Privacy Policy

Xreality Group Limited (ACN 154 103 607) and subsidiaries

Last updated: June 2026

"We", "us" and "our" means Xreality Group Limited (ACN 154 103 607) (XRG) and its subsidiary companies: Operator XR LLC and Operator XR Pty Ltd (collectively referred to as xReality Group) of Building 2A, 106 Old Pittwater Road, Brookvale NSW 2100 Australia.

This policy explains how and why we collect, use, hold, and disclose your Personal Information when you interact with operatorxr.com or contact us. By using our website or submitting a form, you consent to us collecting, holding, using, and disclosing your Personal Information in accordance with this policy.

1. What Is Personal Information?

Personal Information is any information or an opinion about an identified individual, or an individual who can be reasonably identified from that information or opinion. Information or an opinion may be Personal Information regardless of whether it is true.

2. What Personal Information Do We Collect?

We collect information about you when you interact with us, for example when you submit a form on operatorxr.com, contact us directly, or interact with us on social media. The information we collect may include:

Identity and contact details — name, company, job title, email address, phone number, and country/location

Enquiry details — the nature of your enquiry, preferred demo date, products you are interested in, and any additional information you choose to provide

Attribution data — when you arrive at our website from an advertisement, we capture advertising campaign identifiers (including Google's click identifier and campaign UTM parameters) associated with your visit. These are stored temporarily in your browser's session storage and included in your form submission if you complete one during the same browser session. This data is used solely to measure advertising effectiveness.

Usage and technical data — IP address, browser type, device type, operating system, pages visited, and how you interact with our website

Social media data — if you interact with us via a social media platform, we may receive information from that platform about your interaction

3. Why Do We Collect, Hold, and Use Your Personal Information?

We collect, hold, and use your Personal Information to:

(a) provide you with products and services, and manage our relationship with you

(b) respond to your enquiries, demo requests, or complaints

(c) measure the effectiveness of our advertising campaigns and attribute form submissions to the campaigns that generated them

(d) improve our advertising measurement, including by sending hashed (SHA-256 encrypted) versions of your name, email address, and phone number to Google Ads to help match your enquiry to prior advertising interactions — see Section 6 for details

(e) comply with our legal obligations and assist government and law enforcement agencies or regulators

(f) identify and tell you about other products or services that may be of interest to you

4. How Do We Store and Protect Personal Information?

We store most information about you in computer systems and databases, operated by us or our external service providers including cloud service providers. Some information may be recorded in paper files stored securely.

We implement and maintain processes and security measures to protect Personal Information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These include:

Identity and access management technologies to control system access

Requiring all employees to comply with internal information security policies

Requiring all employees to complete information security training

Monitoring and regularly reviewing our practices against our own policies and industry best practice

We will take reasonable steps to destroy or de-identify Personal Information once we no longer require it for the purposes for which it was collected.

5. Who Do We Disclose Your Personal Information To?

We may disclose your Personal Information to:

Our related companies (Operator XR LLC and Operator XR Pty Ltd)

External service providers who perform services for us or on our behalf, including our CRM provider (Salesforce), marketing automation tools (Zapier), website platform (Squarespace), and advertising platforms (Google Ads, Meta, and LinkedIn)

Regulatory or government authorities where required or authorised by law

Other parties where you have expressly consented or consent may reasonably be inferred

A new owner if the ownership or control of our business changes

6. Advertising Technologies and Advertising Purposes

When you submit a form on operatorxr.com and agree to this Privacy Policy, you consent to us passing data included in that form submission back to our advertising platforms for advertising attribution and optimisation purposes. This allows us to understand which of our advertisements led to an enquiry and to improve the performance of our advertising campaigns.

Specifically, we pass the following data from your form submission to Google Ads, Meta and LinkedIn:

Your name, email address, and phone number — sent in hashed (SHA-256 encrypted) form. Advertising platforms use this to match your enquiry to an account where a prior interaction with our advertising occurred, improving measurement accuracy. These platforms receive a one-way cryptographic representation of this data, not your actual details.

Advertising campaign identifiers (including click identifier, gclid, and campaign UTM parameters) captured when you arrived at our website via an advertisement. These are stored temporarily in your browser during your visit and included in your form submission if you complete one in the same session. We use this data to attribute enquiries to specific campaigns and to upload conversion data back to Google Ads to optimise future advertising.

