Privacy Policy

Who we are

Revex Solutions Pty Ltd (ABN 36 141 662 884) and CommCentral Pty Ltd (ABN 25 117 176 913), together Revex Group, we or us, provide revenue and billing software and outsourced administration to Australian financial services licensees. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It covers our website, our products and our services.

Two kinds of personal information

We handle personal information in two ways, and the difference matters.

Information about you. If you visit our website, contact us, use one of our products as a licensed user, apply for a job, or work for one of our clients or suppliers, we collect information about you and we are responsible for it under the Privacy Act.

Information our clients give us to process. Our clients send us information about their own advisers, staff and customers so we can provide our services. For that information our client is responsible under the Privacy Act, and we act on its instructions. If you are a customer or adviser of one of our clients and want to access or correct your information, contact the client first. We will help them respond.

What we collect

• Contact and identity details: name, job title, organisation, address, phone and email.
• Account details for our products: username, role and activity in the product.
• Payment details where you pay us directly, handled by our payment providers.
• Recruitment details: your application, résumé, education and work history.
• Website and device details: IP address, browser, operating system and pages visited. See Cookies below.
• The information in the files and records our clients send us to process.

We collect most of this directly from you or your organisation. We also receive information from our clients, from our service providers, and from public sources such as professional networks.

Why we use it

• To provide, support and improve our products and services.
• To manage our relationship with you or your organisation, including invoices and notices.
• To verify identity and keep our systems secure.
• To respond to enquiries, requests and complaints.
• To recruit.
• To meet our legal obligations, including record-keeping and requests from regulators.
• To tell you about our products and services, where you have agreed to hear from us.

We keep personal information only as long as these purposes and the law require. Business records are kept for seven years.

Who we share it with

• The companies in Revex Group.
• Our personnel and contractors who need it to do their work.
• The service providers who host our systems, process payments and support our business.
• Regulators, courts and law enforcement, where the law requires or permits.
• Business partners for their own marketing, only with your express consent.

We do not sell personal information.

Where it goes

Data we hold for our clients in the REVEX platform, including backups, is stored in Australia. Some of the systems we use to run our business are hosted overseas, including in the United States. Some of our team work offshore and reach our Australian systems through secure remote desktops hosted in Australia, so the data stays here. Where information does go overseas, we take reasonable steps to make sure it is protected to Australian standards.

Our use of artificial intelligence

We may use AI tools to help us deliver and improve our services. Where we use AI on personal information, we use only enterprise tools that operate within our own secured environment and are contractually bound not to use your information to train their models and not to use it for any purpose other than providing our services. We do not put personal information into public or consumer AI tools.

We do not use automated processes, including AI, to make decisions that have a legal or similarly significant effect on you.

How we protect it

We run an information security management system aligned to ISO/IEC 27001. Data is encrypted in transit and at rest, access is limited to the people who need it and is logged, and our staff are trained in security and privacy. No system is completely secure, and you are responsible for keeping your own passwords and devices safe.

If something goes wrong

If we become aware of a data breach that is likely to cause serious harm, we will contain it, assess it, and notify the Office of the Australian Information Commissioner and the people affected as the Notifiable Data Breaches scheme requires. We tell affected clients promptly so they can meet their own obligations.

Cookies

Our website uses a small number of cookies.

• Essential cookies, set by the website software, keep the site working and secure.
• Analytics cookies from Google Analytics tell us how the site is used so we can improve it. They do not identify you to us by name.
• HubSpot cookies help us recognise a returning visitor and connect an enquiry you send through the site to our records.

You can block or delete cookies in your browser settings; the site may not work as well if you do. Google offers an opt-out for its analytics at tools.google.com/dlpage/gaoptout.

Marketing

We may send you information about our products and services if you have asked for it or have a relationship with us. Every message includes a way to opt out, or you can contact us. We do not pass your details to other organisations for their marketing unless you have expressly agreed.

Access and correction

You can ask to see or correct the personal information we hold about you. Write to the Privacy Officer using the details below and we will respond within 30 days. Requests are free, though we may charge a reasonable cost for supplying copies. If we refuse a request we will tell you why and how to complain.

Complaints

If you have a concern about how we have handled your information, contact the Privacy Officer. We will acknowledge your complaint and aim to resolve it within 30 days. If you have not heard from us within five business days, call 03 9005 4998. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, on 1300 363 992, or at enquiries@oaic.gov.au.

Changes

We review this policy at least once a year and whenever our practices or the law change. The date at the top is the date of the current version.

Contact

Privacy Officer, Revex Group
Email: support@revex.com.au
Post: PO Box 4643, Melbourne VIC 3001
Phone: 03 9005 4998