​OPEX Contracts Pty Ltd ACN 625 729 071
Last updated: 13 February 2026

1. Introduction

OPEX Contracts Pty Ltd ACN 625 729 071 and its wholly owned subsidiaries (“OPEX”, “we”, “us” or “our”) operate the OPEX digital contract and document exchange platform and related Platform (Platform).

OPEX is an “APP entity” for the purposes of the Privacy Act 1988 (Cth) (Privacy Act) and complies with the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, hold, use and disclose personal information, and how individuals may access or correct that information or make a complaint.

In this policy, capitalised words and phrases have the meanings given to them where they are followed by bolded brackets.

2. What is Personal Information?

“Personal information” has the meaning given in the Privacy Act. It means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

The types of personal information we may collect include:

• Name

• Contact details (email, phone, address)

• Employment and role information

• Information contained in contracts or transaction documents uploaded to the platform

• Payment or billing information

• IP address and device information

• Support enquiries and communications

We do not intentionally collect sensitive information unless it is necessary for providing our Platform.

​

3. How We Collect Personal Information

We collect personal information in several ways:

(a) Information you provide directly

For example, when you:

• Register to use our Platform

• Request a demonstration

• Subscribe to updates

• Contact us for support

• Attend training or events

(b) Information collected via subscribers

Our Platform are used by property developers, law firms and other subscribers. These subscribers may upload personal information (for example, purchaser details in contracts) to the Platform.
In these circumstances, OPEX acts as a service provider to the subscriber. The subscriber is responsible for ensuring it has the authority to collect and upload that personal information.
If you believe your personal information has been uploaded to our platform by one of our subscribers, you should contact that subscriber in the first instance.

(c) Information collected automatically

When you visit our website or use our Platform, we may collect:

• IP address

• Device and browser information

• Usage data

• Cookies and similar technologies

This information helps us operate and improve our Platform.

(d) Unsolicited personal information

If we receive personal information that we did not solicit, we will determine whether we could have lawfully collected that information under the Privacy Act. If not, and if lawful and reasonable to do so, we will destroy or de-identify the information as soon as practicable.

 

 

4. Why We Collect Personal Information

We collect and use personal information to:​

• Provide and operate our Platform

• Manage our relationship with subscribers and Users

• Provide technical support

• Communicate operational updates

• Send product updates or marketing communications (see section 8)

• Improve and develop our Platform

• Detect and prevent fraud or misuse

• Comply with legal obligations

If we do not collect certain personal information, we may not be able to provide our Platform.

 

5. Anonymity and Pseudonymity

Where lawful and practicable, individuals may deal with us anonymously or using a pseudonym (for example, when making a general enquiry).

However, due to the nature of our Platform, it is generally not practicable for users of the OPEX platform or individuals involved in contract or document transactions to remain anonymous.

 

6. Disclosure of Personal Information

We may disclose personal information to:​

• Our related entities

• Third-party service providers who assist us in operating our Platform (including cloud hosting providers such as Microsoft Azure)

• Professional advisers (such as legal and accounting advisers)

• Regulators, courts, or government agencies where required by law

• A purchaser or potential purchaser of our business (subject to confidentiality obligations)

We require third-party service providers to handle personal information in accordance with confidentiality and security obligations.

We do not sell personal information.

 

7. Overseas Disclosure

OPEX hosts its production systems in Australia. All subscriber and user data is stored in Australia.
However, we engage software development and technical support personnel located in Bulgaria (European Union). These personnel may access personal information stored in our systems in order to provide development and support the Platform.

OPEX takes reasonable steps to ensure overseas recipients:​

• Are subject to confidentiality and security obligations;

• Access personal information only as necessary;

• Implement appropriate security safeguards; and

• Notify us of any data breaches.

OPEX remains accountable for personal information disclosed overseas in accordance with the Privacy Act.

 

8. Direct Marketing 

We may use personal information (such as email addresses) to send information about:​

• Product updates

• New features

• Service enhancements

• Platform maintenance

• Industry events

You may opt out of receiving marketing communications at any time by:​

• Clicking the unsubscribe link in our emails; or

• Contacting us at help@opex.com.au

We will comply with your request within a reasonable time.

 

9. Security of Personal Information 

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

These measures include:​

• Secure cloud hosting in Australia

• Encryption of data in transit and at rest

• Role-based access controls

• Access logging and monitoring

• Confidentiality obligations for staff and contractors

• Security governance consistent with ISO/IEC 27002

We maintain an information security framework aligned with ISO/IEC 27002 standards.

 

10. Retention and Destruction

We retain personal information for as long as necessary to:​

• Provide our Platform;

• Comply with legal obligations;

• Resolve disputes; or

• Enforce our agreements.

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it.

 

11. Access and Correction

You may request access to personal information we hold about you or request that we correct it by contacting us at help@opex.com.au.

We will respond within a reasonable period (generally within 30 days) and may require verification of your identity.
Where personal information has been uploaded to the OPEX platform by one of our subscribers (such a business, an agent, developer or law firm), that subscriber is generally responsible for responding to access and correction requests relating to that information. In such circumstances, we may:

​

 

• Refer your request to the relevant subscriber; or

• Request that you contact the subscriber directly.

We will assist our subscribers, where appropriate, to respond to such requests in accordance with the Privacy Act.
If we refuse access or correction, we will provide written reasons unless an exception under the Privacy Act applies.

 

12. Complaints

If you believe we have breached the Privacy Act or mishandled your personal information, you may lodge a complaint by contacting us at: help@opex.com.au

We will investigate your complaint and respond within a reasonable time.
If you are not satisfied with our response, you may lodge a complaint with the:

Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au

 

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will be published on our website.
Where a material change is made, we may notify users via email or through our platform.

 

14. Contact Us

If you have questions about this Privacy Policy or how we handle personal information, please contact:

OPEX Contracts Pty Ltd
Email: help@opex.com.au
Website: www.opex.com.au