Contents
- 1. About this policy
- 2. The information we collect
- 3. How we collect your information
- 4. Why we collect and use your information
- 5. Cookies, analytics and your choices
- 6. When we disclose your information
- 7. Overseas disclosure
- 8. How we store and secure your information
- 9. How long we keep your information
- 10. Automated decision-making and artificial intelligence
- 11. Direct marketing
- 12. Your rights under the Australian Privacy Principles
- 13. Data breaches
- 14. Governing law
- 15. How to contact us and make a complaint
- 16. Children's privacy
- 17. Changes to this policy
Legal document
Privacy Policy
- Issued by
- The Trustee for Australian Business Trust · ABN 13 744 838 758 · Trustee ACN 658 447 280
- Version
- 1.7
- Status
- Approved
- Approved on
- 9 September 2026
- Approved by
- Cameron Young, Chief Executive Officer
1. About this policy
This Privacy Policy explains how National Digital (ABN 13 744 838 758) ("National Digital", "we", "us" or "our") collects, uses, discloses and protects your personal information. We are based on the Gold Coast, Queensland, and we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy applies to our website and the services we provide. By using our website or providing us with your personal information, you agree to the handling of your information as described here. If you do not agree, please do not use the website or submit your information to us.
2. The information we collect
The kinds of personal information we may collect include:
- Contact details, such as your name, email address and phone number;
- Business information, such as your organisation, role and Australian Business Number where relevant;
- The content of any enquiry, message or request you send us;
- Technical information collected automatically when you visit the website, such as your IP address, device and browser type, and pages viewed; and
- Cookie and analytics data, as described in section 5.
We do not seek to collect sensitive information (as defined in the Privacy Act) through the website. Please do not send us sensitive information unless we specifically request it.
3. How we collect your information
Where it is reasonable and practicable, we collect personal information directly from you — for example, when you complete our contact form, book a call, or email or phone us. We also collect some technical information automatically through cookies and analytics when you use the website, and we may receive information from the third-party service providers listed in section 5.
4. Why we collect and use your information
We collect, hold, use and disclose personal information for purposes connected with our business, including to:
- Respond to your enquiries and provide the services you request;
- Operate, maintain, secure and improve our website;
- Understand how the website is used, so we can make it better (analytics, on an opt-out basis);
- Send you information or updates you have asked to receive; and
- Meet our legal and regulatory obligations.
We only collect personal information that is reasonably necessary for these functions and activities, consistent with the Australian Privacy Principles.
5. Cookies, analytics and your choices
Our website uses cookies and similar technologies. Cookies that are strictly necessary for the website to work and to keep it secure are always active. Analytics cookies, which help us measure how the website is used, are switched on by default so we can understand and improve the site — but you can switch them off at any time.
When you first visit, we show you a notice about our use of cookies. Analytics runs from that first visit unless you opt out. You can opt out — or change any earlier choice — at any time using the Cookie Settings link in the footer of every page. When you opt out, Google Analytics 4 stops setting analytics cookies and runs in Consent Mode without them. Your choice is remembered on your device, and strictly necessary cookies stay active either way.
Marketing cookies are a separate choice from analytics. They are switched on by default and measure our advertising, so we can tell which campaigns produce enquiries. You can switch them off at any time using the Cookie Settings link in the footer. When you switch them off, the LinkedIn and ChatGPT advertising tags are not loaded, and we do not report your enquiry to any advertising platform.
When you submit an enquiry or book a call and marketing measurement is switched on, we tell the advertising platform that an enquiry happened. What we send is your email address in an irreversible hashed form, together with the anonymous click reference that platform placed on your visit. We do not send the content of your enquiry, your name or your phone number. The advertising platforms we use this way are Google Ads, LinkedIn Ads and ChatGPT Ads. LinkedIn also offers its own advertising controls in your LinkedIn account settings, which apply wherever you see LinkedIn advertising.
The following third parties may be loaded by the website. Each entry shows what it does, the cookies it may set, and where the provider processes data:
Third-party services we use
The table below is generated automatically from our internal service registry, so it always reflects the third parties this site can load, the category each falls under, and the cookies it may set.
