XYX Holdings Pty Ltd (ACN 632 303 685, ABN 21 632 303 685), trading as "Oceania Smart Select" ("we", "us", "our"), respects your privacy. This Privacy Policy explains how we collect, use, store and disclose personal information when you visit oceaniasmartselect.com.au or contact us regarding our products. Our corporate site is xyxtrade.com.au.
We comply with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth). For visitors from the EU/UK we apply the equivalent standards under the GDPR; for visitors from China we apply the principles of the Personal Information Protection Law (PIPL).
1. Information we collect
- Information you give us — when you contact us via email, the contact form, or partnership inquiries: your name, email, phone, company, and the content of your message.
- Automatically collected — IP address (anonymised by Google Analytics), browser type, device type, pages viewed, time on site, referrer. Collected only after you grant analytics consent via our cookie banner.
- We do not collect — payment card data, government identification, biometric data, or sensitive information as defined under the Privacy Act.
2. How we use your information
- Respond to inquiries about our products, pricing, and partnership opportunities.
- Improve our website, content, and product range based on aggregate usage analytics.
- Comply with legal obligations (e.g. tax, customs, anti-money-laundering record-keeping).
We do not sell your personal information. We do not use it for advertising profiling.
3. Lawful basis (GDPR / PIPL)
- Consent — for analytics cookies (you can withdraw consent at any time).
- Legitimate interest — to respond to your business inquiries.
- Legal obligation — to retain transaction records as required by law.
4. Sharing of information
We share information only with:
- Service providers who help us run the site (Google Analytics for traffic measurement; Cloudflare for content delivery and security). These providers are bound by their own privacy commitments.
- Authorities when required by law (court order, tax authority, customs).
- Successors in the event of a merger or acquisition, with notice to you.
5. Cross-border data transfer
Some service providers (e.g. Google) process data outside Australia. We use providers that maintain adequate data-protection standards. For PIPL-regulated data we apply Standard Contractual Clauses where required.
6. Security
The site is served entirely over HTTPS. We do not store personal data on the website itself (it is a static site). Inquiry messages are received via email and stored under our internal access controls.
7. Retention
Inquiry records: up to 7 years (to comply with Australian record-keeping requirements). Analytics data: aggregated, retained for 14 months in Google Analytics 4 (the platform default; we do not increase this).
8. Your rights
You have the right to:
- Access personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion (subject to legal retention obligations).
- Withdraw analytics consent — re-open the cookie banner by clearing your browser's site data, or email us.
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC), or the equivalent regulator in your country.
9. Children
Our site and services are aimed at trade and adult consumers. We do not knowingly collect information from anyone under 18.
10. Changes to this policy
We will post any changes on this page with an updated "Last updated" date. Material changes will be highlighted on our home page for 30 days.
11. Contact
Privacy enquiries: contact us. Write "Privacy enquiry" in the subject line. We respond within 30 days.
See also our Cookie Policy for details on cookies and similar technologies.
