Privacy policy

XGY Systems Intelligence is a brand of XGY Pty Ltd (ABN 70 688 984 590). This policy explains how we handle personal information on this website and when you buy from us. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. XGY Tek’s group privacy policy covers our wider business; this page adds what is specific to buying from XGY SI.

What we collect

• When you buy: your name, email address, phone number (if given), billing and delivery address, the product you ordered, the amount paid and payment references from Stripe or PayPal.
• When you create an account or sign in: your name and email address. If you sign in with Google, Facebook or X, we receive only your name and confirmed email address from that service, never your password.
• When you contact us: what you send us by email and our replies.
• When you browse: standard server logs kept by our hosting provider, such as IP address, browser type and pages requested. This site does not use advertising or analytics cookies.

We never receive or store your full card number. Card and PayPal details are entered on Stripe’s or PayPal’s own pages.

How we use it

• to process, deliver and support your order, including order confirmation and dispatch emails;
• to handle returns, refunds, warranty and consumer guarantee claims;
• to answer your questions;
• to prevent fraud and keep our systems secure;
• to meet our tax, accounting and other legal obligations.

We only send marketing emails if you have agreed to receive them, and you can unsubscribe at any time.

Who we share it with

We do not sell personal information. We share it only with service providers who help us run the shop:

• Stripe and PayPal, to take payments;
• Vercel, which hosts this website;
• Upstash, which stores our order records;
• Resend, which sends our order emails and sign-in codes;
• Google, which suggests addresses as you type at checkout (the text you type is sent to Google Places);
• Google, Meta (Facebook) and X, only if you choose to sign in with them;
• couriers, to deliver your order;
• our professional advisers, and government bodies where the law requires it.

Overseas storage

Some of these providers store or process information outside Australia, including in the United States. We choose providers with appropriate security and take reasonable steps to make sure they handle information in line with the Australian Privacy Principles.

How long we keep it

We keep order records for as long as we need them for the purposes above, and at least as long as Australian tax law requires (generally 5 years). After that we delete or de-identify them.

Security

We use access controls, encrypted connections and reputable providers to protect your information. If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.

Deleting your account and data

You can ask us to delete your XGY SI account and the personal information linked to it, including any details we received when you signed in with Google, Facebook or X. Email info@xgytek.com from the address on your account with the subject “Delete my data”. We will confirm within 30 days.

We keep order and invoice records for as long as Australian tax law requires, then delete them. To stop a social sign-in from sharing details with us, you can also remove XGY SI from the connected apps in your Google, Facebook or X account settings.

Access, correction and complaints

You can ask to see or correct the personal information we hold about you, or make a privacy complaint, by emailing info@xgytek.com. We will respond within 30 days. If you are not satisfied with our response, you can contact the OAIC.

Contact

Privacy Officer, XGY Pty Ltd
Level 1, 115 Grenfell St, Adelaide SA 5000, Australia
info@xgytek.com