Privacy Policy

Pivotal Metals Limited (ASX: PVT, ABN 49 623 130 987) (“Pivotal”, “we”, “us”) is bound by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy explains what personal information this website collects, why, who it is shared with, and the choices you have.

This policy covers pivotalmetals.com and its subpages only. It does not cover third-party sites we link to, or the separate practices of the ASX or your broker or share registry.

Information we collect

This site collects personal information in three ways:

1. Investor mailing list. If you subscribe for announcement updates (in the footer or on the Investors page), we collect your email address and, where the form asks for it, your first and last name. Signup uses double opt-in — we send a confirmation email and nothing is added to the list until you confirm. This information is stored by our mailing list provider, Mailchimp (The Rocket Science Group LLC), which the Company’s investor relations team uses directly to send announcement updates. You can unsubscribe at any time using the link in any email you receive.

2. Contact form. If you use the contact form, we collect your name, email address, the company you tell us you represent (optional), and your message. This is sent as a one-off email notification to Pivotal’s investor relations inbox, and a copy is emailed back to you as confirmation, through our website platform provider DHResources and its email delivery provider, Resend, solely so we can respond to your enquiry. It is not added to any mailing list and is not used for marketing.

3. Automatically collected usage data. Like most websites, this site automatically logs technical and behavioural data as you browse: pages viewed, links and documents clicked, approximate scroll depth, time on page, referring page, screen/viewport size, and a randomly generated session identifier. The session identifier is stored in your browser’s sessionStorage (not a cookie) and is discarded automatically when you close the browser tab — it is never linked to your name or email and is not used to track you across other websites. Your IP address and general location (derived from IP) and browser user agent are also captured, as they are by any web server, and are forwarded together with the above to our website analytics processor, DHResources, purely to compile aggregate, anonymised usage statistics for the Company. Our hosting provider, Vercel Inc., separately logs standard server request data (IP address, timestamp, requested URL) for security and reliability purposes.

Cookies

This site does not set any cookies of its own. The one piece of client-side storage described above (the analytics session ID) uses sessionStorage, which is confined to your current browser tab, cannot be read by other websites, and is cleared automatically when the tab closes — it does not persist across visits or build a profile of you over time.

Some pages embed live modules (share price, project map, drill data, capital structure) served from DHResources’ own domain inside an iframe. Content loaded that way is subject to DHResources’ own cookie and privacy practices within that frame, not ours.

How we use your information

• To send you ASX announcement and company updates you’ve subscribed to receive;
• To respond to enquiries submitted through the contact form;
• To understand, in aggregate, how this site is used so we can improve it;
• To meet our legal, regulatory, and continuous-disclosure obligations as an ASX-listed company; and
• To detect and prevent misuse of the site (e.g. spam submissions).

Who we share it with

We do not sell personal information. We share it only with the service providers needed to run the functions above, each acting under their own terms as an independent data processor/controller for the data they hold:

• Mailchimp — mailing list hosting and delivery.
• Resend — transactional delivery of contact-form notifications and confirmations.
• DHResources — our investor-relations website platform and analytics provider, who also help operate this site and send our contact-form email on our behalf.
• Vercel Inc. — hosting infrastructure.

We may also disclose information where required by law, ASX Listing Rules, or to protect the rights, property, or safety of Pivotal, our users, or others.

International transfers

Mailchimp, Resend, and Vercel are US-based providers, and your information may be processed on servers outside Australia as a result. Where this occurs, we rely on those providers’ contractual and security commitments as our reasonable steps to protect your information consistent with APP 8.

Data retention

Mailing list records are kept until you unsubscribe. Contact form enquiries are retained only as long as needed to handle the enquiry and for our internal records. Aggregate analytics data is retained by DHResources for reporting purposes and is not personally identifying.

Your rights

You can ask us to access or correct the personal information we hold about you, or ask us to delete it, by contacting us using the details below. You can unsubscribe from the mailing list at any time via the link in any email. If you have a concern about how we’ve handled your information that we haven’t resolved, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Security

We take reasonable technical and organisational steps to protect the personal information we hold from misuse, loss, and unauthorised access, including relying on the security practices of the service providers listed above. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be reflected here before they take effect.

Contact us

For any privacy question, or to exercise the rights above, contact us at info@pivotalmetals.com or write to us at Level 10, 360 Queen Street, Brisbane QLD 4000, Australia.