Effective Date: 01/06/2025

SMP 365 Pty Ltd ("SMP 365", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (https://www.smp365.com), use our software, or engage with our services.

We operate in compliance with:

• Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)

• General Data Protection Regulation (GDPR) (EU/UK)

• California Consumer Privacy Act (CCPA)

• Personal Information Protection and Electronic Documents Act (PIPEDA) (Canada)

• ISO/IEC 27001 Information Security Management System (ISMS) standards

1. Information We Collect
We collect the following categories of personal data:

• Contact Information: Name, email, phone number, business name and address

• Account Credentials: Username, passwords, role titles

• Billing Information: Payment methods, transaction records (via secure gateways)

• Usage Data: IP address, browser type, access time, system interactions

• Device & Technical Info: Device identifiers, operating system

• Cookies & Analytics: User preferences, interactions, and performance data (refer to our [Cookie Policy])

2. How We Use Your Information
We collect and process your data to:

• Provide access to SMP 365 software and features

• Maintain secure authentication and user settings

• Process payments and manage subscriptions

• Deliver customer support and respond to inquiries

• Monitor, analyse, and improve system performance and user experience

• Meet regulatory or legal obligations (e.g. incident notifications)

3. Data Security
We uphold the highest standards of information security:

• End-to-end encryption in transit and at rest

• Secure cloud infrastructure (ISO 27001-compliant)

• Role-based access control and MFA (Multi-Factor Authentication)

• Ongoing audits, penetration testing, and logging

4. Sharing of Information
We do not sell or rent your data. Your data may be shared:

• With authorised third parties for payment, analytics, hosting (under strict NDA and contract)

• When required by law, subpoena, or legitimate legal process

• During a company restructure, acquisition, or merger

5. International Data Transfers
We operate globally. When we transfer personal information internationally, we:

• Use standard contractual clauses

• Partner only with data processors who comply with GDPR or equivalent

• Host data within secure regions (e.g., AWS, Azure)

6. Your Rights
Depending on your jurisdiction, you have the right to:

• Access your personal data

• Request correction or deletion

• Object to processing or withdraw consent

• Port your data to another provider

• Lodge a complaint with a supervisory authority (e.g. OAIC in Australia, ICO in the UK)

Contact us at Support@smp365.com to exercise your rights.

7. Data Retention
We retain your data:

• As long as your account is active

• As necessary to meet legal obligations

• For resolving disputes and enforcing agreements

• Secure deletion or anonymisation occurs when no longer required

8. Cookies and Tracking Technologies
We use cookies to:

• Improve platform functionality and user preferences

• Conduct analytics for system optimisation

• Enable secure login sessions

See our full [Cookie Policy] for more information.

9. Policy Updates
We may update this Privacy Policy to reflect changes in:

• Legal or regulatory requirements

• Our software, technologies, or data handling practices

We will notify users of material changes and update the “Effective Date” above.

10. Contact Us
If you have questions or concerns regarding your data or this policy, please contact:
SMP 365 Pty Ltd
Website: www.smp365.com
Email: Support@smp365.com