Privacy Policy

Last updated: 15 September 2026

This policy explains how OTN Digital collects, holds, uses and discloses personal information through our website, our enquiry and booking forms, and our wider dealings with you.

1. Who we are

OTN Digital ("we", "us", "our") is a done-for-you digital marketing agency helping renovation and solar companies across Western Sydney generate qualified, quote-ready homeowner leads through Facebook and Instagram advertising, lead qualification and follow-up, operated in Penrith, Western Sydney, NSW.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You can contact us at any time at [email protected]

2. What personal information we collect

We collect the following kinds of personal information:

Enquiry and booking details — your name, email address, telephone number, and anything else you provide when you make an enquiry, book a call, or complete a form on our website.
Business information — the name and type of your business, its location, your role, and any details you choose to share about your requirements.
Technical information — your IP address, browser type, device information, referring pages and pages visited, collected through server logs, cookies and analytics tools.
Communications — records of our correspondence with you, including emails, messages, notes of calls and, where you have been told in advance and agreed, call recording
Billing and transaction information — where you become a client, the information needed to invoice you and process payments. Card details are handled by our payment provider and are not stored by us.

We do not seek to collect sensitive information (such as health information, race, religious beliefs or political opinions) and ask that you do not send it to us.

3. How we collect personal information

We collect personal information:

directly from you — when you complete a form, book a call, email or phone us, or engage us for services;
automatically — through cookies, server logs and analytics tools when you use our website (see section 9);
from third parties — including advertising and lead generation platforms (such as Meta), our booking and CRM providers, and publicly available business sources such as company registers, business websites and professional networking sites.

4. Why we collect, hold, use and disclose personal information

We use personal information to:

respond to enquiries and arrange and conduct consultations;
provide, manage and improve our services, and communicate with you about them;
prepare proposals, engagement documents and invoices, and take payment;
maintain business records and manage our relationship with you;
operate, secure, troubleshoot and improve our website;
send you marketing communications about our services, where permitted (see section 8);
comply with our legal obligations and deal with disputes.

We will only use or disclose your personal information for the purpose it was collected, a directly related purpose you would reasonably expect, a purpose you have consented to, or as otherwise required or authorised by law.

5. Anonymity and pseudonymity

You may deal with us anonymously or by pseudonym where it is lawful and practicable to do so — for example, when making a general enquiry. In most cases we will need your real name and contact details to provide a quote, hold a consultation or deliver our services.

6. Who we disclose personal information to

We may disclose personal information to:

service providers who help us run our business, including website hosting, email, CRM and booking software, cloud storage, analytics, advertising platforms, accounting and payment providers;
our professional advisers, including lawyers and accountants;
government agencies, regulators or law enforcement, where required or authorised by law;
a purchaser of our business or assets, in connection with a sale or restructure.

We require our service providers to handle personal information consistently with this policy and the Privacy Act, and to use it only for the purposes for which we provided it.

We do not sell your personal information.

7. Overseas disclosure

Some of our service providers store or process personal information outside Australia. Based on the tools we currently use, the countries in which those recipients are likely to be located are the United States (our website, CRM and booking platform, GoHighLevel, and our advertising and analytics providers, Meta and Google, are US-headquartered and generally process data there).

Before disclosing personal information overseas, we take steps that are reasonable in the circumstances to ensure the recipient handles it in a way consistent with the Australian Privacy Principles.

8. Direct marketing

We may send you marketing communications about our services where you have asked us about them, are a client, or have otherwise consented.

Every marketing email and SMS we send includes an unsubscribe facility, and we will action opt-out requests promptly, as required by the Spam Act 2003 (Cth). You can also opt out at any time by emailing [email protected]. Opting out of marketing does not stop us sending you communications necessary to provide services you have engaged us for.

You may also ask us to tell you where we obtained your information, and we will respond within a reasonable period unless it is impracticable or unreasonable to do so.

9. Cookies and tracking

Our website uses cookies and similar technologies (including Google Analytics and Google Tag Manager, and the Meta Pixel) to run the site, understand how visitors use it, and measure our advertising. Our embedded booking calendar (GoHighLevel) may also set its own cookies to manage your session and complete a booking.

Most browsers let you block or delete cookies through their settings, though this may affect how parts of the site — including the booking calendar — work. Where information collected through cookies identifies you or could reasonably identify you, we handle it in accordance with the rest of this policy.

10. Security and retention

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include access controls, encryption in transit, use of reputable service providers, and limiting access to staff and contractors who need it.

No system is completely secure, and we cannot guarantee the security of information transmitted to us over the internet.

We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as we are required to keep it by law (for example, tax and financial records generally must be kept for five years). When it is no longer needed, we destroy it or de-identify it.

11. Accessing and correcting your information

You may ask us for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Email [email protected].

We will respond within a reasonable period, and ordinarily within 30 days. We may need to verify your identity first. There is no charge for making a request, though we may charge a reasonable fee for the cost of providing access in some circumstances. If we refuse access or a correction, we will tell you why in writing and explain how to complain.

12. Complaints

If you think we have breached the Australian Privacy Principles or mishandled your personal information, please contact us first at [email protected] with details of your concern. We will acknowledge your complaint and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

Website: oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5288, Sydney NSW 2001

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised, and the current version is always available on our website. We encourage you to review it periodically.