MatX Pty Ltd — Privacy Policy
Version 2.0 — March 2026
MatX Pty Ltd (ABN 36 695 561 178) ("MatX", "we", "us", or "our") is committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your Personal Information.
We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (the "Privacy Act"). The APPs govern the way in which we collect, use, disclose, store, secure, and dispose of your Personal Information.
A copy of the Australian Privacy Principles may be obtained from the website of the Office of the Australian Information Commissioner at oaic.gov.au.
This policy applies to Personal Information collected through the MatX platform (matx.com.au), any custom-branded portals powered by MatX, and any information provided to us directly.
MatX is a procurement marketplace platform that enables organisations to list, exchange, and transact surplus goods and materials. We provide the platform as a service to organisations ("Clients") and their staff, as well as to individual users.
Due to the nature of our platform — which facilitates secure B2B procurement, auditing, and financial transactions — it is impracticable for users to interact with us anonymously or by using a pseudonym (APP 2). You must identify yourself to use the MatX platform.
Personal Information is information or an opinion that identifies an individual. We collect your Personal Information for the primary purpose of providing our platform services to you, and for secondary purposes closely related to that primary purpose where you would reasonably expect such use.
MatX collects and handles Personal Information in two contexts:
Information we collect directly. When you register for an account or use the platform, we collect Personal Information from you for our own business purposes as described in this policy.
Information we handle on behalf of organisations. When a Client organisation connects its Microsoft Entra ID directory, syncs staff rosters, or uses the platform's enterprise features, we hold and process Personal Information on that organisation's behalf and in accordance with our agreement with them. If you are a member of an organisation using MatX, your organisation's own privacy obligations also apply to the information they manage through the platform. Questions about how your organisation handles your information should be directed to your organisation.
The types of Personal Information we collect depend on how you interact with the platform. We only collect Personal Information that is reasonably necessary for our functions and activities (APP 3).
Account information. When you create a MatX account, we collect your full name, email address, password (stored in hashed form), mobile phone number, and Australian state or territory. After registration, you may also provide additional profile information including a company name, profile image, and payment details (such as BSB, account number, account name, PayID, PayPal email, or cash/invoice preferences) to facilitate transactions on the platform. We also store your notification preferences (email and SMS settings) and any category watchlist selections you configure for listing alerts.
Single Sign-On (SSO) data. When a Client organisation connects Microsoft Entra ID for single sign-on, we receive information from the organisation's directory on their behalf. This may include display names, email addresses, job titles, departments, manager relationships, and group memberships. This data is synced at the organisation's direction and is held by MatX on their behalf.
Listing and transaction data. When you use the platform, we collect the content you create and the actions you take. This includes listing details (titles, descriptions, images, documents, pricing, categories, location, asset tags or SKU numbers, transport preferences, sustainability estimates, and any custom field values configured by your organisation), transaction records (offers, counter-offers, quantities, prices, buyer and seller contact details, approval decisions, and cancellation or rejection reasons), and messages exchanged between buyers and sellers through the platform's messaging system (including read receipts).
Organisation and role data. If you are part of an organisation, we hold information about your role within that organisation — including your organisation role (Owner, Admin, or Member), exchange permissions, approval role assignments, seat licensing status, and position within the manager hierarchy.