Privacy Policy
Aleverum Global Pty Ltd, ABN 76 698 919 256, referred to in this Privacy Policy as “Aleverum”, “we”, “us” or “our”, respects privacy and is committed to handling personal information transparently and responsibly.
This Privacy Policy explains how we collect, hold, use, disclose and protect personal information in connection with our website, the Aleverum™ Digital Product Passport platform, product intelligence services, customer and supplier workflows, communications and business operations.
1. Scope
This Privacy Policy applies to personal information handled by Aleverum through:
- Our public website
- The Aleverum™ platform
- Customer engagements
- Supplier and reviewer workflows
- Platform demonstrations
- Events and meetings
- Support services
- Recruitment
- Other business activities
This Privacy Policy does not govern the independent privacy practices of customers, suppliers, verification bodies or third party websites.
Where Aleverum processes personal information only on the documented instructions of a customer, that customer may be responsible for providing relevant privacy notices, establishing an appropriate legal basis and responding to individual requests.
2. What Is Personal Information?
Personal information is information or an opinion about an identified individual or an individual who is reasonably identifiable.
Much of the information processed through Aleverum™ relates to products, materials, organisations and supporting evidence rather than individuals.
Personal information may still appear in:
- Account records
- Business contact details
- Supplier documentation
- Communications
- Supporting evidence
- Activity records
- Uploaded documents
- Review and approval records
3. Personal Information We May Collect
The types of personal information we may collect and hold include:
- Identity and contact information, such as name, role, organisation, business email address, telephone number and professional profile details
- Account and authentication information, such as username, user identifier, role, permissions and security events
- Customer, supplier, manufacturer, reviewer and partner contact information
- Communications, enquiries, meeting records, support requests and feedback
- Billing, transaction and commercial administration information, where applicable
- Technical and usage information, including IP address, browser type, device information, timestamps, referring pages, activity records and security events
- Personal information contained in product, supplier, certification, audit, evidence or compliance documents submitted to the platform
- Marketing preferences and engagement information
- Recruitment information where a person applies to work with or provide services to Aleverum
We do not seek to collect personal information that is not reasonably required for our activities and services.
4. How We Collect Personal Information
We may collect personal information:
- Directly from an individual
- From the individual’s employer or organisation
- From a customer or authorised platform user
- From suppliers, reviewers or verification partners
- Through website forms and platform interactions
- Through meetings, demonstrations and communications
- From publicly available professional or business sources
- Through cookies and similar technologies
- From service providers supporting our operations
Where a customer or authorised user provides personal information about another person, they are responsible for ensuring they have the authority and appropriate basis to provide that information and for giving any required privacy notices.
5. How We Use Personal Information
We may collect, hold, use and disclose personal information to:
- Provide, administer, secure and improve our website, platform and services
- Create and manage accounts, permissions and authentication
- Support product, supplier, evidence and Digital Product Passport workflows
- Support authorised review and verification workflows
- Respond to enquiries and provide platform demonstrations
- Manage customer, supplier and partner relationships
- Deliver support, onboarding, maintenance and professional services
- Conduct billing, contracting, procurement and business administration
- Monitor service performance and investigate technical issues
- Detect misuse and respond to security incidents
- Maintain appropriate activity and audit records
- Comply with legal and contractual obligations
- Protect our rights, systems, users and business operations
- Develop and improve platform features with appropriate safeguards
- Send service communications
- Send relevant business or marketing communications where permitted
We may also use personal information for another purpose where that use is authorised or required by law.
6. Artificial Intelligence and Automated Tools
Aleverum™ may use artificial intelligence and automated tools to assist with authorised activities such as:
- Document classification
- Product data extraction
- Document organisation
- Claim to evidence matching
- Completeness checking
- Missing evidence detection
- Inconsistency detection
- Expiry monitoring
- Standards mapping
- Drafting and summarisation
- Workflow assistance
- Internal productivity
AI supports review. Humans govern decisions.
AI assisted outputs are not a substitute for human review, professional advice, regulatory interpretation, certification, conformity assessment or decisions made by an authorised organisation.
Where an external AI provider is used, the information submitted, provider terms, retention settings, data use settings and processing locations depend on the relevant feature, service and account configuration.
Material providers that may process personal information are identified in our Subprocessor List, where applicable.
Additional notices, customer controls or contractual terms may apply to particular AI assisted features.
7. Disclosure of Personal Information
We may disclose personal information to:
- Authorised personnel and contractors who require access for legitimate business purposes
- Hosting, infrastructure, security, analytics, communications and other service providers
- Customers, suppliers, reviewers or partners where disclosure is required for an authorised workflow
- Professional advisers, insurers, auditors and financiers
- Government agencies, regulators, courts or law enforcement bodies where required or authorised by law
- A purchaser, investor or successor in connection with a proposed or completed corporate transaction, subject to appropriate confidentiality arrangements
Our Subprocessor List identifies material third party providers that may process Customer Data or personal information on our behalf.
