Colabi

Get Started

Colabi Privacy Policy

1. Introduction

This document sets out the privacy policy of Zenyx Pty Ltd, an Australian business with ABN 98 659 778 524 (referred to in this privacy policy as ‘we’, ‘us’, or ‘our’).

We take our privacy obligations seriously and have created this privacy policy to explain how we store, maintain, use, and disclose personal information in compliance with the Privacy Act 1988 and the General Data Protection Regulation (GDPR). By providing personal information (including sensitive information) to us, you consent to our storage, maintenance, use, and disclosure of personal information in accordance with this privacy policy.

We may change this privacy policy from time to time by posting an updated copy on our website and we encourage you to check our website regularly to ensure that you are aware of our most current privacy policy.

2. Types of Personal Information We Collect

The personal information we collect may include the following:

  • name;
  • mailing or street address;
  • email address;
  • social media information;
  • telephone number and other contact details;
  • age;
  • date of birth;
  • credit card or other payment information (processed securely through Stripe, as detailed below);
  • sensitive information as set out below;
  • information about your business or personal circumstances;
  • information in connection with client surveys, questionnaires, and promotions;
  • your device identity and type, I.P. address, geolocation information, page view statistics, advertising data, and standard web log information;
  • information about third parties; and
  • any other information provided by you to us via our website or our online presence, or otherwise required by us or provided by you.

3. How Personal Information is Collected

We will collect your personal information lawfully and fairly.

How we collect information from you

We may collect personal information where you:

  • contact us through our website;
  • receive goods or services from us;
  • submit any of our online inquiry forms;
  • communicate with us via email, telephone, SMS, social applications (such as LinkedIn or Facebook), or otherwise;
  • interact with our website, social applications, services, content and advertising;
  • invest in our business or enquire as to a potential purchase in our business; and
  • make a payment through our website, which is processed via Stripe.

 

How we collect information from third parties

Where possible, we collect your personal information directly from you. However, there may be occasions when we collect personal information (including sensitive information) about you from someone else. This may include Stripe, as outlined below.

How you provide information for someone else

If you are providing personal and/or sensitive information on behalf of someone else, you must have the consent of that person to provide their personal and/or sensitive information to us to be collected, used, and disclosed in accordance with this privacy policy.

If you are providing personal and/or sensitive information on behalf of someone under the age of 18 (Minor), you must be that Minor’s parent or legal guardian and you must provide consent for the Minor’s personal and/or sensitive information to be collected, used and disclosed in accordance with this privacy policy.

How we collect information from cookies

Cookies are small text files stored on your device when you visit a website. We use cookies and tracking technologies to enhance your experience. You can disable cookies via your web browser or reject non-essential cookies when you first visit our website.

Our Website uses the following cookies:

  • Essential Cookies: These are necessary for the operation of our website, such as enabling you to log into secure areas and complete transactions. It is not possible to disable these cookies otherwise our website would not work properly.
  • Analytical Cookies: These cookies help us understand how visitors interact with our website. We currently use Google Analytics to process this data. You can reject these cookies when you visit the website for the first time or by disabling cookies on your browser.
  • Functional Cookies: These allow us to remember your preferences, such as language or region, and help us enhance your browsing experience. You can reject these cookies when you visit the website for the first time or by disabling cookies on your browser.

 

LEGAL BASES FOR PROCESSING PERSONAL INFORMATION

We act as a data processor when processing data that our customers provide about their clients, following their directions (e.g., when AI agents are used by customers on our platform).

We act as a data controller when directly receiving and handling the personal data of freelancers registering on our platform.

We process personal information only when we have a legitimate and lawful basis, which may include:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose.
  • Contractual Necessity: Processing is necessary for a contract with you, or because you have asked us to take specific steps before entering into a contract.
  • Legal Obligation: Processing is necessary for us to comply with the law.
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided your interests and rights do not override these.

4. Use of Your Personal Information

We collect and use personal information for the following primary purposes:

  • to provide goods, services, or information to you;
  • for record-keeping and administrative purposes;
  • to provide information about you to our contractors, employees, consultants, agents, or other third parties to provide goods or services to you;
  • to improve and optimize our service offering and customer experience;
  • to comply with our legal obligations, resolve disputes, or enforce our agreements with third parties;
  • to send you administrative messages, reminders, notices, updates, security alerts, and other information requested by you;
  • to consider an application of employment from you; and
  • to process payments through Stripe, as further detailed below.


We may also use your personal information for:

  • secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use;
  • such purposes where we reasonably believe that the use of your personal information is necessary to lessen or prevent a serious threat to the life, health, or safety of any individual, or to public health or safety, and it is unreasonable or impracticable to obtain your consent;
  • any other purpose for which we receive consent from you; or
  • any other purpose that is permitted or required under applicable privacy laws.

5. Your Privacy Rights

Under the Privacy Act 1988 and the Australian Privacy Principles (APPs), you have certain rights regarding your personal data, including:

  1. Access to Personal Information
    You have the right to request access to the personal information we hold about you.
  2. Correction of Personal Information
    If any of your personal data is inaccurate or incomplete, you can request that we correct it.
  3. Right to Lodge a Complaint
    If you believe that your privacy rights have been breached, you may complain to us or the Office of the Australian Information Commissioner (OAIC).

