Privacy Policy

Exceleris Consulting (“Exceleris”, “we”, “us”, or “our”) is committed to protecting the privacy, confidentiality, and security of personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in connection with our website, www.xlrs.group (the “Site”) and our business development, recruitment, advisory, and platform-related activities.

By accessing our Site or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

1. Regulatory Scope

This Privacy Policy is designed to comply with applicable data protection and privacy laws in jurisdictions where we operate or where our clients, prospects, or website visitors are located, including:

• the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth)
• the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018
• the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679)
• the Personal Data Protection Act 2012 (PDPA) of Singapore
• the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada
• the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong
• applicable United States state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)

Where local laws impose additional requirements, we apply those requirements as applicable.

2. Personal Information We Collect

The personal information we collect depends on how you interact with us.

2.1 Information You Provide Directly

We may collect personal information that you voluntarily provide, including:

• contact details such as name, email address, phone number, organisation, role, and country
• communications when you contact us, request information, subscribe to updates, register for events, or correspond with us
• recruitment information, including CVs, employment history, education details, and related information if you apply for a role
• client and prospect information necessary to assess, scope, or deliver advisory services or platform engagements

Sensitive client or project data is generally governed by separate contractual arrangements.

2.2 Information Collected Automatically

When you visit our Site, we may automatically collect:

• usage and log data, including IP address, browser type, device information, pages viewed, timestamps, and referring URLs
• cookies and similar technologies used to operate the Site, analyse usage, and support communications (see Section 9)

3. How We Use Personal Information

We use personal information for the following purposes:

• to respond to enquiries and communicate with you
• to operate, maintain, and improve our Site and services
• to provide advisory services and support client engagements
• to manage recruitment and hiring processes
• to send relevant communications and marketing materials (where permitted)
• to analyse Site usage and improve performance
• to protect the security and integrity of our systems
• to comply with legal, regulatory, and contractual obligations

We process personal information only where we have a lawful basis to do so, including consent, legitimate interests, contractual necessity, or legal obligation, depending on the jurisdiction and context.

4. Disclosure of Personal Information

We do not sell personal information in the ordinary commercial sense.

We may disclose personal information to:

• service providers who support our operations (e.g. hosting, analytics, CRM, email delivery, recruitment platforms), under contractual confidentiality and security obligations
• business partners, where relevant and with consent where required
• regulators, courts, or authorities, where required by law
• professional advisers, such as legal or accounting advisers
• successors or acquirers in the event of a merger, acquisition, or restructuring

We may also disclose information where necessary to protect rights, prevent fraud, or ensure safety.

5. International Data Transfers

Exceleris operates internationally. Personal information may be transferred to, stored, or processed in countries outside your country of residence, including Australia, the United Kingdom, the European Union, the United States, and other jurisdictions where our service providers operate.

We implement appropriate safeguards for cross-border transfers, including:

• adequacy decisions where available
• approved contractual protections (such as Standard Contractual Clauses or UK transfer agreements)
• reasonable steps to ensure overseas recipients protect personal information consistently with this Privacy Policy

6. Data Security

We maintain appropriate technical and organisational measures to protect personal information, including access controls, encryption where appropriate, monitoring, and staff training.

No system is completely secure. While we take reasonable steps to protect personal information, we cannot guarantee absolute security.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, considering:

• the nature of our relationship with you
• legal and regulatory requirements
• dispute resolution and enforcement needs
• ongoing relevance to business or operational purposes

When personal information is no longer required, it is securely deleted or anonymised.

8. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

• access and obtain a copy of your personal information
• request correction of inaccurate or incomplete information
• request deletion or restriction of processing
• object to processing, including for direct marketing
• withdraw consent where processing is based on consent
• request data portability (EU/UK)
• opt out of certain data sharing practices (California residents)
• not be discriminated against for exercising privacy rights

These rights are subject to applicable local laws and limitations.

You may lodge a complaint with your local data protection authority, including:

• UK Information Commissioner’s Office (http://www.ico.org.uk )
• Office of the Australian Information Commissioner (http://www.oaic.gov.au )

To exercise your rights, contact us using the details in Section 13. We may need to verify your identity before responding.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve the Site, understand usage patterns, and support communications.

Cookies may include:

• essential cookies required for site functionality
• analytics cookies to understand usage
• functional cookies to remember preferences
• marketing cookies, where applicable and permitted

You can manage cookies through browser settings or any cookie consent tool provided on the Site. Disabling cookies may affect functionality. We do not currently respond to “Do Not Track” signals.

10. Children’s Privacy

Our Site is not intended for individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If such information is identified, it will be deleted.

11. Third-Party Websites

Our Site may contain links to third-party websites. We are not responsible for their content or privacy practices. Please review their privacy policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. Updates will be posted on this page with revised dates.

13. Contact Information

For questions, concerns, or privacy-related requests, contact:

Exceleris Consulting Pty Ltd
903/50 Clarence Street
Sydney NSW 2000
Australia

enquiries@excelerisconsulting.com