Privacy policy

Who we are and what this policy covers

This policy covers personal information that Pylon Digital Pty Ltd collects through this website, our forms, email and discovery calls. In this policy, “we”, “us” and “our” mean Pylon Digital Pty Ltd, a company based in Melbourne, Victoria.

It explains how we handle personal information with reference to the Australian Privacy Principles (APPs): the 13 principles in the Privacy Act 1988 (Cth) that set rules for how organisations collect, use, disclose, secure and give access to personal information.

Personal information that we handle on behalf of client firms, inside the systems we build or run for them, is governed by our written agreement with that firm and by the firm’s own privacy policy, not by this policy.

What personal information do we collect?

We collect only the personal information you choose to give us, plus the limited technical information needed to deliver this website. Specifically:

• Contact form: your name, firm, work email and message, and, if you add them, your phone number and the service you are interested in, plus the page you sent the form from.
• Resource download form: your name, firm and work email, which of our templates and downloads you asked for, and whether you asked to receive email updates.
• Email and calls: whatever you include when you email us or speak with us, including on a discovery call.
• Technical information: when you load a page, our website host, Vercel, processes information such as your IP address, approximate location derived from it, browser and device details and the pages requested, so it can deliver the site and protect it from abuse.

We do not ask for sensitive information, such as health information or religious beliefs. Please do not include sensitive information or confidential client details in a message to us.

You can browse this website anonymously, and ask a general question without giving your full name, though we need a working email address to reply.

How do we collect personal information?

We collect most personal information directly from you: when you fill in a form, email or speak with us, attend a discovery call or meet us. Our host collects technical information automatically when you load a page.

Sometimes we receive your details from someone else, such as a referral partner or a colleague who refers you to us. If that happens, we tell you where we got your details when we first contact you.

Each form on this website shows a short collection notice that links to this policy.

Why do we collect, use and share it?

We use personal information to respond to you and to run our business, and only for the purpose we collected it for, a related purpose you would reasonably expect, or as the law allows. That means we use it to:

• reply to your enquiry and arrange a discovery call;
• give you the resource you asked for, and follow up about it;
• send you news and guides by email, if you have asked to receive them;
• prepare proposals and manage our relationship if your firm becomes a client;
• operate, secure and improve this website; and
• meet our legal, tax and accounting obligations.

If you do not give us the details a form asks for, we may not be able to reply to you or give you the resource.

Will we send you marketing emails?

Only if you have asked to receive them. On our download form, you choose whether to receive updates by ticking an optional box, which is unticked by default. Asking about our services through the contact form does not sign you up.

Every marketing email we send identifies Pylon Digital, includes a working unsubscribe link and is sent in line with the Spam Act 2003 and the ACMA’s guidance. We action unsubscribe requests within five business days, and you never pay to opt out.

Do we make automated decisions about you?

No. We do not use computer programs to make decisions about you that could reasonably be expected to significantly affect your rights or interests. From 10 December 2026, the Privacy Act requires privacy policies to explain this kind of automated decision-making, and we will update this section before we start any.

Our responsible AI statement explains how we use AI in our own work and in the systems we build for clients.

Who do we share personal information with?

We share personal information only with the service providers that help us run this website and our business, with our professional advisers, and where the law requires or allows it. We do not sell personal information. The people we share it with are:

• Vercel Inc., which hosts this website. Form submissions are processed by a Vercel Function in its Sydney region before being forwarded to the tools we use to manage enquiries. Vercel keeps limited request logs for security and troubleshooting under its own terms.
• Business software providers that we use to receive and manage enquiries, send and store email, and schedule calls. If you ask, we will tell you which providers hold your information.
• Professional advisers, such as our lawyers, accountants and insurers, when they need it to advise us.

We may also disclose personal information where the law requires or authorises it, for example to comply with a court order or a lawful request from a regulator.

Do we send personal information overseas?

Some personal information may be disclosed outside Australia, because some of our service providers are based overseas or store or access data overseas. Vercel Inc., for example, is based in the United States, and other providers may store or access information in the United States or other countries.

Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles, as APP 8 requires. We do this by checking each provider’s data processing terms and security. Under the Privacy Act, we generally remain accountable if an overseas recipient mishandles that information.

How do we store and protect personal information?

We store personal information electronically with the service providers described above, and we take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, change or disclosure. This website is served over HTTPS. Our security and data residency page explains our wider approach.

We limit access to personal information to the people at Pylon Digital who need it, and we choose service providers with security controls suited to the information they hold.

We keep enquiry and download details only as long as we need them to deal with your enquiry and any relationship that follows, keep marketing contacts until you unsubscribe, and keep business records for as long as tax and corporations law require. After that, we delete or de-identify the information.

What happens if there is a data breach?

If a data breach involving your personal information is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, following the Notifiable Data Breaches scheme. We assess any suspected breach promptly, and within 30 days at most, and act straight away to contain it and reduce the harm.

Cookies, analytics and tracking

This website does not set cookies or store information in your browser. We do not use an analytics tool, we load no third-party trackers or social media pixels, and our fonts are served from our own site, so opening a page does not send your details to advertising networks. Spam protection on our forms uses a hidden field, not cookies or a challenge service.

We will update this policy, and ask for your consent where the law or good practice requires it, before any analytics or tracking is switched on.

How can you access or correct your personal information?

You can ask to see the personal information we hold about you, or ask us to correct it, by contacting us as described below. We will confirm your identity, then respond within a reasonable period. We aim to respond within 30 days.

We do not charge you for making a request or for correcting your information. If we refuse a request, which the law allows only in limited circumstances, we will tell you why in writing and explain how to complain.

How can you make a complaint?

If you think we have mishandled your personal information, please contact us first, in writing, with the details. We will acknowledge your complaint promptly, look into it and respond within 30 days.

If you are not satisfied with our response, or we have not responded within 30 days, you can complain to the OAIC:

• online at oaic.gov.au;
• by phone on 1300 363 992; or
• by post to GPO Box 5288, Sydney NSW 2001.

Changes to this policy

We update this policy when our practices change, for example before we add analytics, a website assistant or a new kind of service provider. The date at the top of this page shows when it was last updated.

How to contact us

For privacy questions, requests or complaints, contact Pylon Digital Pty Ltd, Melbourne, Victoria, through our contact form. Start your message with “Privacy request” so it reaches the right person, and we will reply by email.

For the rules on using this website, see our website terms of use.