Privacy Statement

How OPAL handles personal information

This statement explains how OPAL ENTERPRISE SYSTEMS, INC. handles personal information when you visit opal.global, register for early access, request product communications, contact the OPAL team or otherwise interact with the OPAL software-as-a-service product.

1. Scope and responsibility

OPAL ENTERPRISE SYSTEMS, INC., a corporation incorporated in Delaware, United States ("OPAL", "we", "us" or "our"), operates opal.global and is responsible for the personal information described in this statement, except where another entity is expressly identified.

This statement applies to opal.global and the website forms and product communications described here. A separate customer agreement, employee notice, applicant notice or product privacy notice may apply where OPAL later collects information through another service or relationship.

2. Information we collect

Depending on how you interact with OPAL, we may collect:

• contact and business information, including your name, work email address, company, role and professional relationship to OPAL;
• enquiry information, including the subject and content of messages you send;
• early-access and marketing preferences, including your request for product updates, release news or early-access opportunities by email;
• if you separately choose text-message updates, your mobile number; SMS consent, HELP and opt-out status; the date, time, source and wording of your consent; messages or keywords you send; and delivery, error and related communications records;
• technical and security information, including IP address, browser and device information, timestamps, request identifiers, security-event data and server logs; and
• records of our communications and the steps taken to respond to your request.

Please do not submit sensitive personal information, confidential client records or production accounting data through the public website forms.

3. How information is collected

We collect information directly from you when you complete a form, communicate with us or request updates. The optional SMS checkbox is separate from email registration and is not preselected. We also collect limited technical information automatically when you use the website. We may receive business contact information from a colleague, authorised partner or publicly available professional source where permitted by law.

4. Why we use personal information

We may use personal information to:

• respond to enquiries and manage early-access, pilot, partnership or investment conversations;
• send requested OPAL product updates, release news and early-access opportunities by email and, only where you separately opt in, by text message;
• administer text-message subscriptions, process HELP and STOP requests, maintain consent and suppression records, and investigate delivery or misuse issues;
• operate, secure, troubleshoot and improve the website and related services;
• understand interest in OPAL and plan product, market and partner activity;
• maintain appropriate business records, prevent fraud or misuse, and establish or defend legal claims; and
• comply with applicable legal, regulatory and contractual obligations.

Where a law requires a lawful basis, we rely on consent, steps requested before entering into a contract, performance of a contract, compliance with law, or legitimate interests such as responding to business enquiries, securing the website and developing OPAL. We balance legitimate interests against the rights and expectations of the people concerned.

5. Product updates and marketing choices

If you register your interest, OPAL may use your work email address and selected role to send product updates, release news and early-access opportunities. We may also contact an existing business contact where permitted by law and consistent with that relationship.

If you separately provide a mobile number and select the optional SMS checkbox, we may send recurring OPAL product updates, release news and early-access text messages. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Consent is not a condition of purchase. The SMS programme is not used for investment solicitations or investor-relations messages. See our SMS Terms.

You may opt out of email updates at any time by using an unsubscribe link in a message or emailing info@opal.global with “Unsubscribe” in the subject line. You may opt out of text messages by replying STOP. Withdrawing SMS consent only withdraws SMS consent — it does not withdraw or cancel your separate email early-access registration, and withdrawing your email registration does not itself withdraw a separately given SMS consent. We may retain a minimal suppression record so that we can respect your choice. Opting out of marketing does not prevent service, security or transactional communications that are still necessary.

OPAL does not currently sell personal information for money or use website-form information for cross-context behavioural advertising. If this practice changes, we will update this statement and provide any choices required by applicable law.

6. Website technology, cookies and fraud prevention

The website may use essential browser storage, cookies and similar technologies needed for security, form operation, accessibility and performance. The public forms use Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. Cloudflare may receive technical information such as an IP address and browser or device signals for this purpose.

If OPAL introduces non-essential analytics, advertising or preference technologies, we will update the disclosures and provide consent or opt-out controls where required.

