Privacy Policy

1. Overview

Paxaway Pty Ltd trading as Paxaway Transport Consultants (we, us, our) provides transport compliance management software and related services. This Privacy Policy explains how we handle personal information, including how we collect, use, disclose, store, and protect it. We aim to comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you use our services on behalf of a business, the business controls what personal information is provided to us and how the service is configured.

2. Who this policy applies to

This policy applies to personal information we handle about:

• Business representatives who create or manage an account.
• Drivers and workers whose information is entered into the platform.
• Visitors to our website and users of our applications.
• Support enquiries and communications with us.

3. Personal information we collect

Depending on how the service is used and configured, we may collect the following:

4. How we collect personal information

We collect personal information in the following ways:

• Directly from the business when an account is created, configured, or administered
• Directly from users when they log in, submit forms, or contact support
• Automatically through the operation of the service, including logs and analytics
• From integrations configured by the business, where applicable
• The business is responsible for ensuring it has authority to provide personal information of drivers and workers to us, including providing required notices and obtaining required consents.

5. How we use personal information

We use personal information to:

• Provide, operate, and maintain the service.
• Create and manage accounts, access controls, and authentication.
• Support compliance management workflows as configured by the business.
• Respond to enquiries and provide customer support.
• Process payments and manage billing administration.
• Monitor performance, troubleshoot issues, and improve the service.
• Maintain security, prevent fraud, and enforce acceptable use requirements
• Comply with legal and regulatory obligations

We do not sell personal information.

6. When we disclose personal information

We may disclose personal information to:

• Service providers who help us deliver the service, such as hosting, analytics, communications, and payment providers
• Professional advisers such as auditors, lawyers, and accountants where needed
• Law enforcement, regulators, or courts where we are required or authorised by law
• A buyer or successor as part of a business restructure, sale, or acquisition

We take reasonable steps to require service providers to handle personal information securely and only for permitted purposes.

7. Overseas storage and disclosure

We may use cloud infrastructure and service providers that store or process data in Australia and, in some cases, other countries. Where personal information is stored or accessed outside Australia, we take reasonable steps to ensure it is protected in a manner consistent with this policy.

8. Location data

If the business enables location features, the application may collect location data from a user device while the application is in use, subject to device permissions. The business controls whether location features are enabled and who can view location information within the account. A user can usually control location permissions through their device settings. Disabling location permissions may limit certain features of the service.

9. Cookies and analytics

Our website and applications may use cookies and similar technologies to support core functionality, remember preferences, and help us understand usage patterns. You can usually control cookies through your browser settings. Some cookies are required for the service to function correctly.

10. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps may include access controls, encryption in transit where available, monitoring, and staff confidentiality obligations. No method of transmission or storage is completely secure. Users and businesses should protect passwords, limit access to authorised users, and notify us promptly if they suspect unauthorised access.

11. Data retention and deletion

We retain personal information only for as long as needed to provide the service, meet the instructions of the business, and comply with legal obligations. When information is no longer required, we take reasonable steps to delete it or de identify it.

12. Access and correction

You may request access to personal information we hold about you and request correction if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading. We may need to verify your identity before responding. If you are a driver or worker whose information is managed by a business account, we may refer your request to the relevant business administrator where appropriate.

13. Complaints

If you have a privacy concern or complaint, please contact us using the details below. We will acknowledge and investigate your complaint and aim to respond within a reasonable timeframe.

14. Data breaches

We maintain processes to assess and respond to suspected data breaches. Where required, we will comply with the Notifiable Data Breaches scheme.

15. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be made available within our service or on our website.