Privacy Policy

1. Introduction and Data Controller

This Privacy Policy explains how NovaBridgeDigital ("we", "us", "our", or "the Company") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", or "users") who visit our website at novabridgedigital.cyou, use our gardening and outdoor maintenance services, or otherwise interact with our business.

NovaBridgeDigital is the data controller responsible for your personal information. We are committed to safeguarding the privacy of every person who engages with our platform, and we process personal data in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and where applicable, the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area.

Our registered business address is 100 Harris Street, Pyrmont NSW 2009, Australia. If you have any questions or concerns regarding the processing of your personal information, you may contact our privacy team at any time using the details provided in the Contact section at the end of this document.

By accessing our website or submitting your personal information through any of our forms, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, we ask that you refrain from using our website or submitting personal information to us.

2. What Data We Collect

We collect several categories of personal information depending on how you interact with our website and services. The types of data we may collect include the following:

2.1 Information You Provide Directly

• Full name — provided when you complete our quote request form or contact us directly
• Email address — used for communication regarding your service enquiry, booking confirmations, and follow-up correspondence
• Phone number — used to contact you about consultations, scheduling, and service-related updates
• Postcode — used to determine service availability in your area and to match you with local gardening professionals
• Service preferences — the type of gardening or outdoor service you have expressed interest in through our booking form
• Any additional information — such as garden photos, descriptions of your property, or special requests you voluntarily provide in messages to us

2.2 Information Collected Automatically

• IP address — your Internet Protocol address is recorded when you visit our website
• Browser type and version — including the operating system you are using
• Device information — such as screen resolution, device type (mobile, tablet, desktop), and language settings
• Pages visited and interaction data — which pages you view, how long you spend on each page, click patterns, and scroll depth
• Referral source — how you arrived at our website (search engine, direct link, social media, advertisement)
• Cookie identifiers — unique identifiers stored in cookies and similar technologies on your browser
• Date and time stamps — when you access or interact with our website

2.3 Information from Third-Party Sources

In some instances, we may receive information about you from third-party platforms if you interact with our advertisements on social media or search engines. This data is typically limited to the fact that you clicked on an advertisement and arrived on our website. We do not purchase or acquire personal contact details from third-party data brokers or list providers.

3. How We Collect Data

We collect personal information through the following methods and channels:

• Website forms — When you fill out our quote request form, contact form, or any other interactive form on our website, the information you enter is transmitted securely to our systems via encrypted HTTPS connections.
• Cookies and similar technologies — We use cookies, pixel tags, and local storage objects to collect usage data automatically when you browse our website. For full details on the cookies we use, please refer to Section 10 of this policy.
• Analytics tools — We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymous usage statistics, including pages viewed, session duration, and geographic region. This data is aggregated and does not personally identify individual users. Google's privacy practices are governed by their own privacy policy.
• Advertising pixels — If we run advertising campaigns on platforms such as Meta (Facebook and Instagram) or Google Ads, we may use tracking pixels that record when a user arrives on our website from an advertisement. These pixels help us measure the effectiveness of our marketing campaigns and may be used for retargeting purposes, subject to your cookie consent preferences.
• Email correspondence — When you send us an email directly, we collect the content of your message, your email address, and any attachments you include.
• Server logs — Our web hosting provider automatically records standard server log information, including IP addresses, request timestamps, HTTP status codes, and referring URLs. This data is used for security monitoring and technical troubleshooting.

