No advertising cookies
LeXurey does not currently deploy advertising pixels or audience-analytics trackers on this website.
Effective 4 August 2026
Privacy Policy and cookie choices
This policy explains how LeXurey Pty Ltd handles personal information through its website, member portal, enquiries and support services. It also explains the website's storage and optional-media choices.
Security stays available
Login storage and anti-spam protection are used only where they are needed to provide secure portal and form functions.
Videos are optional
YouTube frames are not requested by your browser until you allow optional media.
Who we are
LeXurey Pty Ltd
Our privacy approach
We collect and use personal information only where it is reasonably necessary to provide, secure and improve our services, respond to enquiries, manage customer relationships, and meet legal obligations. We do not sell personal information.
Please do not send passwords, licence keys, connection strings, payment-card details, sensitive personal information, or live customer data through public forms unless LeXurey has expressly provided an approved secure channel for that purpose.
Information we collect
Enquiries and assessments
Name, business email, phone, job title, company, enquiry content, NAV or Business Central environment details, readiness answers and campaign source.
Member and account information
Email, user identifier, profile details, company, portal role, permissions, authentication and MFA status, account dates and sign-in records.
Support and service records
Tickets, support conversations, permitted file uploads, feedback and surveys, products, service hours, billing items and customer relationship records.
Public website assistant
Questions entered into the public assistant, the selected site language and the current public page path. The assistant does not need your portal record or full conversation history, and you should not enter passwords, licence keys, payment information, identity documents or customer data.
Talent-network information
Contact and location details, Australian work-rights category, preferred discipline, NAV or Business Central experience, certifications, availability, professional profile links and your introduction. MB-800 pathway applicants may also provide their motivation, relevant accounting, finance, supply-chain or ERP background, current Microsoft Learn or Business Central experience, weekly self-directed study availability and the required pathway acknowledgement. CVs, identity documents, banking information and tax documents are not collected through the public talent form.
Partnership enquiries
Organisation and contact details, ABN where supplied, regions, capabilities, competencies, public project examples, insurance status and the proposed collaboration.
Technical and security information
IP address, browser or device information, security signals, timestamps, request logs and diagnostic information processed by our hosting, authentication and anti-abuse providers.
We usually collect information directly from you, your employer or an authorised contact. We may also receive relevant business contact and service information from a referring partner, Microsoft services, or other systems you authorise us to use.
Why we use it
- Respond to enquiries and prepare assessments, proposals or demonstrations.
- Provide short, grounded website-assistant answers and direct visitors to relevant public LeXurey information.
- Consider talent-network expressions of interest for future paid opportunities and respond to partnership enquiries.
- Create and administer accounts, permissions, licences and customer records.
- Provide support, investigate issues, deliver projects and maintain service history.
- Protect the website and portal, prevent abuse and meet audit or security requirements.
- Manage communications, service hours, billing records and commercial relationships.
- Improve our services and comply with legal, regulatory and contractual obligations.
If information is not provided
You do not have to provide personal information, but we may be unable to respond to an enquiry, create an account, assess a migration, provide support, or meet a requested service where the relevant information is required.
Service providers and disclosures
We may disclose information to LeXurey personnel and contractors who need it for their work; your authorised organisation contacts; professional advisers; regulators or law-enforcement bodies where required; and service providers that host, protect or deliver our systems. Current website and portal providers may include Netlify, Supabase, Resend, Microsoft 365 or Microsoft Graph, Google reCAPTCHA, Cloudflare Turnstile and Workers AI when the public assistant is enabled, and YouTube when optional media is allowed.
When AI-assisted website answers are enabled, LeXurey sends only the submitted question, selected language and current public page path to Cloudflare Workers AI. The model is given a limited, reviewed set of public LeXurey facts and is instructed not to use confidential or portal information. Cloudflare states that it does not use Workers AI customer content to train models or improve its services without explicit consent. Cloudflare Turnstile may process browser, device, network and interaction signals to protect the assistant from automated abuse.
Some providers operate infrastructure in Australia, the United States and other countries. Their processing location can depend on service configuration, support operations and network routing. We take reasonable steps appropriate to the service and relationship to protect information handled outside Australia, including access controls and contractual or provider safeguards.
Security and retention
We use technical and organisational safeguards appropriate to the information and service, including controlled access, authentication, MFA where configured, encryption in transit, logging and anti-abuse controls. No online service can guarantee absolute security.
The public assistant keeps the visible conversation in your current browser page only. LeXurey does not intentionally store a chat transcript in its application database, although Netlify and Cloudflare may process limited request, security and diagnostic records under their service terms and retention practices.
We retain information for as long as reasonably needed for the purpose collected, support and customer history, security, contractual requirements and applicable record-keeping duties. When no longer required, information is deleted, de-identified or securely disposed of where reasonably practicable.
Access and correction
You may ask to access or correct personal information we hold about you by emailing admin@lexurey.com. We may need to verify your identity and authority before releasing or changing information. If we cannot fulfil a request, we will explain the reason where required.
Privacy complaints
Send a complaint with enough detail for us to investigate to admin@lexurey.com. We will acknowledge it and respond within a reasonable period. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.
OAIC privacy complaintsStorage and third-party services
Privacy choice
Browser local storage
Remembers whether optional media is allowed so the site does not ask on every visit.
Essential
Up to 180 days
Theme and language
Browser local storage
Remembers a light, dark, automatic theme or language after you actively choose it.
Requested preference
Until removed in your browser
Member portal session
Supabase authentication storage
Keeps an authorised member signed in and supports account security. It is used only when the member portal is enabled and used.
Essential
Until sign-out, revocation, expiry under configured session rules, or browser storage is cleared
Form protection
Google reCAPTCHA
Protects public enquiry forms from automated abuse. Google may process device, browser and interaction signals when a protected form is opened.
Essential security
Determined by Google for the security service
Assistant protection
Cloudflare Turnstile
Protects the public assistant from automated abuse. It loads only when the assistant is opened and may process browser, device, network and interaction signals.
Essential security
Determined by Cloudflare for the security service
Embedded videos
YouTube privacy-enhanced embed
Displays selected Business Central and LeXurey videos. These frames are not loaded until optional media is allowed.
Optional
Determined by YouTube after permission
Your choices
You can reject optional media and continue using the website. You can change your choice at any time using Privacy choices in the footer. A new choice is requested after 180 days.
Policy updates
We may update this policy when our services, providers or legal obligations change. The effective date at the top identifies the current published version. For third-party processing details, review Google's and YouTube's published privacy information.
Google Privacy Policy