7. When information is shared

We may share personal information only as reasonably necessary with:

• Zoho Forms, which receives and stores validated Contact Us submissions and early-access registrations on OPAL’s behalf — including, where you separately and affirmatively select the optional SMS checkbox, your mobile number and that affirmative consent as part of the same registration. This website theme does not separately retain an encrypted local copy of the mobile number or SMS consent;
• RingCentral, participating mobile carriers and messaging providers acting on our instructions, who may use the mobile number and consent recorded with Zoho to operate and support the optional text-message programme;
• Cloudflare, which provides Turnstile security and related network services;
• website hosting, information-technology, security, communications and professional-service providers;
• OPAL group entities, authorised personnel and advisers who need the information for the purposes described above;
• government bodies, regulators, courts or other parties where disclosure is required or permitted by law; and
• a prospective purchaser, investor or successor in connection with a genuine financing, restructuring or business transaction, subject to appropriate confidentiality protections.

Service providers are expected to protect the information and use it only for authorised purposes. We do not permit them to use website-form information for their own unrelated marketing. We do not sell or rent mobile numbers, mobile opt-in information or text-message consent. Mobile opt-in information and text-message consent are not shared with third parties or affiliates for their own marketing or promotional purposes.

8. International transfers

OPAL operates internationally and may use service providers or personnel in countries other than the country where information was collected. Privacy laws and government-access rules may differ between those countries. Where required, we use contractual, organisational or other recognised safeguards and provide further information on request.

9. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain required business records, resolve disputes and meet legal obligations. Retention depends on the type of information, the relationship, security needs and applicable limitation periods.

Early-access details are generally kept while you remain subscribed or while an active product conversation continues. SMS subscription, consent and messaging records are kept while you are subscribed and for a reasonable period afterward to demonstrate consent, meet legal or carrier requirements and honour opt-out requests. A minimal suppression record may be retained after opt-out so that further messages are not sent. Enquiry records are periodically reviewed and deleted or anonymised when no longer required. Security and anti-abuse records are retained for a limited period appropriate to the risk.

10. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against loss, misuse and unauthorised access, alteration or disclosure. No internet service is completely secure, so we cannot guarantee absolute security. Please contact us promptly if you believe information provided to OPAL has been compromised.

11. Your privacy rights

Depending on where you live and the law that applies, you may have rights to:

• ask whether we hold personal information about you and request access to it;
• correct inaccurate or incomplete information;
• request deletion, restriction or portability of information;
• object to particular uses, including direct marketing;
• withdraw consent where processing is based on consent;
• opt out of sale, sharing or targeted advertising where those rights apply; and
• appeal an applicable decision or complain to a privacy or data-protection regulator.

To make a request, email info@opal.global with “Privacy request” in the subject line. Tell us the right you wish to exercise and the OPAL interaction concerned. We may need to verify your identity and authority before acting. We will not discriminate against you for exercising a privacy right.

We will acknowledge a privacy complaint or rights request, investigate it with the relevant OPAL team or service provider, and respond within the period required by applicable law or, where no period is specified, within a reasonable time. Our response will explain the outcome and any available escalation route.

12. Regional information

The rights and obligations that apply vary by location. OPAL will handle applicable requests under relevant laws, which may include the Australian Privacy Act and Australian Privacy Principles, United Kingdom or European data-protection law, United States state privacy laws, Canada’s private-sector privacy laws, New Zealand’s Privacy Act, Hong Kong’s Personal Data (Privacy) Ordinance and applicable United Arab Emirates data-protection requirements.

If you are not satisfied with our response, you may complain to the privacy or data-protection authority in your place of residence, where that right is available.

13. Children

OPAL is a business product and the website is not directed to children under 16. We do not knowingly use the website forms to collect personal information from children. Please contact us if you believe a child has provided information through the website.

14. Automated decisions

The public website forms do not make decisions based solely on automated processing that produce legal or similarly significant effects. Automated security tools may block or challenge activity that appears abusive.

15. Changes to this statement

We may update this statement when OPAL’s services, providers or legal obligations change. The “Last updated” date will show when the current version took effect. We will provide additional notice where a material change requires it.

16. Contact OPAL about privacy