Who we are
True North Digital Pty Ltd (“True North Digital”, “we”, “us”) is a digital marketing agency based at 114 Brougham Street, Potts Point NSW 2011, Australia. This policy explains what personal information we handle, why, and what you can do about it. It covers this website, our client portal at clients.truenorthdigital.com.au, and the reporting work we do for clients.
What we collect
When you contact us. The name, email address, phone number and message you send through a form on this site, or by email. We keep it so we can reply and so we have a record of the conversation.
When you apply for a job. Your name, contact details, CV and anything else you choose to send, plus your answers if you sit a skills assessment. We use it to assess your application and nothing else, and we keep unsuccessful applications for twelve months in case something else comes up, unless you ask us to delete them sooner.
When you use the client portal. Your name, work email address, the organisation you belong to and a record of what you did in the portal. Accounts are created by us or by your own organisation’s administrator; the portal is not open to the public.
When you visit this site. Standard technical information such as your IP address, browser and the pages you opened, used to keep the site working and to understand which pages are read. We do not build advertising profiles of visitors.
Data from platforms our clients connect
Most of what our clients see in the portal is their own business data, brought together from services they already use. A client, or someone authorised by them, grants us access to those accounts. In practice this means analytics and search reporting, business listings, advertising accounts, and social profiles on services such as Facebook, Instagram, TikTok, Pinterest, YouTube and LinkedIn.
The rules we hold ourselves to on that data:
We only ever read what the account holder has authorised, and only for the client whose account it is. We use it to produce that client’s reporting and recommendations, and for nothing else. We do not sell it, we do not share it with other clients, and we do not use it to train models or build audiences. Where a platform gives us a choice, we ask for read-only access. Access can be withdrawn at any time from inside the platform itself or by telling us, and when it is withdrawn we stop collecting immediately and delete the stored copy on request.
Some of this data includes personal information about a client’s own customers or audience — a comment on a post, for instance. We handle it on the client’s behalf, under their instructions, and we keep it inside their own workspace in the portal.
How we use personal information
To provide our services and report on them, to answer enquiries, to consider job applications, to run and secure the portal, to send service messages about work in progress, and to meet our legal and tax obligations. We send marketing email only to people who have asked for it or who are existing clients, and every one of those has an unsubscribe link that works.
Who else sees it
Our own staff and contractors, limited to what their job needs. The service providers that run our systems — hosting, databases, email delivery, analytics and the marketing platforms named above — which are bound to use the data only to provide their service to us. Professional advisers, and anyone we are legally required to disclose to. We do not sell personal information to anybody.
Where it is stored
Our portal and its database are hosted with providers who may store or process data outside Australia, including in the United States and the European Union. Where that happens we take reasonable steps to ensure the recipient handles the information consistently with the Australian Privacy Principles.
How we protect it
Access to the portal requires an account and, for our staff, two-factor authentication. Each client sees only their own data, enforced in the database rather than only in the interface. Credentials for connected platforms are held as access tokens, either in the deployment’s encrypted environment or in our database where no signed-in account can read them, never in documents or messages. We review who has access when someone joins or leaves.
How long we keep it
For as long as we need it for the purpose we collected it, and then for as long as the law requires us to keep records. Client reporting data is kept for the life of the engagement and removed on request when it ends.
Getting at your information
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email strategy@truenorthdigital.com.au and we will respond within 30 days. We may need to verify who you are first. There is no charge.
Complaints
If you think we have mishandled your personal information, tell us at strategy@truenorthdigital.com.au and we will look into it and write back. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We update this page when what we do changes. The date at the top is when it last changed.
Contact
True North Digital Pty Ltd
114 Brougham Street, Potts Point NSW 2011, Australia
strategy@truenorthdigital.com.au
+61 403 283 384
