Privacy Policy
1. Who We Are
Digital Experience Labs Pty Ltd (ABN 17 637 627 457) ("DXLabs", "we", "us", "our") operates the website dxlabs.com.au. DXLabs is part of the Vection Technologies group (ASX: VR1).
Our registered address is: Level 5, 20 Bond Street, Sydney NSW 2000, Australia.
For all privacy enquiries, contact us at: privacy@dxlabs.com.au
2. What Personal Information We Collect
2.1 Information You Provide Directly
We collect personal information you choose to provide when you:
- Submit a contact or enquiry form — name, business email address, company name, phone number (optional), and your message
- Subscribe to our newsletter or content updates — name and email address
- Request a meeting, demo, or consultation — name, business email address, company name, and role
- Download a gated resource or content piece — name, business email address, and company name
You are not required to provide personal information to browse our website. Where fields are marked optional, there is no consequence for leaving them blank.
2.2 Information Collected Automatically
When you visit our website, certain information is collected automatically:
- Device and browser information (browser type and version, operating system, device type)
- IP address (anonymised in Google Analytics where technically possible)
- Pages visited, time spent on each page, scroll depth, and interactions
- Referring website or search query that brought you to our site
- Cookie identifiers and session data (see Section 6 and our Cookie Policy)
This information does not, on its own, identify you personally. We use it in aggregated, anonymised form to understand how our website is used and to improve it.
3. How We Use Your Information
| Purpose | Detail | Legal basis |
|---|---|---|
| Responding to enquiries | To reply to contact form submissions, demo requests, and general questions you send us. | Contract performance / Legitimate interests |
| CRM and relationship management | To record and manage our business relationship with you using Pipedrive. This includes logging interactions and follow-ups. | Legitimate interests |
| Sending requested content | To deliver resources, documents, or information you have requested. | Contract performance |
| Newsletter and marketing emails | To send updates, thought leadership content, and information about DXLabs services, where you have subscribed. You can unsubscribe at any time. | Consent |
| Website analytics and improvement | To understand how visitors use our website so we can improve it (via Google Analytics 4). Analytics data is aggregated and anonymised where possible. | Legitimate interests (with consent for analytics cookies) |
| Advertising and retargeting | To measure the effectiveness of our LinkedIn advertising campaigns and, where you have consented, to show relevant DXLabs content on LinkedIn. | Consent |
| Legal and compliance obligations | To comply with applicable Australian laws, respond to lawful requests, and protect our legal rights. | Legal obligation |
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
4. Who We Share Your Information With
We share your personal information only with service providers who assist us in operating our business. All service providers are contractually required to handle your data in accordance with applicable privacy law.
| Service | Provider | Purpose | Data Shared | Location |
|---|---|---|---|---|
| Website Hosting | Vercel Inc. | Hosting and delivering the website. | Server logs (IP address, browser user agent, page requests) | USA |
| Analytics | Google LLC (Google Analytics 4) | Measuring website traffic and content performance. IP addresses are anonymised. | Anonymised browsing data, device/browser info, IP (anonymised) | USA |
| Tag Management | Google LLC (Google Tag Manager) | Managing and deploying tracking scripts on the website. | No personal data directly; orchestrates other scripts | USA |
| CRM | Pipedrive OÜ | Storing and managing enquiries, contacts, and business relationships. | Name, email address, company name, form data | EU/USA |
| Email Marketing | Mailchimp (Intuit Inc.) | Sending newsletters, content updates, and marketing emails to subscribers. | Name, email address, subscription preferences | USA |
| Advertising | LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag) | Measuring LinkedIn advertising effectiveness and enabling retargeting (with consent only). | Anonymised browsing behaviour, LinkedIn member data (where matched) | EU/USA |
We may also share your information with the Vection Technologies group of companies where necessary for the operation of our business or required by law.
4.1 Overseas Disclosure
As shown in the table above, several of our service providers process data outside Australia, primarily in the United States and the European Union. By submitting your personal information through our website, you acknowledge that it may be transferred to and stored in these overseas locations.
When transferring data overseas, we take reasonable steps to ensure the overseas recipient handles personal information consistently with the Australian Privacy Principles.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Contact form submissions and CRM records | Duration of the business relationship plus 7 years |
| Newsletter and email subscribers | Until you unsubscribe. Records of unsubscribed contacts may be deleted after 3 years of inactivity. |
| Gated content / resource download data | Duration of business relationship plus 3 years, or until unsubscribe |
| Website analytics data | 14 months (Google Analytics 4 default retention setting) |
| Server logs (Vercel) | 30 days |
| Cookie consent preferences | 12 months from the date consent is recorded |
When personal information is no longer required, we will take reasonable steps to destroy it or ensure it is de-identified.
6. Cookies and Tracking Technologies
We use Google Tag Manager to manage the deployment of cookies and tracking scripts. No analytics or marketing cookies are deployed until you provide consent via our cookie banner.
For full details, please see our Cookie Policy.
7. Your Rights
7.1 Australian Privacy Act Rights
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Request correction of personal information that is inaccurate, out-of-date, incomplete, or misleading
- Request deletion of your personal information (subject to legal obligations requiring us to retain certain records)
- Opt out of direct marketing communications at any time
- Make a complaint about how we have handled your personal information
7.2 International Visitors
If you are visiting from outside Australia, your country may have its own privacy or data protection laws. To the extent those laws apply, we will handle your information consistently with our obligations under applicable law. Contact us at privacy@dxlabs.com.au for any privacy enquiry.
7.3 How to Exercise Your Rights
Email us at privacy@dxlabs.com.au with your request. We will respond within 30 days. In some cases we may need to verify your identity before processing your request.
8. Data Security
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Our security measures include:
- HTTPS encryption across the entire website (TLS, enforced by Vercel)
- Secure hosting on Vercel's global edge network with enterprise-grade infrastructure
- Access controls on our CRM and internal systems, limiting access to authorised personnel only
- Use of reputable, security-audited third-party service providers with their own data protection commitments
No method of transmission over the internet is completely secure. In the event of a data breach likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme.
9. Children
Our website is a business-to-business platform and is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at privacy@dxlabs.com.au.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Where changes are material, we will make reasonable efforts to notify you.
11. Contact and Complaints
Privacy enquiries: privacy@dxlabs.com.au
Post: Digital Experience Labs Pty Ltd, Level 5, 20 Bond Street, Sydney NSW 2000
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au | 1300 363 992 | GPO Box 5218, Sydney NSW 2001