| Service | Purpose | Category | Cookies | Data location |
|---|---|---|---|---|
| Calendly Calendly LLC | Provides the embedded meeting-scheduling widget. It loads only when you choose to book a call, so it is only ever activated at your explicit request. | Strictly necessary | _calendly_session | United States |
| ChatGPT Ads Measurement Pixel OpenAI OpCo, LLC | Measures enquiries that begin with one of our ads in ChatGPT, so we can tell which advertising produced an enquiry. It runs by default; switching Marketing off in Cookie Settings stops it loading. | Marketing | None | United States |
| Cloudflare Web Analytics Cloudflare, Inc. | Counts how often each page is opened, so we can see which pages are read. It sets no cookie, keeps no identifier for a visitor and builds no profile. The count is of page views, and no visitor can be picked out of it. | Strictly necessary | None | Global — Cloudflare edge network |
| Formspree Formspree, Inc. | Delivers contact-form submissions to National Digital. Only processes data you choose to submit through the form. | Strictly necessary | None | United States |
| Google Ads Google LLC | Measures the effectiveness of our Google Ads campaigns by recording when a contact-form submission or booking follows an ad click (conversion tracking), and improves match accuracy using a hashed email (Enhanced Conversions). This lets us attribute enquiries to campaigns and spend our ad budget more efficiently. Conversions are measured through Google Analytics 4 and imported into Google Ads; no separate advertising tag is loaded. | Marketing | _gcl_au, IDE | United States |
| Google Analytics 4 Google LLC | Measures aggregate site usage and Core Web Vitals to help us improve the site. Analytics runs by default on an opt-out basis; when you switch it off via Cookie Settings it runs in Consent Mode with no cookies. | Analytics | _ga, _ga_<container-id> | United States |
| Google Fonts Google LLC | Serves the web fonts used across the site's typography. | Strictly necessary | None | United States |
| Google reCAPTCHA v3 Google LLC | Protects the contact form from spam and abuse. Loads only when a form is used and is required for the form to be submitted securely (legitimate interest). | Strictly necessary | _GRECAPTCHA | United States |
| LinkedIn Insight Tag LinkedIn Ireland Unlimited Company | Measures enquiries that begin with one of our ads on LinkedIn, so we can tell which advertising produced an enquiry, and reports the professional demographics of the people who visit after seeing an ad. It runs by default; switching Marketing off in Cookie Settings stops it loading. | Marketing | li_fat_id, nd_li_fat_id, bcookie, li_sugr, lidc, li_gc, UserMatchHistory, AnalyticsSyncHistory, lms_ads, lms_analytics | United States and Ireland |
6. When we disclose your information
We may disclose your personal information to:
- Our personnel and contractors, where they need it to perform their role;
- Third-party service providers who support our website and business — including hosting, analytics, form delivery, scheduling and security providers (see section 5); and
- Government, regulatory or law-enforcement bodies where we are required or authorised by law to do so.
We do not sell your personal information.
7. Overseas disclosure
Some of our service providers are located outside Australia. In particular, the third parties listed in section 5 — Google (fonts, analytics, reCAPTCHA security and advertising), Formspree (contact-form delivery), Calendly (meeting scheduling), OpenAI (ChatGPT advertising measurement) and LinkedIn (advertising measurement) — process data in the United States, and LinkedIn also processes data in Ireland. Before disclosing personal information to an overseas recipient, we take steps that are reasonable in the circumstances to ensure the recipient handles it consistently with the Australian Privacy Principles, as required by APP 8.
8. How we store and secure your information
We take reasonable technical and organisational steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, as required under the Australian Privacy Principles. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. How long we keep your information
We keep personal information only for as long as it is reasonably needed for the purposes described in this policy, or for as long as we are required to keep it by law. When we no longer need it, we take reasonable steps to destroy or de-identify it.
10. Automated decision-making and artificial intelligence
If we use automated systems, including artificial intelligence, to make a decision that has a legal or similarly significant effect on you, we will tell you clearly and give you a way to request human review of that decision.
11. Direct marketing
We will only send you marketing communications where we are permitted to do so. Every marketing message will include a simple way to opt out, and you can also contact us at any time to unsubscribe. We handle electronic marketing consistently with the Australian Privacy Principles and the Spam Act 2003 (Cth).
12. Your rights under the Australian Privacy Principles
Under the Privacy Act you may:
- Ask for access to the personal information we hold about you (APP 12);
- Ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13);
- Ask us to stop sending you direct marketing; and
- Opt out of analytics cookies, or withdraw any consent you have given, at any time.
To make a request, contact our Privacy Officer using the details in section 15. We will respond within a reasonable time, generally within 30 days. There is normally no charge to make a request, although we may charge a reasonable amount to cover the cost of giving access in some cases.
13. Data breaches
If a data breach occurs that is likely to result in serious harm to any individual whose personal information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.
14. Governing law
Your rights, and our obligations, are governed solely by Australian law — the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy is governed by, and will be interpreted in accordance with, the laws of Queensland and the Commonwealth of Australia. As a matter of good practice, we aim to meet a high standard of data protection rather than only the legal minimum.
15. How to contact us and make a complaint
If you have any questions about this policy, wish to exercise a right, or would like to make a complaint about how we have handled your personal information, please contact our Privacy Officer:
Privacy Officer, National Digital
Email: privacy@nationaldigital.com.au
We will acknowledge your complaint and respond within a reasonable time, generally within 30 days. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by phone on 1300 363 992.
16. Children's privacy
Our website is intended for a business audience and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.
17. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The current version is always published on this page, with the effective date shown as the "Last modified" date. We encourage you to review it periodically.