We do not sell personal information.
8. Overseas Disclosure and Processing
Some service providers may store or process personal information outside Australia or permit authorised access from other countries.
The countries involved may depend on:
- The provider and its authorised subprocessors
- Selected hosting or service regions
- Account configuration
- Customer location
- Support arrangements
- The services and features being used
Material providers and available processing location information are identified in our Subprocessor List.
Where personal information is disclosed to an overseas recipient and applicable law requires it, Aleverum takes reasonable steps appropriate to the circumstances to address the handling of that information.
Aleverum does not represent that all personal information is stored or processed only in Australia.
9. Security
We take reasonable steps appropriate to our operations to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.
Security measures may include:
- Access controls
- Authentication controls
- Secure transmission
- Encryption where appropriate
- Logging and monitoring
- Secure hosting
- Backup processes
- Software development controls
- Vulnerability management
- Incident response processes
Our public Security, Data Protection and AI Governance Overview provides more information about our general approach.
No method of electronic transmission or storage can be guaranteed to be completely secure.
Individuals and customers should protect their account credentials, use authorised devices and notify us promptly if they suspect unauthorised access or compromise.
10. Retention and Deletion
We retain personal information only for as long as reasonably necessary to:
- Fulfil the purpose for which it was collected
- Provide and secure our services
- Maintain appropriate activity and audit records
- Meet contractual and legal obligations
- Resolve disputes
- Protect legitimate business interests
- Support applicable product record and Digital Product Passport requirements
Retention periods may differ for account records, contracts, communications, security logs, backups, product evidence and Digital Product Passport records.
When information is no longer required, we may delete, anonymise or de identify it, subject to legal obligations, technical limitations, backup cycles, security requirements and contractual commitments.
Further information is available in our Data Retention and Deletion Overview.
11. Cookies and Analytics
Our website uses cookies and similar technologies to support website functions, remember preferences and understand website performance and use.
Non essential technologies are managed through the website’s consent controls where applicable.
Our Cookie and Tracking Notice explains the categories of technologies used, their purposes and the choices available to visitors.
12. Direct Marketing
We may send relevant business communications where permitted by law.
Recipients may opt out of marketing communications by:
- Using the unsubscribe option included in the communication
- Updating available communication preferences
- Contacting us at privacy@aleverum.com
We may continue to send service, account, billing, legal and security communications where they are reasonably necessary.
13. Access, Correction and Other Requests
An individual may request access to personal information we hold about them or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.
In some circumstances, an individual may also ask us to delete or restrict the use of personal information, subject to applicable law, contractual obligations and our role in processing the information.
We may need to verify the identity and authority of the person making the request.
We may refuse or limit a request where permitted by law. Where required, we will explain the reason for the decision.
Where Aleverum processes personal information only on behalf of a customer, the request may need to be directed to that customer.
Requests may be sent to privacy@aleverum.com.
14. Privacy Enquiries and Complaints
Privacy enquiries, access requests, correction requests and complaints may be sent to privacy@aleverum.com.
Please provide enough information for us to understand and investigate the matter.
We will seek to respond within a reasonable period and may contact you if additional information is required.
Where the Privacy Act 1988 applies and you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.
15. Data Breaches
We assess suspected data breaches and take reasonable steps to contain, investigate and respond to them.
Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will notify the relevant regulator and affected individuals as required. The Australian scheme requires covered entities to notify affected individuals and the OAIC when an eligible breach is likely to result in serious harm.
16. Children
Aleverum™ is intended for business and professional use and is not directed to children.
We do not knowingly seek to collect personal information directly from children through the public website.
Customers and authorised users must not submit children’s personal information unless they are authorised to do so, the information is necessary for an approved purpose and appropriate protections are in place.
17. Third Party Links
Our website may contain links to websites and services operated by third parties.
Aleverum is not responsible for the privacy practices, content or security of those third party services.
Users should review the privacy notices and terms applying to any external website or service they access.
18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Applicable law
- Our website or platform
- Service providers
- Technology
- Information handling practices
- Business operations
The current version will be published on this page with its effective date and last updated date.
19. Contact
Aleverum Global Pty Ltd
ABN: 76 698 919 256
Address: 330 Wattle Street, Ultimo NSW 2007
Privacy enquiries: privacy@aleverum.com
General enquiries: Contact Aleverum™
Effective date: 13 May 2026
Last updated: 6 August 2026