Google's handling of data passed to Google Ads is governed by Google's Privacy Policy (policies.google.com/privacy).

7. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. We use both persistent cookies (which remain after you close your browser) and session cookies (which are cleared when you end your browsing session). You may refuse cookies by adjusting your browser settings, but doing so may affect the functionality of our website.

Types of Cookies and Tracking Technologies We Use

We use the following categories of cookies and tracking technologies:

Essential cookies — necessary for basic website functionality. These cannot be disabled.

Performance and analytics cookies — used to understand how visitors use our website. We use Google Analytics (GA4) to collect aggregated usage data. These cookies are only set when you consent via our cookie banner.

Advertising and marketing cookies — used to measure and optimise our advertising on Google Ads, Meta (Facebook/Instagram), and LinkedIn. These technologies (including the Meta Pixel, LinkedIn Insight Tag, and Google Ads conversion tags) are only activated when you consent via our cookie banner. Where consent is not given, Meta and LinkedIn receive no data. Google may receive aggregated, modelled data without personal identifiers.

Functionality cookies — remember your preferences to improve your browsing experience.

Session recording — we use Microsoft Clarity to collect anonymised session recordings and heatmaps to help us improve the website.

Consent Management

When you first visit operatorxr.com, you will be shown a cookie consent banner. By accepting, you consent to the use of analytics, advertising, and marketing cookies. By declining, only essential cookies will be set. You can change your preference at any time by clearing your browser cookies and revisiting the site, or by adjusting your browser settings.

Third-Party Cookies and Technologies

Some cookies and tracking technologies are placed by third-party services integrated into our website, including Google Analytics, Google Ads, Meta Pixel, LinkedIn Insight Tag, and Microsoft Clarity. These third parties may collect data in accordance with their own privacy policies. We recommend reviewing those policies to understand how your data is handled.

8. Marketing Communications

We may use your Personal Information to contact you about products and services we believe may interest you. We will not do so if you ask us not to. Where you receive electronic marketing communications from us, you may opt out at any time by following the unsubscribe instructions in the communication or by contacting us directly.

9. Overseas Disclosure

We may disclose your Personal Information between xReality Group offices located in Australia and the United States. We also use third-party service providers whose systems may be located overseas, including in the United States (Google, Meta, LinkedIn, Salesforce, Zapier, and Squarespace). We take reasonable steps to ensure that overseas recipients handle your Personal Information in accordance with applicable Australian Privacy Principles.

10. US State Privacy Rights

If you are located in California or another US state with applicable privacy laws, you may have additional rights regarding your Personal Information, including:

The right to know what Personal Information we collect, use, disclose, and sell

The right to request deletion of your Personal Information

The right to opt out of the sale or sharing of your Personal Information for cross-context behavioural advertising

The right not to be discriminated against for exercising your privacy rights

We do not sell your Personal Information. To exercise any of the above rights, please contact us using the details in Section 13.

11. EEA and UK Privacy Rights

If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to access, correct, restrict, or erase your Personal Information, and the right to data portability. You also have the right to lodge a complaint with your local supervisory authority.

Our legal bases for processing your Personal Information are:

Consent — for advertising cookies and tracking technologies, and for use of your Personal Information for marketing communications

Legitimate interests — for analytics, website improvement, and advertising effectiveness measurement

Contract performance — where processing is necessary to respond to your enquiry or provide requested products or services

To exercise your rights or withdraw consent, please contact us using the details in Section 13.

12. Access to and Correction of Your Personal Information

You may request access to or correction of the Personal Information we hold about you by contacting us directly. There are some circumstances in which we are not required to give you access, but we will advise you if these apply. There is no charge for requesting access, but we may require you to meet our reasonable costs in providing it. We will respond in a reasonable time and take all reasonable steps to ensure that the Personal Information we hold about you is accurate, up-to-date, and correct.

13. Complaints

If you have a complaint about how we have handled a privacy issue, please contact us. We will consider your complaint and notify you of the outcome of our investigation. If you remain unsatisfied, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au for guidance on available options.

14. Contact Details

If you have any questions, requests, or concerns regarding this policy, please contact us at: [email protected]

Xreality Group Limited, Building 2A, 106 Old Pittwater Road, Brookvale NSW 2100 Australia.

15. Changes to This Policy

We may update this policy from time to time. Changes will be published on our website. Continued use of our website following any update constitutes acceptance of the updated policy. We recommend reviewing this policy periodically.