Cookies Policy

Lextech Pty Ltd (Lextech, we, us or our) uses cookies and similar technologies on our website and platform to support secure operation, improve performance and understand how our services are used.

This Cookie Policy explains what cookies are, how we use them, and the choices available to you.

This policy should be read together with our Privacy Policy.

What are Cookies

Cookies are small text files stored on your device when you visit a website.

They allow a website to recognise your device and retain certain information about your preferences or activity.

Cookies may be:

• session cookies,which expire when you close your browser; or
• persistent cookies, which remain on your device for a defined period or until deleted.

How we use Cookies

We use cookies and similar technologies to:

• enable the secure and reliable operation of our website and platform;
• maintain session integrity and support authentication;
• understand how users interact with our website;
• improve website and platform performance; and
• manage how limited technical and usage data is shared with service providers.

We do not use cookies for unrelated or unnecessary purposes.

Types of Cookies we use

Essential Cookies

Essential cookies are required for the operation and security of our website and platform. They support core functionality such as authentication, session management and system integrity.

These cookies cannot be disabled.

Analytical Cookies

Analytics cookies help us understand how visitors use our website, including page visits, navigation patterns and general usage trends.

We use this information to improve the performance and functionality of our services.

Where required by law, analytics cookies are used only with your consent.

Marketing and advertising Cookies

Marketing and advertising cookies help us measure the effectiveness of campaigns and understand how visitors interact with our website after engaging with our communications or advertising.

These cookies may be used for conversion measurement, attribution and retargeting.

Where required by law, marketing and advertising cookies are used only with your consent.

Cookies used on our website

Analytics and data routing

We use server-side data processing infrastructure to support the operation, security and performance of our website and services.

Use of intermediary server infrastructure

When you interact with our website, certain technical and usage data is not always sent directly from your browser to third-party analytics or advertising platforms.

Instead, this data may first be routed through a secure intermediary server environment managed by a third-party provider, currently Stape.io. That server receives, processes and then forwards limited data to selected service providers, such as analytics platforms including Google Analytics and LinkedIn and, where implemented, advertising or marketing platforms such as LinkedIn, Google, YouTube, Meta or TikTok.

This approach allows us to maintain greater control over how data is handled before it is disclosed to external providers.

Useof processing and overseas disclosure

Data processed through this server-side configuration is initially handled on infrastructure located in Australia.

After that initial processing, some data may be disclosed to third-party service providers located overseas, including in the United States. This may include analytics, technology, advertising or marketing platforms, such as Google, YouTube, LinkedIn, Meta or TikTok.

Accordingly, personal information may be transferred outside Australia. We take reasonable steps to ensure that overseas recipients handle personal information in accordance with applicable privacy laws.

Data minimisation and filtering

This configuration is designed to act as a control layer over data flows.

We take reasonable steps to ensure that:

• only data reasonably necessary for these purposes is processed; and
• data is limited, filtered, modified, masked or removed before it is disclosed to third-party providers.

This includes restricting the data elements shared with external platforms to the minimum required for analytics, operational and marketing purposes.

Exclusion of sensitive information

We do not use this process to collect sensitive information.

Our systems are configured to prevent the transmission of sensitive personal information through this server-side environment, including, without limitation:

• financial account information;
• health information;
• political opinions or affiliations;
• religious beliefs or affiliations; and
• other categories of sensitive information under applicable privacy laws.

Respecting user choices and consent

This server-side processing does not override user privacy preferences.

Where you choose to limit or disable analytics or marketing cookies through our cookie settings or your browser:

• we take steps to ensure that this preference is respected; and
• data is not transmitted to relevant third-party platforms for those purposes.

This infrastructure is not used to circumvent or bypass user consent choices.

Where consent is required, analytics and marketing data will only be processed and disclosed to third-party platforms after that consent has been provided. 

Third party Cookies and providers

We may use trusted third-party providers, including hosting, analytics, technology and, where applicable, advertising or marketing providers, who may set cookies or receive limited data on our behalf.

This may include:

• Stape.io, as a server-side routing and infrastructure provider;
• analytics providers, such as Google Analytics; and
• where implemented, advertising or marketing platforms, such as Meta or YouTube.

These providers are required to handle information in accordance with applicable privacy laws and our contractual requirements.

Cookie retention

We retain cookies and information collected through cookies for limited periods based on the type of cookie, the purpose of collection and the settings applied by our service providers.

Cookie duration

The main cookies currently used on our website are retained for the periods set out in the cookie table above, being that:-

• Google Analytics cookies are currently browser-capped to 7 days, although the nominal cookie duration may be up to 2 years;
• LinkedIn advertising cookies are retained for 30 days; and
• session cookies expire when you close your browser.

Analytics and advertising data retention

Data collected through analytics and advertising tools is retained as follows:

• Google Analytics 4 event-level data is retained for 1 year 1 month and 4 days from collection;
• Google Analytics 4 user-level data is retained for 1 year 1 month and 4 days from last activity, where reset-on-activity is enabled; and
• LinkedIn Insight Tag data is retained for up to 1 year, as determined by LinkedIn.

Data minimisation

We take reasonable steps to ensure that:

• Cookie and analytics retention periods are limited to what is reasonably necessary; and
• personal information is destroyed or de-identified when no longer required; and
• information is not retained for unrelated purposes.

Your Choices

We do not place analytics cookies or marketing and advertising cookies on your device unless you have provided consent, where consent is required by law.

You may:

• accept all non-essential cookies;
• reject all non-essential cookies; or
• manage your preferences by cookie category.

You may withdraw or change your consent at any time through our cookie preference tool.

Withdrawing consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Preferences

You can manage your cookie preferences at any time by:

• using any cookie preference tool available on our website; or
• adjusting your browser settings to block or delete cookies.

Please note that disabling cookies may affect the functionality of parts of our website or platform.

Consent

Where required by applicable law, including under the General Data Protection Regulation (GDPR) and ePrivacy requirements or by the Office of the Australian Information Commissioner (OAIC), we will seek your consent before placing non-essential cookies or similar technologies on your device.

You may withdraw your consent at any time by updating your preferences through our cookie settings.

Recording Consent

Where you provide, refuse or withdraw cookie consent, we may keep a record of that choice.

Consent records may include:

• the date and time of your choice;
• the cookie categories accepted or rejected;
• a consent identifier;
• the version of the cookie notice or preference tool presented at the time; and
• relevant technical information needed to apply your preferences.

We use consent records to apply your preferences and to demonstrate compliance with applicable privacy laws.

Consent records are retained for up to 6 months, unless a longer period is required to establish, exercise or defend legal claims or comply with legal obligations.

Updates to this Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, technology, service providers or legal obligations.

The current version will be published on our website.

If you have any questions about this Cookie Policy or our use of cookies, please contact us using the details set out in our Privacy Policy.