4. Why We Collect Data (Legal Basis)

Under the Australian Privacy Principles and, where applicable, GDPR Article 6, we process your personal information on the following legal bases:

• Consent — Where you have given clear, informed, and voluntary consent for us to process your personal data for specific purposes. For example, when you submit our quote request form and tick the checkbox confirming agreement with this Privacy Policy, you are providing consent for us to use your contact details to respond to your enquiry. You may withdraw your consent at any time by contacting us.
• Contractual necessity — Where the processing of your data is necessary to fulfil a contract with you or to take pre-contractual steps at your request. When you book a gardening service through our platform, we need your name, contact information, and property location to deliver the service you have requested.
• Legitimate interest — Where we have a genuine and reasonable business interest in processing your data that does not override your fundamental rights and freedoms. Examples include improving our website experience based on usage analytics, preventing fraud, maintaining the security of our platform, and sending relevant service information to existing clients (with an opt-out option always available).
• Legal obligation — Where we are required by law to process or retain certain personal data. This includes tax record keeping, responding to lawful requests from government authorities, and complying with Australian consumer protection legislation.

5. How We Use Your Data

We use the personal information we collect for the following specific purposes:

• Service delivery — To respond to your quote requests, schedule consultations, coordinate gardening services, send booking confirmations, and provide post-service follow-ups.
• Communication — To contact you by email or phone regarding your enquiries, service updates, appointment reminders, and any changes to scheduled services.
• Marketing — Only where you have given explicit consent, we may send you occasional emails about seasonal gardening tips, new services, or promotional offers. Every marketing email includes a clear and functional unsubscribe link. We never send unsolicited marketing messages without prior opt-in consent.
• Website analytics and improvement — To analyse how visitors use our website, identify popular content, detect technical issues, and improve the overall user experience. This processing uses aggregated and anonymised data wherever possible.
• Advertising measurement — To measure the performance of our online advertising campaigns and understand which channels drive genuine enquiries. This helps us allocate our marketing budget effectively and avoid wasting resources on ineffective channels.
• Legal compliance — To comply with applicable Australian laws, including tax regulations, consumer protection laws, and any lawful requests from regulatory authorities or law enforcement agencies.
• Security and fraud prevention — To protect our website, systems, and users from unauthorised access, spam submissions, and fraudulent activity.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Below are the specific retention periods we apply to different categories of data:

Once the applicable retention period expires, we securely delete or anonymise your personal data so that it can no longer be associated with you. If deletion is not immediately possible due to technical constraints (such as data stored in backup systems), we ensure the data remains protected and isolated from further processing until deletion can be completed.

7. Data Sharing and Third Parties

We value your trust and do not sell, rent, lease, or trade your personal information to any third party for their own marketing purposes. We may share your information only with the following categories of recipients, and only to the extent necessary:

• Service delivery partners — Qualified gardening and landscaping professionals who are engaged to perform services at your property. They receive only the information necessary to complete the job (your name, contact details, property location, and service requirements).
• Web hosting and infrastructure providers — Our website is hosted on secure servers provided by reputable hosting companies. These providers may have access to server log data as part of their infrastructure management duties and are bound by strict data processing agreements.
• Analytics providers — We use Google Analytics to collect anonymised usage statistics. Google processes this data under its own data processing terms and privacy commitments.
• Advertising platforms — If you arrive at our website via an advertisement on Google, Facebook, or Instagram, conversion tracking data may be shared with those platforms to measure campaign performance. This data is typically limited to the fact that a conversion event occurred and does not include your personal contact details.
• Payment processors — If you make a payment for services, the transaction is processed by a PCI-DSS compliant payment provider. We do not store your full credit card or bank account details on our systems.
• Legal and regulatory authorities — We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request.
• Professional advisors — Including accountants, auditors, and legal counsel, where disclosure is necessary for us to obtain professional advice or to comply with our legal obligations.

All third parties who receive personal data from us are contractually required to handle that data in accordance with applicable privacy laws and to use it solely for the purpose for which it was shared. We conduct due diligence on our service providers and require them to maintain appropriate security measures.

8. International Data Transfers

NovaBridgeDigital is based in Australia and primarily processes personal data within Australian territory. However, some of our third-party service providers (such as Google for analytics and cloud infrastructure) may process data in locations outside Australia, including the United States, the European Union, and other jurisdictions.

Where personal data is transferred outside of Australia, we take reasonable steps to ensure it is protected in accordance with the Australian Privacy Principles. Specifically, we ensure that receiving parties are subject to laws or contractual obligations that provide comparable privacy protections, or that other appropriate safeguards are in place.

