Privacy Policy

Privacy Policy — Digital Nexus Podcast

This Privacy Policy explains how **\[Your Company / “we”, “our”, “us”]** collects, uses, discloses, and safeguards personal information when you visit **\[your domain]**, engage with our podcast/content, subscribe to updates, contact us, or interact with our services (together, the “Services”).

> We are based in Australia and handle personal information in accordance with the **Privacy Act 1988 (Cth)** and the **Australian Privacy Principles (APPs)**. Where relevant, we also outline rights under the **EU/UK GDPR** and **California CCPA/CPRA**.

1) Who we are & how to contact us

Entity: Digital Nexus Podcast
Email: privacy@digitalnexuspodcast.com

2) What we collect

We collect information that you provide directly and information collected automatically.

Information you provide

Contact details (name, email, company, role).
Account and newsletter details (preferences, topics).

Information collected automatically

From third parties

Analytics & marketing platforms (e.g., Google/YouTube, LinkedIn, X/TikTok).
Email & CRM providers (subscription status, engagement).
Payment or e-commerce platforms (if applicable) — we do not store full payment card details.
Public sources (your public social profile or website if you share or tag us).

3) Why we use your information (purposes)

Provide & operate the website, feeds, players, and features.
Deliver content (podcast episodes, transcripts, show notes, newsletters).
Communicate with you (service notices, replies, customer support).
Marketing (updates, launches, event invites). You can unsubscribe anytime.
Analytics & improvement (measure performance, fix bugs, improve UX).
Moderation & safety (detect spam/abuse, protect against fraud/security incidents).
Legal & compliance (record-keeping, responding to lawful requests).
Giveaways/events (run promotions, verify eligibility, deliver prizes).

If you are in the EEA/UK (GDPR): Our legal bases may include consent, contract necessity, legitimate interests (e.g., site security, analytics, reasonable B2B outreach), and legal obligations. You can object to processing based on legitimate interests at any time.

4) Cookies & tracking

We use cookies and similar technologies to:

Essential: deliver the site and keep you logged in.
Analytics: understand usage and improve performance.
Functionality: remember preferences (e.g., volume, theme).
Marketing: measure campaign effectiveness and (where allowed) show relevant content.

You can manage cookies via our Cookie Settings (banner or footer link) and your browser settings. If you use a Global Privacy Control (GPC) signal, we treat it as a request to opt out of targeted advertising where required.

5) Analytics, embeds & third-party services

Analytics: We may use services like Google Analytics or equivalent privacy-respecting tools to measure traffic and performance.

Embeds: Our pages may embed third-party players (e.g., YouTube), social posts, maps, or forms. These providers may set their own cookies and collect data per their policies.

Email & CRM: Newsletter and form submissions may be processed by reputable email/CRM providers.
Advertising/retargeting: We may use pixels (e.g., LinkedIn/TikTok) for aggregated insights and to reach audiences. Where required, we will obtain your consent first.

6) AI features & automated processing

We may use AI services (e.g., transcription, summarisation, moderation, spam filtering, content recommendations) to support the Services. Where possible, we minimise personal data sent to AI providers, apply access controls, and use regional processing options when available. We do not use solely automated decisions that have legal or similarly significant effects without human review.

7) Disclosures to others

We share personal information only as needed:

Service providers/Processors (hosting, security/CDN, email, analytics, survey tools, event platforms, payment/e-commerce).
Professional advisors (legal/accounting) under confidentiality.
Business transfers (e.g., merger/acquisition) with continuity safeguards.
Legal compliance (lawful requests, to protect rights, safety, or prevent fraud).

We do not sell your personal information. We do not share personal information for cross-context behavioural advertising without your opt-in where required.

8) International transfers

We may process/store data in Australia and other countries where our providers operate (e.g., the EU, UK, US, APAC). For GDPR transfers, we rely on appropriate safeguards such as Standard Contractual Clauses and implement technical/organisational measures.

9) Data retention

We keep personal information only as long as needed for the purposes above, then delete or de-identify it. Typical examples:

Contact/CRM records: up to 3 years after last meaningful interaction.
Newsletter data: until you unsubscribe or your address bounces.
Analytics logs: typically 14–26 months (provider defaults) unless aggregated sooner.
Legal/financial records: as required by law (e.g., 5–7 years).

10) Security

We use reasonable administrative, technical and physical safeguards (encryption in transit, access controls, least-privilege, logging, vulnerability management). No method is 100% secure; if a breach occurs, we will notify affected individuals and regulators as required.

11) Your rights & choices

# Australia (APPs)

Access & correction: You may request access to, or correction of, your personal information.
Complaints: Contact us first. If unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

# EEA/UK (GDPR)

Rights: access, rectification, erasure, restriction, portability, and objection; withdraw consent at any time.
Complaints: You may contact your local data protection authority.
Representative/DPO: \[If applicable, insert EU/UK representative or DPO details.]

# California (CCPA/CPRA)

Rights: know (access), delete, correct, opt out of sale/share, and limit use/disclosure of sensitive personal information.
Do Not Sell/Share: We do not sell personal information. To opt out of share/targeted advertising where applicable, use Cookie Settings or send a request.

How to exercise your rights: Email privacy@\[yourdomain] with your request, your region, and proof of identity. We will respond within the required timeframes.

12) Children’s privacy

Our Services are not directed to children under 16. We do not knowingly collect personal information from children under applicable age thresholds. If you believe a child has provided personal information, contact us to delete it.

13) Third-party links

Our site may link to third-party websites. Their privacy practices are their own; please review their policies.

14) Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date shows the latest version. Material changes will be highlighted on this page and/or via notice where appropriate.

15) Contact & complaints

Questions, requests, or complaints:

Email: privacy@digitalnexuspodcast.com*
If you are in Australia and are not satisfied with our response, you may contact the OAIC. If you are in the EEA/UK, you can contact your data protection authority.

# Region-specific disclosures (summary)

Australia: We comply with the APPs (open & transparent management of information, access/correction rights, direct marketing rules, cross-border disclosure safeguards).

EEA/UK: We identify lawful bases, honour GDPR rights, and use SCCs for transfers.
California: We honour CCPA/CPRA rights; we do not sell personal information.