Privacy Policy

Scope and responsibility

This policy applies to personal information handled through the PartPack marketing website, access forms and customer communications. This endpoint does not provide a public PartPack account or paid service. General enquiries may be sent to hello@levrtek.com.

For account, billing and website information, PartPack decides why and how the information is handled. For personal information contained in engineering packages or supplied by a customer, the customer controls the purpose of processing and PartPack handles that information to provide the service and follow the customer’s instructions.

Information we collect

Account and contact information. Name, work email, organisation, role, authentication identifiers, workspace membership and communication preferences.

Customer and supplier information. Supplier contacts, package participants, comments, approvals, delivery recipients and other personal information customers include in their workspace.

Service content and activity. Engineering files, package metadata, validation results, decisions, delivery events, support requests and audit records.

Commercial information. Subscription, order, billing and transaction records. Payment card details are handled by our payment provider and are not stored in full by PartPack.

Technical information. IP address, device and browser information, timestamps, pages and features used, diagnostic events, security logs and cookie identifiers. Waitlist abuse prevention uses a one-way fingerprint derived from the submitted email and network address; the waitlist database does not store the raw network address in that fingerprint.

Website and access-form information. Work email and any optional information you submit about industry, business size, ERP, PDM or PLM systems, file storage, supplier purchase-order volume and engineering-file volume. The additional waitlist questions are optional, and skipping them does not affect your waitlist place.

Optional analytics information. If you allow analytics, PartPack stores a pseudonymous visitor and session identifier, acquisition source, campaign parameters, referring host, pages and sections visited, and selected product actions. Analytics events exclude email addresses, engineering filenames, file contents, package notes and message text. Google Search Console supplies aggregate search impressions, clicks, queries and page performance; it does not identify an individual visitor to us.

How we collect information

We collect information directly when you create an account, use PartPack, receive a supplier package, complete a form, contact support or communicate with us. Customers and workspace administrators may also provide information about authorised users, reviewers and suppliers.

We collect technical information automatically from the service and from hosting, security and analytics providers. We do not buy personal information lists.

How we use information

• Provide, administer and support accounts, workspaces and supplier deliveries.
• Validate files, record approvals and maintain package audit trails.
• Authenticate users, prevent fraud, investigate misuse and protect the service.
• Process orders, payments and customer requests.
• Monitor reliability, diagnose faults and improve product performance.
• Communicate service, security, support and product information.
• Meet legal obligations and establish, exercise or defend legal claims.

PartPack does not sell personal information. We do not use customer engineering files or personal information to train shared or third-party AI models.

Sharing and overseas processing

We disclose information only where needed to operate PartPack, follow customer instructions, complete a corporate transaction, comply with law or protect rights and safety. Recipients may include authorised workspace members, supplier recipients selected by a customer, professional advisers and contracted providers for cloud hosting, storage, email, payments, analytics, monitoring and support.

The marketing website uses Cloudflare for delivery and protection. When the corresponding features are enabled, it uses Supabase for waitlist, contact and first-party analytics infrastructure, Resend for website email, and Google Search Console for aggregate search-performance reporting. Optional analytics remains off until consent. This website does not claim that PostHog or Sentry is active unless the notices and deployment record are updated first.

Providers for a separately released PartPack production service are governed by its customer order, data-processing agreement and security schedule. A portfolio or technical direction does not mean that provider is active for this website or a production workspace.

Providers may process information in Australia, the United States and other countries disclosed for the applicable service. We assess material providers and use contractual and other reasonable measures for overseas disclosures in accordance with applicable Australian privacy requirements.

Cookies, analytics and communications

PartPack uses essential browser storage and cookies for authentication, security and service preferences. If optional analytics are enabled, we use them to understand aggregate website and product usage. We do not use customer engineering files for advertising.

You can decline analytics when prompted; your choice is stored in your browser and can be cleared through browser storage settings. See the Cookie and Storage Notice for current details. You can unsubscribe from non-essential product emails using the message link or by contacting us. Transactional, account and security messages remain necessary while you use the service.

Security

We use technical and organisational measures designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include encryption, access controls, audit logging, monitoring, secure development practices, backups and incident response procedures. More detail is available in the LEVRTEK security and privacy policy.

Retention and deletion

We keep personal information only while it is needed for the purpose collected, an active customer relationship, security, dispute resolution or a legal obligation.

Customer workspace data

For the subscription term, then deleted from active systems within 30 days after an authorised deletion or termination request.

Encrypted backups

Age out within 90 days after deletion from active systems.

Security and audit records

Normally retained for up to 24 months, or longer where required to investigate an incident or meet a customer agreement.

Billing and contract records

Retained for the period required by applicable tax, accounting and corporate laws.

Website access enquiries

Reviewed regularly and deleted or de-identified when no longer needed for access or product communications.

Waitlist and optional profile information is retained while we manage early-release access and product communications, unless you ask us to delete it sooner or we are required to retain it. Rate-limit fingerprints are automatically removed after 24 hours. A profile-completion token expires after 24 hours and is removed when the optional questionnaire is saved.

Pseudonymous analytics events and imported search-performance records are retained for up to 24 months unless we need a shorter period to honour a request or legal requirement.

Where immediate deletion from a backup is not technically practicable, the information is isolated from ordinary use and removed as the backup expires.

Your choices and rights

You may ask to access or correct personal information we hold about you, request deletion where applicable, object to non-essential marketing, or ask how we handled your information. Email privacy@levrtek.com. We may verify your identity and authority before completing a request.

If your information was submitted by a PartPack customer, we may refer the request to that customer or assist them in responding. We will explain if law permits or requires us to refuse part of a request.

Privacy complaints

Send a privacy complaint to privacy@levrtek.com with your contact details and a clear description of the concern. We will acknowledge the complaint, investigate it and aim to provide a substantive response within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner or another regulator with jurisdiction.

Data breaches

PartPack maintains an incident-response process for assessing and containing suspected data breaches. Where required, we notify affected individuals, customers and regulators, including under Australia’s Notifiable Data Breaches scheme.

Children

PartPack is a business service and is not directed to children. Users must be at least 18 years old or otherwise legally able and authorised to use the service for their organisation.

Changes to this policy

This policy operates with the LEVRTEK master privacy policy and PartPack schedule. We update it when our practices, providers or legal obligations materially change. We will publish the updated version and effective date here and provide additional notice where a change materially affects customer rights.