 

If you are located in the European Union, the General Data Protection Regulation (GDPR) provides   additional rights regarding your personal data, including:

  1. Right to Erasure
    You can request the deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes it was collected.
  2. Right to Data Portability
    You have the right to receive your data in a structured, commonly used, and machine-readable format, and to transfer it to another service provider.
  3. Right to Restrict Processing
    You may request a restriction on the processing of your data in certain situations, such as when the accuracy of the data is disputed.
  4. Right to Object to Processing
    You can object to the processing of your data for reasons related to your particular situation, including direct marketing.
  5. Right to Lodge a Complaint
    If you believe your rights under GDPR have been violated, you have the right to complain to the data protection authority in your country of residence.

To exercise your rights, please contact us using the details at the end of this policy.

6. How We Disclose Your Personal Information

We respect your privacy, and we will take reasonable steps to keep your personal information confidential and protected. We may disclose your personal information to:

  • our professional advisors such as lawyers, accountants, and auditors;
  • our related entities;
  • any third parties you have consented personal information to be disclosed to; or
  • to Stripe for the purpose of processing payments, as further detailed below.

We may also disclose personal information to third-party contractors as required for us to provide our goods and services to you, such as cloud service providers, IT professionals, marketing agencies, and debt collection agencies.

Please be aware that we may transfer your Personal Information to locations outside Australia and the European Union.

We take care to work with such third parties who we believe maintain an acceptable standard of data security and require them not to use your personal information for any purpose except for those activities we have asked them to perform on our behalf.

We will not otherwise disclose your personal information unless:

  • you have consented to us disclosing your personal information for particular circumstances;
  • as needed in an emergency or the investigation of suspected criminal activity;
  • we are required to disclose under a subpoena, court order, or other mandatory reporting requirements;
  • we reasonably believe that disclosure of your information is necessary to lessen or prevent a serious threat to the life, health, or safety of any individual, or to public health or safety, and it is unreasonable or impracticable to obtain your consent;
  • it is reasonably necessary for the establishment, exercise, or defense of a legal claim; or
  • it is otherwise authorized or required by law.

We use Stripe, a third-party payment processor, to handle credit card and other payment transactions made through our website. When you make a payment, you provide your payment information directly to Stripe. Stripe’s use of your personal information is governed by its own Privacy Policy, which can be found here: Stripe Privacy Policy.

We may receive information from Stripe related to your payment, such as:

  • Confirmation of payment;
  • The last four digits of your credit card number;
  • The card’s expiration date;
  • Transaction ID; and
  • Other details as necessary to complete the payment

We do not store your full credit card details on our servers. Stripe handles the secure storage and processing of your payment information in compliance with industry standards, including PCI DSS (Payment Card Industry Data Security Standard).

7. Storage of Your Personal Information

We store personal information on secure servers on the AWS cloud in Australia. However, data may be transferred to cloud service providers with overseas operations. We take reasonable steps to protect personal information from misuse, interference, loss, or unauthorized access.

We also may use Google Analytics to track web traffic information which is operated by Google and stores information across multiple countries.

When you communicate with us through a social media service such as Facebook or Twitter, the social media provider and its partners may collect and hold your personal information overseas.

8. Marketing

We may at times send you marketing communications which will be done in accordance with the Spam Act 2003 (Cth) (Spam Act) and GDPR.

If we do, we may use email, SMS, social media, phone, or mail to send you direct marketing communications.

Where consent is needed, we will ask you for your consent before sending you marketing communications, except where you have explicitly opted-in to receive email marketing from us in the past.

You can, at any time, opt out of receiving marketing materials from us by using the opt-out facility provided (e.g., an unsubscribe link on emails we send you) or by contacting us via the details provided at the end of this privacy policy. We will implement such a request as soon as possible, however, cannot guarantee that such a response will be immediate.

9. De-Identified Information

The information we collect may have analytical, educational, or commercial value to us. Where we have de-identified the information we have collected, we reserve the right to process and distribute such information.

10. Security and Data Breach Notification

We take reasonable steps to ensure your personal information is secure and protected from misuse or unauthorized access. Our information technology systems are password-protected, and we use a range of administrative and technical measures to protect these systems. In the event of a data breach, we are committed to notifying affected individuals in compliance with both GDPR and Australian privacy laws. Under the Australian Notifiable Data Breaches scheme, we will inform you and the Office of the Information Commissioner (OIC) if a breach is likely to cause serious harm. If the breach involves the personal data of European Union individuals, we will notify the relevant supervisory authority within 72 hours and inform affected individuals if the breach is likely to result in significant harm. We take data protection seriously and will take appropriate steps to address any breaches promptly.

11. Links

Our website may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of those linked websites and we suggest you review the privacy policies of those websites before using them.

12. Complaints

If you wish to complain about how we handle your personal information held by us, please contact us using the details set out below including your name and contact details. We will investigate your complaint promptly and respond to you within a reasonable timeframe.

13. Contact Us

For further information about our privacy policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below:
Name: [insert]
Email: [insert]
Our privacy policy was last updated on 28 January 2025.