Privacy Policy

01About this policy

This policy applies to Digi Agency Pty Ltd (ABN 73 666 114 129) of 11 Engineering Street, Salisbury, Queensland 4107 (“Digi”, “we”, “us”). It covers our website, our services, the advertising and lead generation campaigns we run, and any other way you deal with us.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We also comply with the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth) when we send marketing messages.

02Our two roles

We handle personal information in two different ways, and it helps to know which applies to you.

• For ourselves. When you contact Digi, become a client, apply to work with us or browse our website, Digi decides how your information is used, and this policy applies in full.
• For our clients. When you respond to an ad or form we run for one of our clients (for example, enquiring about a membership at a gym), you are dealing with that business. We handle your details on their behalf and on their instructions so their team can follow up with you. That business’s own privacy policy also applies, and you can contact them directly about your information.

03What we collect

We only collect what we reasonably need. Depending on how you deal with us, this may include:

• Contact details such as your name, email address, phone number and business name.
• Enquiry details such as the service you are interested in, your message, and answers you give in a form, including forms we run for our clients.
• Client and supplier information such as business details, billing contacts, account access we need to run your campaigns, and records of our work together.
• Payment information. Payments are processed by our payment and accounting providers. We do not store full card numbers.
• Photos and video captured at content shoots, with the consent of the people featured.
• Technical and usage data such as your IP address, device and browser type, pages viewed and how you arrived at our site.
• Job applications such as your resume and referee details, if you apply to work with us.

Sensitive information

We do not ask for sensitive information such as health details. If a form we run for a client asks about something sensitive (for example, fitness goals or injuries for a gym), we only collect it with your consent and only pass it to that client so they can help you.

Staying anonymous

You can browse our website and ask general questions without telling us who you are. We will need your contact details to respond to an enquiry or provide a service.

04How we collect it

• Directly from you through our website forms, email, phone, SMS, Messenger and in person.
• Through advertising platforms such as Meta (Facebook and Instagram) lead forms and Google, when you respond to a campaign.
• Through cookies and similar technology on our website (see section 07).
• From our clients, when they give us access to their accounts, systems or customer lists so we can run their marketing.
• From public sources such as business directories and websites, for business contact details.

If we receive personal information we did not ask for, we will destroy or de-identify it if we are not allowed to keep it.

05How we use it

We will only use your information for another purpose if you agree, if you would reasonably expect it, or if the law allows or requires it.

06Marketing messages

We may send you updates, insights and offers about our services if you have agreed to receive them, or where the law allows. Every email includes an unsubscribe link and every SMS lets you opt out (for example, by replying STOP). We act on opt-outs promptly and do not call numbers on the Do Not Call Register unless the law allows it.

Follow-up messages you receive after enquiring with one of our clients are sent on that client’s behalf. You can opt out of them in the same way.

07Cookies, pixels and analytics

Our website uses cookies and similar tools to work properly, understand how it is used, and measure our advertising. These include:

• Analytics, such as Google Analytics, to understand visits and improve the site.
• Advertising pixels and tags, such as the Meta Pixel and Google Ads tags, to measure campaign results and show relevant ads to people who have visited.
• Security and embedded content, such as Google reCAPTCHA on our forms and embedded social feeds.

You can block or delete cookies in your browser settings, change your ad preferences in your Meta and Google accounts, and opt out of Google Analytics using Google’s browser add-on. Some parts of the website may not work as intended if you block all cookies.

08Automated decisions and AI

From 10 December 2026, Australian privacy law requires businesses to explain when computer programs use personal information to make, or substantially help make, decisions that could significantly affect someone’s rights or interests.

• Advertising delivery. Platforms such as Meta and Google use automated systems to decide who sees an ad, based on the targeting we set and the data those platforms hold.
• Lead routing and follow-up. When you enquire, automated tools send your details to the right team and trigger follow-up messages.
• AI-assisted work. Our team uses AI tools to help draft content, analyse campaign results and prepare reports. A person reviews this work before it is used.

09Who we share it with

• The client you enquired with, so their team can follow up with you.
• Service providers who help us run our business, such as advertising platforms (Meta, Google), website hosting and security, form and automation tools, email and SMS platforms, cloud storage, and accounting software.
• Professional advisers such as our accountants, lawyers and insurers.
• Government and regulators when the law requires or allows it.
• A buyer or successor if our business is sold or restructured, under confidentiality obligations.

10Overseas storage

Some of the providers we use store or process information outside Australia, most commonly in the United States and Europe. Before we disclose personal information overseas, we take reasonable steps to make sure the recipient protects it in a way that is consistent with the APPs, for example by choosing reputable providers with strong security and privacy commitments.

11Security and retention

We protect personal information with technical and organisational measures, including:

• Restricting access to the people who need it, with individual logins and two-factor authentication on our key systems.
• Using encrypted connections (HTTPS) on our website and reputable, secure software providers.
• Peer-reviewing campaign set-ups before they go live, and training our team on privacy and security.

We keep personal information only for as long as we need it for the purposes in this policy or as the law requires. After that, we securely delete it or de-identify it.

If something goes wrong

If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme, and tell you what you can do to protect yourself.

12Your rights

• Access. Ask for a copy of the personal information we hold about you.
• Correction. Ask us to fix anything that is wrong, out of date or incomplete.
• Deletion. Ask us to delete your information where we no longer need to keep it.
• Opt out. Stop marketing messages at any time.

We will respond within 30 days. We do not charge for a request, although we may charge a reasonable cost for providing access if the request is large. If we cannot do what you ask, we will explain why in writing. For information we hold on behalf of a client, we may refer you to that client or work with them to respond.

13Children

Our services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16 without a parent or guardian’s consent. We will follow the Children’s Online Privacy Code once it takes effect.

14Complaints

If you are concerned about how we have handled your personal information, please contact our Privacy Officer using the details below. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

15Changes and contact

We review this policy at least once a year and whenever our practices or the law change. The latest version will always be on this page, with the date it was last updated.