Privacy Policy

About This Policy

This Privacy Policy describes how DigiU Pty Ltd (ABN 43 671 018 107) (“DigiU”) collects, uses, holds, and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Policy applies to all personal information collected through our website at digiu.com.au, our platforms (including Planify, CompliX, and Nova), and in the course of providing our professional services.

By accessing our website or engaging our services, you consent to the collection, use, and disclosure of your personal information as described in this Policy.

Who We Are

DigiU Pty Ltd is an Australian digital transformation and AI consulting company specialising in solutions for utility service providers, energy retailers, network operators, and financial services organisations.

Information We Collect

Personal Information

We may collect the following categories of personal information:

  • Identity information — name, job title, employer organisation
  • Contact information — email address, phone number, postal address
  • Account credentials — usernames, passwords (stored in encrypted form)
  • Professional information — industry, role, business requirements, and preferences
  • Communications — emails, support requests, form submissions, and correspondence
  • Payment information — billing details and payment records (card data processed by payment providers, not stored by DigiU)
  • Usage data — pages visited, features used, and actions taken on our platforms
  • Technical data — IP address, browser type, device identifiers, time zone, operating system
Sensitive Information

DigiU does not intentionally collect sensitive information unless necessary for a specific service with your explicit consent.

Client Data

In the course of delivering platform services such as Nova, DigiU may process personal information about your customers on your behalf as a data processor. We do not use client data for our own purposes.

How We Collect Information
  • Directly from you — When you fill in a contact form, request a demo, register for an account, or engage our services
  • Automatically — When you visit our website or use our platforms, through cookies and similar technologies
  • From third parties — Including business partners and referral sources, where permitted by law
  • Through service delivery — Information generated during the provision of our professional services
How We Use Your Information
Primary Purposes
  • Delivering and managing the services you have requested or contracted
  • Responding to your enquiries, requests, and support needs
  • Processing payments and managing billing
  • Creating and managing your account
  • Communicating with you about your account, services, and relevant updates
Secondary Purposes
  • Sending marketing communications about DigiU products and services (with your consent)
  • Improving and personalising our website and platforms
  • Conducting research and analytics to understand how our services are used
  • Complying with legal and regulatory obligations
  • Detecting and preventing fraud, security incidents, and misuse

DigiU will not use your personal information for purposes unrelated to the primary purpose of collection unless you have consented, or an exception under the Privacy Act applies.

Disclosure of Your Information

DigiU does not sell your personal information to third parties. We may disclose your information to trusted service providers, where required by law, or in connection with a business transfer. All service providers are required to handle personal information confidentially.

Cookies and Tracking Technologies
  • Essential cookies — Required for core website functionality such as login sessions and security. Cannot be disabled.
  • Analytics cookies — Help us understand how visitors interact with our site. Data is aggregated and anonymised.
  • Functional cookies — Remember your preferences and settings to improve your experience.
  • Marketing cookies — Used to deliver relevant advertising and measure campaigns (only with consent).

You can manage cookies through your browser settings. Login cookies persist for two days (or two weeks if you select “Remember Me”).

Data Storage and Security
  • Encryption in transit using TLS 1.2 or higher
  • Encryption at rest using industry-standard methods
  • Role-based access controls and least-privilege principles
  • Multi-factor authentication for all system access
  • Continuous monitoring and intrusion detection
  • Regular security assessments and vulnerability testing

While we take reasonable steps to protect your information, no method of transmission over the internet is 100% secure.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law (e.g. tax records — minimum 7 years). When no longer required, we will take reasonable steps to destroy or de-identify it securely.

Your Rights and Choices

Access and Correction

You may request access to the personal information we hold about you, and request correction of any inaccurate or out-of-date information. We will respond to access requests within 30 days.

Deletion

You may request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations.

Opt-Out

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting us at info@digiu.com.au.

Direct Marketing

DigiU may send you information about our products, services, and industry insights only where you have provided consent, or where we have an existing business relationship (as permitted under the Spam Act 2003 (Cth)). Every marketing communication includes a clear unsubscribe mechanism. We honour all opt-out requests within 5 business days.

Third-Party Links and Embedded Content

Our website may contain links to third-party websites or embed third-party content. These operate under their own privacy policies. DigiU is not responsible for third-party privacy practices.

Overseas Disclosure

DigiU may disclose personal information to overseas recipients (including in the United States and European Union) in connection with our third-party service providers. We take reasonable steps to ensure recipients handle information consistently with the Australian Privacy Principles.

Children's Privacy

DigiU’s services are directed at businesses and professionals and are not intended for individuals under 18. We do not knowingly collect personal information from children.

Changes to This Policy

DigiU may update this Privacy Policy from time to time. We will update the “Last Updated” date and post the revised Policy on our website. Material changes will be communicated to registered users by email.

Complaints

If you have a concern, please contact our Privacy Officer first. We will acknowledge within 5 business days and aim to resolve within 30 days. If not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC):

OAIC  |  oaic.gov.au  |  Phone: 1300 363 992  |  GPO Box 5218, Sydney NSW 2001

Contact Us

DigiU Pty Ltd — Privacy Officer

Let’s solve your toughest energy challenges.