Table of Contents
1. Introduction and Policy Statement
This Privacy Policy sets out how Business Nebula (referred to as “we,” “us,” or “our”) manages personal information. We are committed to protecting the privacy of the personal information we collect and hold, in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).
This Policy applies to our website https://businessnebula.com.au, and all related services, products, and interactions with you.
We are committed to handling personal information in accordance with the APPs regardless of any small business exemption that may apply to us, and we keep this Policy under review to reflect changes in our practices and in Australian privacy law.
2. Your Right to Anonymity and Pseudonymity
Where it is lawful and practicable to do so, you have the option of dealing with us anonymously or by using a pseudonym. However, for most of our services, such as providing quotes, delivering services, or processing payments, we will need accurate identifying information to interact with you effectively, and it may not be practicable to deal with you anonymously.
3. The Kinds of Personal Information We Collect and Hold
The personal information we collect depends on your interaction with us but may include:
- Identity and Contact Data: Name, email address, phone number, and mailing address.
- Business Identification Data: Generalised information regarding businesses that enquire with us, including Company name, Business size, Australian Business Number (ABN), and industry details.
- Payment Data: Necessary details for processing payments, which may include billing address and payment card information (though card details are generally processed directly by secure, third-party payment gateways).
- Correspondence Data: Details you provide in contact forms, feedback, or direct communication with us.
- Technical and Analytical Data: IP address, browser type and version, time zone setting, operating system, traffic source (how you found our site), and data collected via cookies and tracking technologies (see Section 6).
4. How We Collect and Hold Personal Information
We collect personal information in various ways, including:
- Directly from You: When you complete contact forms on our website, make a purchase, or communicate with us via email or phone.
- Automatically via Our Website: Through the use of cookies, server logs, and third-party analytics services (e.g., Google Analytics, Meta Pixel).
- From Third Parties: We may receive information from our marketing providers or publicly available sources (such as publicly listed ABN databases).
How we hold the information: Data held is strictly commercial in confidence. We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Personal information is held in:
- Secured internal and cloud databases accessible only by authorised personnel, secured with Multi-Factor Authentication (MFA) and 1Password for Business.
- Third-party systems necessary for business operation, such as payment gateways, where your data is protected by their respective security standards.
5. Purposes for Which We Collect, Hold, Use, and Disclose Information
We collect and use your personal information for the purposes that are reasonably necessary for, or directly related to, our functions and activities, including:
- To Contact Customers: Responding to your inquiries, providing quotes, and fulfilling service requests.
- Processing Transactions: Processing payments, invoices, and managing billing.
- For Marketing Purposes: Multi-channel marketing, including online and offline channels of communication, to inform you about our services, products, and promotions (subject to your consent and opt-out rights).
- For Analytical Purposes: Analysing website traffic, user behaviour, and business trends using tools like Google Analytics and Meta Pixel to understand traffic source effectiveness, improve our marketing, and enhance service delivery.
- For Website Functionality: Ensuring the proper operation and maintenance of the website and associated software.
- For Legal Compliance: Meeting our legal and regulatory obligations.
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to operate effectively, analyse usage, and support our marketing.
- Essential cookies: Necessary for the website to function and cannot be switched off in our systems.
- Analytics cookies: Used to understand how visitors interact with the website, for example through Google Analytics.
- Marketing and advertising cookies: Used to measure and improve our advertising, for example through the Meta Pixel.
Managing cookies: You can control or disable cookies through your browser settings, and where a consent tool is presented on our website you can accept or decline non-essential cookies. Disabling some cookies may affect how the website functions.
Third-party tools: Analytics and advertising cookies may be set by third parties whose handling of your information is governed by their own privacy policies, including Google and Meta.
7. Disclosure of Personal Information to Third Parties
We are committed to the principle that we do not sell or misuse the information you provide to any entity that is not essential to our business operations.
We never provide your personal information to data brokers, data resellers, or any entity for the purpose of general data trading.
We may disclose your personal information to third parties only where necessary to operate our business, or where required or authorised by law. These third parties include:
- Service Providers Essential to Operations: Payment processors (e.g., Stripe, PayPal), website hosting providers, and technical support organisations.
- Analytics and Marketing Platforms: Including Google Analytics and Meta Pixel for performance tracking and targeted advertising.
- Professional Advisers: Accountants, lawyers, or other professional consultants.
- Regulatory/Law Enforcement Bodies: Where required by Australian law.
8. Cross-Border Disclosure of Personal Information (APP 8)
Business Nebula prioritises the use of local, Australian servers for data storage where operationally possible.
However, we use global third-party software and cloud services for essential functions (analytics, marketing, payment processing). This means your information may be disclosed to recipients located outside of Australia.
Likely Overseas Recipients: Due to the use of global platforms like Google, Meta, and various cloud services, recipients are likely located in countries including, but not limited to, the United States and Singapore. Some of these countries may not have privacy laws that are substantially similar to the APPs.
Accountability: Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient will handle the personal information in a way that is consistent with the APPs, except to the extent that you consent to the disclosure or another exception under APP 8 applies.
9. Data Security and Notifiable Data Breaches
We take reasonable steps to protect the personal information we hold from misuse, interference, and loss, and from unauthorised access, modification, or disclosure, including the technical and organisational measures described in Section 4.
Notifiable Data Breaches: If we become aware of a data breach that is likely to result in serious harm to any individual whose personal information we hold, we will assess the breach and respond in accordance with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). Where the scheme requires, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.
10. Data Retention
We retain your personal information only for as long as it is operationally relevant for the purposes for which it was collected, or until you request its removal, unless a longer retention period is required by law. Once the information is no longer necessary for its purpose and is not legally required to be kept, we will take reasonable steps to securely destroy or de-identify it.
11. Direct Marketing and Communications (Spam Act and APP 7)
We may use your contact information to send you marketing communications across multi-channel marketing that includes online and offline channels of communication. All electronic messages we send will comply with the Spam Act 2003 (Cth) by clearly identifying Business Nebula and providing an easy unsubscribe or opt-out mechanism. You can opt-out at any time by using this mechanism or by contacting our Privacy Officer (see Section 16).
Under the Australian Privacy Principles, you may ask us at any time to stop using or disclosing your personal information for direct marketing, and you may request that we tell you the source of the information we used. We will action such requests within a reasonable period and at no cost to you.
12. Children’s Privacy
Our website and services are directed to businesses and to individuals aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected personal information from a child, please contact our Privacy Officer (Section 16) and we will take reasonable steps to delete it.
13. Accessing and Correcting Your Personal Information (APP 12 and 13)
You have the right to request access to and correction of the personal information we hold about you by contacting our Privacy Officer in writing.
We will respond to your request within a reasonable period, generally within 30 days. We may need to verify your identity before providing access. If we decline a request for access or correction, we will give you written reasons and information about how to complain, except where it would be unreasonable to do so.
14. Handling Privacy Complaints
If you have a complaint about how we have managed your personal information, please contact our Privacy Officer (details in Section 16) in writing. We will investigate the matter promptly. If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner (OAIC) (https://www.oaic.gov.au/).
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The current version will always be published on this page with an updated effective date. Your continued use of our website or services after any change constitutes acceptance of the updated Policy.
16. Contact Information
Please direct all privacy-related inquiries, access or correction requests, or complaints to:
- Privacy Officer: The Privacy Officer, Business Nebula
- Email: hello@businessnebula.com.au
- Postal Address: 5/83 Payneham Road, St Peters SA 5069