Table of Contents
1. Introduction and Policy Statement
This Privacy Policy sets out how Business Nebula (referred to as “we,” “us,” or “our”) manages personal information. We are committed to protecting the privacy of the personal information we collect and hold, in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).
This Policy applies to our website https://businessnebula.com.au, and all related services, products, and interactions with you.
2. The Kinds of Personal Information We Collect and Hold
The personal information we collect depends on your interaction with us but may include:
- Identity and Contact Data: Name, email address, phone number, and mailing address.
- Business Identification Data: Generalised information regarding businesses that enquire with us, including Company name, Business size, Australian Business Number (ABN), and industry details.
- Payment Data: Necessary details for processing payments, which may include billing address and payment card information (though card details are generally processed directly by secure, third-party payment gateways).
- Correspondence Data: Details you provide in contact forms, feedback, or direct communication with us.
- Technical and Analytical Data: IP address, browser type and version, time zone setting, operating system, traffic source (how you found our site), and data collected via cookies and tracking technologies (see Section 4).
3. How We Collect and Hold Personal Information
We collect personal information in various ways, including:
- Directly from You: When you complete contact forms on our website, make a purchase, or communicate with us via email or phone.
- Automatically via Our Website: Through the use of cookies, server logs, and third-party analytics services (e.g., Google Analytics, Meta Pixel).
- From Third Parties: We may receive information from our marketing providers or publicly available sources (such as publicly listed ABN databases).
How we hold the information: Data held is strictly commercial in confidence. We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Personal information is held in:
- Secured internal and cloud databases accessible only by authorised personnel, secured with Multi-Factor Authentication (MFA) and 1Password for Business.
- Third-party systems necessary for business operation, such as payment gateways, where your data is protected by their respective security standards.
4. Purposes for Which We Collect, Hold, Use, and Disclose Information
We collect and use your personal information for the purposes that are reasonably necessary for, or directly related to, our functions and activities, including:
- To Contact Customers: Responding to your inquiries, providing quotes, and fulfilling service requests.
- Processing Transactions: Processing payments, invoices, and managing billing.
- For Marketing Purposes: Multi-channel marketing, including online and offline channels of communication, to inform you about our services, products, and promotions (subject to your consent and opt-out rights).
- For Analytical Purposes: Analysing website traffic, user behaviour, and business trends using tools like Google Analytics and Meta Pixel to understand traffic source effectiveness, improve our marketing, and enhance service delivery.
- For Website Functionality: Ensuring the proper operation and maintenance of the website and associated software.
- For Legal Compliance: Meeting our legal and regulatory obligations.
5. Disclosure of Personal Information to Third Parties
We are committed to the principle that we do not sell or misuse the information you provide to any entity that is not essential to our business operations.
We never provide your personal information to data brokers, data resellers, or any entity for the purpose of general data trading.
We may disclose your personal information to third parties only where necessary to operate our business, or where required or authorised by law. These third parties include:
- Service Providers Essential to Operations: Payment processors (e.g., Stripe, PayPal), website hosting providers, and technical support organisations.
- Analytics and Marketing Platforms: Including Google Analytics and Meta Pixel for performance tracking and targeted advertising.
- Professional Advisers: Accountants, lawyers, or other professional consultants.
- Regulatory/Law Enforcement Bodies: Where required by Australian law.
6. Cross-Border Disclosure of Personal Information (APP 8)
Business Nebula prioritizes the use of local, Australian servers for data storage where operationally possible.
However, we use global third-party software and cloud services for essential functions (analytics, marketing, payment processing). This means your information may be disclosed to recipients located outside of Australia.
Likely Overseas Recipients: Due to the use of global platforms like Google, Meta, and various cloud services, recipients are likely located in countries including, but not limited to, the United States and Singapore.
Accountability: Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient will handle the personal information in a way that is consistent with the APPs.
7. Data Retention
We retain your personal information only for as long as it is operationally relevant for the purposes for which it was collected, or until you request its removal, unless a longer retention period is required by law. Once the information is no longer necessary for its purpose and is not legally required to be kept, we will take reasonable steps to securely destroy or de-identify it.
8. Marketing Communications and Opt-Out (Spam Act)
We may use your contact information to send you marketing communications across multi-channel marketing that includes online and offline channels of communication. All electronic messages we send will comply with the Spam Act 2003 (Cth) by clearly identifying Business Nebula and providing an easy unsubscribe or opt-out mechanism. You can opt-out at any time by using this mechanism or by contacting our Privacy Officer (see Section 11).
9. Accessing and Correcting Your Personal Information (APP 12 & 13)
You have the right to request access to and correction of the personal information we hold about you by contacting our Privacy Officer in writing.
10. Handling Privacy Complaints
If you have a complaint about how we have managed your personal information, please contact our Privacy Officer (details in Section 11) in writing. We will investigate the matter promptly. If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner (OAIC) (https://www.oaic.gov.au/).
11. Contact Information
Please direct all privacy-related inquiries, access/correction requests, or complaints to:
- Privacy Officer: The Site Administrator
- Email: info@businessnebula.com.au
- Postal Address: 5/83 Payneham Road St Peters SA 5069