Privacy Policy
1. About this policy
This policy explains how Bury Digital ("Bury Digital", "we", "us", "our") collects, uses, stores, and discloses personal information.
It applies to:
- Clients who engage us to build an automation system (a "Project")
- People whose personal information we access within a Client's own accounts while building and testing a Project
- Visitors to our website at bury-digital.com
We are committed to handling personal information in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth).
2. What personal information we collect
Client information
When you engage us for a Project, we collect:
- Business name, ABN, and trading name
- Your name, role, email address, and phone number
- Details of the work you want built and the tools involved
- Billing details (invoices are handled by us or our payment provider; we do not store full card numbers)
Information we access to build a Project
To build and test a Project, we may be given access to your own accounts and data (for example your CRM, inbox, spreadsheets, or automation platform). That data can include personal information about your customers or contacts — such as their names, contact details, and enquiry details.
For this data, you are responsible for it as the business that collected it; we handle it only on your instructions and only to deliver the Project. We do not use it for our own purposes, and we do not retain it beyond what is needed for the engagement (see Section 7).
Website visitor information
- IP address, browser type, device type
- Pages visited and time on page
- Information you provide if you contact us or book a call
- Cookies (see Section 11)
3. How we collect personal information
- Directly from you, when you contact us, book a call, or engage us for a Project.
- From your own accounts, where you give us access to build and test a Project.
- Automatically, when you visit our website.
We do not buy personal information from third parties.
4. Why we collect personal information
We collect and use personal information to:
- Scope, build, test, and hand over a Project
- Provide ongoing monitoring and changes where you take a Retainer
- Invoice you and process payments
- Communicate with you about your engagement
- Comply with our legal obligations
- Detect and prevent fraud or unlawful use
We do not sell personal information, and we do not use your data — or your customers' data — to train artificial intelligence models. Where a Project uses an AI feature, it runs through the provider's API (for example the Anthropic API), which under its commercial terms does not train models on data submitted via the API.
5. Who we share personal information with
We keep our use of third parties small. We may share personal information with:
- Service providers who help us operate — for example our website host and security provider (Cloudflare), and our payment/invoicing provider. These providers process only what is needed for their function.
- The tools you nominate — where a Project is built in your own accounts, data flows through the platforms you have chosen and given us access to. Those platforms are governed by your agreements with them.
- Government and law enforcement — where required by law.
- Professional advisors — our accountants or lawyers, under confidentiality.
- A successor entity — if we sell or restructure our business, subject to this policy.
We do not share personal information for marketing purposes.
6. International transfers
Some providers or tools involved in a Project may operate outside Australia (for example, an AI API or a cloud platform you use). Where personal information is handled overseas, we take reasonable steps to ensure it is handled consistently with the APPs. Because Projects are typically built in your own accounts, the location of your customers' data is generally determined by the tools you have chosen.
7. How long we keep personal information
- Data accessed to build a Project: we retain it only for the duration of the engagement and a short period afterwards for support, then delete or return our copies. Wherever possible, the data stays in your own accounts and we simply lose access on completion.
- Client and billing records: retained for at least 7 years to comply with Australian taxation law.
- Enquiry and prospect information: retained until you ask us to delete it.
8. How we protect personal information
We use reasonable technical and organisational measures to protect personal information, including encryption in transit, access on a least-privilege basis, and prompt removal of access when an engagement ends. More detail is at bury-digital.com/security.html.
No system is perfectly secure. If a notifiable data breach occurs, we will comply with the Notifiable Data Breaches scheme under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required, and assisting you to meet your own obligations for data in your accounts.
9. Your rights
Under Australian privacy law you have the right to access the personal information we hold about you, correct it, request its deletion (subject to our legal retention obligations), and complain about how we handle it.
If your request relates to information held in a Client's own accounts (for example, a message you sent to a business that engaged us), that business is responsible for it — please contact them first, and we will assist them as needed. To make a request to us, email the address in Section 12. We will respond within 30 days.
10. Complaints
If you believe we have mishandled your personal information, please contact us first (see Section 12). If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au · 1300 363 992.
11. Cookies and analytics
Our website uses essential cookies for site functionality and may use limited analytics to understand how visitors use the site. We do not use third-party advertising cookies or trackers.
12. Contact us
For privacy questions, requests, or complaints, email oscar@bury.com.au.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date reflects the most recent change.