Privacy Policy

Satincorp ("we," "our," "us," or "the Company") is committed to protecting the privacy and personal information of our employees, contractors, clients, and anyone who interacts with our services. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our business operations, including our SMS communication program.

By using our services or consenting to receive communications from Satincorp, you acknowledge that you have read and understood this Privacy Policy. This policy applies to all data processing activities carried out by Satincorp, including through our website at www.satincorp.com and our Microsoft Teams-enabled SMS messaging program.

Satincorp collects only the information necessary to carry out legitimate business operations. This may include:

• Contact information — name, email address, phone number, and job title
• Employment data — role, department, and work schedule for internal communications
• SMS consent records — records of opt-in consent to receive SMS messages, including date and method of consent
• Communication data — content and timestamps of SMS messages sent and received for business purposes
• Website usage data — pages visited, browser type, and IP address when you visit www.satincorp.com

We do not collect sensitive personal information such as financial account details, government identification numbers, or health data through our SMS program.

Your personal data is used exclusively for the following purposes:

• Sending and receiving work-related SMS messages on a 1-to-1 basis
• Managing employee scheduling, appointments, and operational communications
• Maintaining records of consent and opt-out preferences
• Improving internal communication processes and service quality
• Complying with legal and regulatory obligations

Satincorp operates an SMS messaging program through Microsoft Teams for internal business communications. The following privacy commitments apply specifically to this program:

All SMS consent records are stored securely and are available for review by the data subject upon request. Records are maintained in compliance with CTIA messaging guidelines and applicable telecommunications regulations.

Personal data may only be disclosed in the following strictly limited circumstances:

• Service providers: Trusted technology partners (such as Microsoft) who process data on our behalf under strict data processing agreements and confidentiality obligations
• Legal requirements: When required by law, court order, or regulatory authority, we may disclose data to comply with legal obligations
• Business transfers: In the event of a merger, acquisition, or sale of company assets, personal data may be transferred as part of that transaction, with notice provided to affected individuals

In all cases, third parties are contractually prohibited from using your data for any purpose beyond what is strictly necessary to provide the agreed service.

Satincorp retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our retention practices are as follows:

• SMS consent records: Retained for a minimum of 4 years from the date of consent or opt-out to comply with telecommunications compliance requirements
• Employee communication data: Retained for the duration of employment plus 2 years, unless a longer retention period is required by law
• Opt-out records: Retained indefinitely to ensure compliance with opt-out requests and prevent accidental re-messaging
• Website usage data: Retained for up to 12 months in anonymised or aggregated form

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

Satincorp takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption of data in transit and at rest where applicable
• Access controls limiting data access to authorised personnel only
• Use of Microsoft Teams and enterprise-grade communication platforms with built-in security features
• Regular review of security practices and staff training on data protection

In the event of a data breach that poses a risk to individuals' rights and freedoms, Satincorp will notify affected individuals and relevant authorities as required by applicable law.

Depending on your location and applicable law, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at ithelpdesk@satincorp.com. We will respond to all valid requests within 30 days. We may need to verify your identity before processing your request.

Our website at www.satincorp.com may use cookies and similar tracking technologies to improve your browsing experience and understand how visitors use our site. Types of cookies we may use include:

• Essential cookies: Necessary for the website to function correctly — cannot be disabled
• Analytics cookies: Help us understand visitor behaviour in anonymised, aggregated form
• Preference cookies: Remember your settings and preferences for future visits

You can manage or disable non-essential cookies through your browser settings at any time. Disabling cookies may affect certain website functionality. We do not use tracking cookies for advertising or marketing purposes.

Satincorp reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify active SMS recipients via SMS or email for significant changes
• Post the updated policy at www.satincorp.com/privacy-policy

We encourage you to review this policy periodically. Continued use of our services or receipt of communications after the effective date of any update constitutes acceptance of the revised policy.

Satincorp is the data controller responsible for your personal information. If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please contact us: