
• job title or role;
• information you provide through website forms, enquiries, support requests or correspondence; and
• records of communications with us.

2.2 Stratex Online user, identity and access information

Stratex Online may support customer-managed authentication and authorisation, including single sign-on. In those cases, the customer controls which users are granted access to Stratex Online through its own identity provider, directory, security groups, role mappings or similar access configuration.

Depending on the customer configuration, IQX may collect or process information such as:

• user name, first name and last name;
• work email address;
• company or organisation name;
• job title, role or description;
• company address, including country, where applicable;
• contact information, including email address and telephone number;
• role, user profile, group or access mapping information provided by the customer’s identity provider or configured by the customer;
• account alias, user ID, single sign-on identifier or other authentication identifier;
• Stratex Online administration activity, including customer-configured user, role, group or access changes;
• usage logs, access logs, audit logs and security logs;
• IP address, browser, device and system information;
• IT information required to provide access to systems and networks, such as IP addresses, log files and login information;
• metadata, such as usage information, activity logs, creator or author information, access records and download records; and
• information required to perform business transactions, capital planning, project portfolio management, approval, workflow, reporting or related activities within Stratex Online.

For some customer environments, the personal information processed by IQX may be limited to basic business user identity information, such as name and work email address, obtained through the customer’s single sign-on provider.

2.3 Support and remote access services

Where IQX provides implementation, support, maintenance or remote access services for Stratex Online, we may access information reasonably required to perform those services.

For customer production systems, IQX personnel are only able to access Stratex Online where access has been authorised and configured by the customer, such as by adding an IQX user to the customer’s identity provider, directory or security group with an appropriate role. IQX does not ordinarily provision customer users in customer production systems.

Access is limited to authorised personnel, for authorised purposes, and subject to confidentiality, security and access control requirements.

2.4 Automatically collected website information

When you use the Stratex Online website, we may automatically collect information such as:

• IP address;
• browser type and version;
• operating system;
• device information;
• pages visited;
• date and time of access;
• referring website or source;
• interaction and usage information; and
• information about your internet connection and the equipment you use to access the website.

We may collect this information using cookies, web beacons, analytics tools and similar technologies.

3. Cookies and Similar Technologies

The Stratex Online website may use cookies and similar technologies to operate the website, improve functionality, understand usage patterns, remember preferences, and support analytics and marketing activities.

A cookie is a small file placed on the hard drive of your computer. You can set your browser to refuse some or all cookies, or to alert you when cookies are being used. Some parts of our website may not function properly if cookies are disabled.

Pages of the Stratex Online website may also contain small electronic files known as web beacons, pixel tags or similar technologies that permit IQX, for example, to count users who have visited particular pages, understand website usage, record the popularity of certain website content, and verify system and server integrity.

Some content, analytics or functionality on our website may be provided by third parties. These third parties may use cookies or similar technologies according to their own privacy policies.

4. How We Use Personal Information

We use personal information for the following purposes:

• to provide, operate, maintain and improve the Stratex Online website, SaaS solution and related services;
• to present the Stratex Online website and its content to you;
• to provide information, products or services that you request from us;
• to operate user authentication, authorisation, role mapping and access control functionality configured by the customer;
• to process identity information received from customer-managed single sign-on or directory services;
• to provide customer-authorised support, implementation, consulting and maintenance services;
• to monitor, secure and protect our systems, customer environments and services;
• to maintain audit logs, security logs, access logs and operational records;
• to respond to enquiries and communicate with customers, users and prospects;
• to notify you about changes to the Stratex Online website, Stratex Online services, or related products and services;
• to provide information about Stratex Online and related IQX products, services, events or updates;
• to manage contracts, billing, administration and customer relationships;
• to carry out our obligations and enforce our rights arising from contracts entered into with customers or users;
• to comply with legal, regulatory and contractual obligations;
• to enforce our agreements and protect our rights; and
• for any other purpose disclosed at the time of collection or with your consent.

5. Legal Basis for Processing

Where GDPR or similar laws apply, we rely on one or more of the following legal bases:

• performance of a contract or taking steps before entering into a contract;
• compliance with a legal obligation;
• legitimate interests, including securing and operating Stratex Online, preventing misuse, maintaining audit and security logs, providing support, improving our products and services, managing customer and business relationships, and protecting IQX, our customers and users; and
• consent, where required by law or where we ask for consent.

Where we rely on consent, you may withdraw consent at any time, subject to applicable law and any processing that is still required on another lawful basis.

Some personal information is required to provide the Stratex Online website, respond to enquiries, deliver services, authenticate users, operate Stratex Online, provide support, or comply with contractual or legal obligations. If required information is not provided, we may not be able to provide the relevant website functionality, service, support or communication.

6. Disclosure of Personal Information

We may disclose personal information:

• to our personnel who need access for authorised business purposes;
• to our subsidiaries, affiliates, contractors, service providers and professional advisers who support our business;
• to cloud hosting and infrastructure providers, including Amazon Web Services;
• to providers of security, monitoring, analytics, communications, support and business administration services;
• to customers, where we process information on their behalf or provide services to them;
• to regulators, courts, law enforcement agencies or other authorities where required by law;
• in connection with a merger, acquisition, restructuring, divestiture, reorganisation, dissolution, sale of assets or similar corporate transaction;
• where necessary to protect the rights, property, security or safety of IQX, Stratex Online, our customers, users or others;
• to fulfil the purpose for which you provided the information;
• for any other purpose disclosed at the time the information is provided; and
• where you have consented or where disclosure is otherwise permitted by law.