For individuals located in the European Economic Area (EEA), any transfers of personal data outside the EEA are conducted under appropriate legal mechanisms, including Standard Contractual Clauses approved by the European Commission or reliance on an adequacy decision where available. If you would like more information about the safeguards we use for international data transfers, please contact us using the details in Section 13.

9. Your Rights

Under the Australian Privacy Act and, where applicable, GDPR Articles 15 through 22, you have the following rights regarding your personal information:

• Right of access — You have the right to request a copy of the personal information we hold about you and to obtain information about how we process it.
• Right to rectification — If any personal data we hold is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it.
• Right to erasure (right to be forgotten) — You may request that we delete your personal data where there is no compelling legal reason for us to continue processing it. This includes situations where the data is no longer necessary for the purpose it was collected, or where you withdraw your consent.
• Right to restriction of processing — You may request that we limit the way we use your data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interest.
• Right to data portability — Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to object — You have the right to object to the processing of your personal data where we rely on legitimate interest as the legal basis, including objecting to direct marketing at any time.
• Right to withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint — If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or with the relevant supervisory authority in your jurisdiction if you are located in the EEA.

To exercise any of these rights, please contact us at [email protected]. We aim to respond to all legitimate requests within 30 days. In certain circumstances (such as complex or multiple requests), we may need additional time, in which case we will notify you of the extension and the reasons for the delay.

We may ask you to verify your identity before fulfilling your request to ensure we do not disclose personal data to an unauthorised person. We will not charge a fee to process your request unless it is manifestly unfounded, repetitive, or excessive.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site usage, and support our marketing activities. A cookie is a small text file that is placed on your device when you visit a website. Below is a breakdown of the types of cookies we use:

10.1 Essential Cookies

These cookies are strictly necessary for the operation of our website. They enable core functionality such as remembering your cookie consent preference and maintaining secure sessions. Without these cookies, certain parts of the website cannot function properly. Essential cookies do not require your consent and cannot be disabled.

• nb_cookie_consent — Stores your cookie acceptance or rejection preference. Duration: 1 year.

10.2 Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting information about pages visited, time spent on pages, bounce rates, and traffic sources. The data collected is aggregated and anonymised. We use Google Analytics for this purpose.

• _ga — Distinguishes unique users. Duration: 13 months.
• _ga_[ID] — Maintains session state. Duration: 13 months.

10.3 Marketing Cookies

If we run advertising campaigns, marketing cookies may be placed by third-party advertising platforms (such as Google Ads or Meta) to measure conversions and enable retargeting. These cookies track whether you arrived at our website through an advertisement and help us measure campaign performance. Marketing cookies are only activated if you provide consent via our cookie banner.

10.4 Managing Your Cookie Preferences

When you first visit our website, a cookie consent banner appears allowing you to accept or reject non-essential cookies. You can change your cookie preferences at any time by clearing your browser cookies and revisiting our site, which will trigger the banner again. You can also control cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of certain website features. For more information about managing cookies, visit allaboutcookies.org.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect, solicit, or process personal information from children under 16 years of age. Our quote request form and booking services are intended for use by adults who are property owners or authorised tenants seeking gardening and outdoor maintenance services.

If we become aware that we have inadvertently collected personal information from a child under 16, we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technical capabilities. When we make changes, we will revise the "Last Updated" date at the top of this page.

For minor changes that do not materially affect your rights, we will update the policy on this page without individual notification. For material changes that significantly alter how we collect, use, or share your personal information, we will take reasonable steps to notify you in advance. This may include displaying a prominent notice on our website or, where we have your email address and appropriate consent, sending you an email notification at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of our website after any changes to this policy constitutes acceptance of the updated terms.

13. Contact Details

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact our privacy team using the details below:

We aim to respond to all privacy-related enquiries within 30 days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC). You can find their contact details and complaint process at oaic.gov.au.