We may also disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We require service providers who process personal information for us to use it only for authorised purposes and to apply appropriate confidentiality, security and data protection obligations.

7. Cloud Hosting, Regional Environments and International Transfers

IQX uses secure cloud infrastructure, including Amazon Web Services, to host and operate Stratex Online. IQX operates regional cloud environments, which may include Australia, the United States and Europe.

Customer personal information is hosted in the region agreed with the customer or otherwise configured for the relevant service. For EU/EEA customer environments, personal information is hosted in the EU/EEA unless otherwise agreed with the customer.

Customer identity and access configuration may remain within the customer’s own identity provider or directory service, with Stratex Online receiving only the attributes required to authenticate users, apply role mappings and operate the service.

Where personal information is accessed from, processed in, or transferred to a country outside the EU/EEA or another relevant jurisdiction, IQX applies appropriate safeguards as required by applicable data protection law. These safeguards may include contractual protections, Standard Contractual Clauses, access restrictions, encryption, security controls and other measures appropriate to the nature of the processing.

You may contact us to request further information about the safeguards used for international transfers where applicable.

For customer Stratex Online environments containing EU/EEA personal information, privileged access to systems containing personal information is restricted to authorised personnel on a need-to-know basis and protected by role-based access controls, multi-factor authentication, least privilege, logging, monitoring and periodic access review. Personnel outside the EU/EEA are not granted access to EU/EEA customer personal information unless access has been authorised by the customer or is otherwise covered by appropriate data transfer safeguards.

8. Security of Personal Information

IQX implements technical and organisational measures designed to protect personal information from accidental or unlawful destruction, loss, misuse, alteration, unauthorised disclosure or unauthorised access.

These measures may include, as appropriate:

• role-based access controls aligned to customer-configured roles and permissions;
• least privilege access;
• multi-factor authentication;
• encryption in transit and at rest;
• network and application security controls;
• monitoring, logging and audit trails;
• vulnerability management and security testing;
• change management controls;
• backup, continuity and disaster recovery processes;
• incident response procedures;
• personnel confidentiality obligations; and
• security awareness training.

Where you are given, or choose, a password or other access credential for Stratex Online or any related service, you are responsible for keeping that password or credential confidential. You should not share your password or access credentials with anyone.

No method of transmission or storage is completely secure. However, IQX takes reasonable and appropriate steps to protect personal information having regard to the nature of the information, the services provided, and the risks involved.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide Stratex Online, manage customer relationships, comply with legal obligations, resolve disputes, maintain security, enforce agreements and meet contractual requirements.

Where IQX processes customer personal information as a processor, retention and deletion are governed by the applicable customer agreement or Data Processing Agreement and, where applicable, the customer’s configuration of Stratex Online.

Website, marketing and business contact information is retained for as long as needed for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

10. Automated Decision-Making

IQX does not use personal information collected through Stratex Online to make automated decisions that produce legal effects or similarly significant effects for individuals. If this changes, we will provide additional information as required by applicable law.

11. Your Privacy Rights

Depending on where you are located and the laws that apply, you may have rights in relation to your personal information, including the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of personal information;
• request restriction of processing;
• object to processing;
• request data portability;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a privacy or data protection authority.

To exercise your rights, please contact us using the details in the Contact Us section below. We may need to verify your identity before responding to a request.

Where IQX processes personal information on behalf of a customer, we may refer your request to that customer or act on the customer’s instructions, as required by the applicable agreement and law.

12. Marketing Communications

We may use business contact information to send information about Stratex Online, IQX products, services, events or updates that may be relevant to you.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails, by replying to the relevant email where applicable, or by contacting us at sales@dev.stratexonline.com.

Opting out of marketing communications does not affect service, support, security, transactional or administrative communications.

13. Choices About Cookies and Promotional Communications

We aim to provide choices regarding the personal information you provide to us.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, some parts of the Stratex Online website may be inaccessible or may not function properly.

If you do not wish to have your contact information used to promote Stratex Online, IQX products or services, you may opt out by following the instructions provided at the point of collection, using the unsubscribe link in marketing emails, or contacting us at sales@dev.stratexonline.com.

14. Children

The Stratex Online website and services are not intended for children under 18 years of age.

No one under the age of 18 may provide any information to or through the Stratex Online website or services. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18 without appropriate consent, we will take reasonable steps to delete it.

If you believe we may have collected information from or about a child under 18, please contact us at sales@dev.stratexonline.com.

15. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify users by posting a notice on the Stratex Online website, updating the date of this Policy, sending an email to the primary email address specified in your account where appropriate, or using another appropriate method.

Your continued use of the Stratex Online website or services after a change to this Policy means that the updated Policy applies from the effective date, to the extent permitted by law.

You are responsible for periodically visiting the Stratex Online website and this Privacy Policy to check for any changes.

16. EU Representative

IQX has appointed Prighter Group, together with its local partners, as its representative for the European Union.

Individuals in the EU may contact IQX through Prighter to exercise privacy-related rights or to raise privacy-related enquiries.

Prighter contact portal: https://app.prighter.com/portal/16463269582

17. Contact Us

If you have questions about this Privacy Policy or how we handle personal information, please contact us at:

IQX Business Solutions Pty Ltd
ABN: 97 106 652 064
Level 1, 53 Walker Street
North Sydney NSW 2060
Australia

Email: sales@dev.stratexonline.com

For IQX corporate privacy matters, you may also contact: info@iqxbusiness.com

For security or support-related matters, customers may also use their agreed IQX or Stratex Online support channels