DZN Group Pty Ltd (ABN 77 282 349 431) trading as Dizian Digital Last Updated: 21/2/2026 | Effective Date: 21/2/2026
1.1 About This Policy
This Privacy Policy sets out how DZN Group Pty Ltd (ABN 77 282 349 431) trading as Dizian Digital (“Dizian Digital”, “we”, “us”, or “our”) collects, uses, holds, discloses, and otherwise manages personal information in the course of our business operations.
1.2 Legal Framework
This Privacy Policy is governed by the Privacy Act 1988 (Cth) (“Privacy Act”) and the 13 Australian Privacy Principles (“APPs”) contained in Schedule 1 of the Privacy Act. We are committed to compliance with the APPs in all aspects of our personal information handling practices.
1.3 Scope of Application
This Privacy Policy applies to:
(a) visitors to our website at dizian.com.au (“Website”);
(b) clients who engage us for digital marketing, search engine optimisation, website development, and related services under our Master Services Agreement (“MSA”) or any Statement of Work (“SOW”); and
(c) all other individuals whose personal information we collect or handle in the course of our business, including subcontractors, prospective clients, and individuals whose personal information is provided to us as part of Client Materials.
1.4 Integration with Our Legal Framework
This Privacy Policy is incorporated by reference into Dizian Digital’s Master Services Agreement. Where a client has executed an MSA or Summary of Master Services Agreement with us, the handling of personal information in connection with those services is governed by this Privacy Policy and the applicable MSA. This Privacy Policy should be read in conjunction with the MSA and any applicable SOW.
1.5 Anonymity and Pseudonymity
Where it is lawful and practicable to do so, we offer individuals the option of interacting with us anonymously or using a pseudonym. This option is available in limited circumstances, such as general enquiries submitted through our Website contact form. However, clients engaging us for professional services under the MSA must identify themselves for the purposes of entering into and performing a legally binding contract, including for billing and compliance purposes.
1.6 Historical Application
This Privacy Policy applies to all personal information held by Dizian Digital, including information collected by our predecessor entities Dizian Limited (New Zealand) and our former sole trader operations. This is consistent with the historical application provisions of our Master Services Agreement.
1.7 Children’s Privacy
Our services are directed to businesses and adult individuals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.
2.1 General
The kinds of personal information we collect depend on the nature of your interaction with us. We collect only the personal information that is reasonably necessary for our business functions and activities, as outlined in this Section 2.
2.2 Client and Prospective Client Information
When you contact us, request a quote, or engage us for services, we may collect the following personal information:
(a) Contact and identification information: full name, position and title, email address, telephone number, and postal or business address;
(b) Business information: company name, ABN or ACN, business address, and a description of your business activities;
(c) Financial information: bank account details or payment information for the purposes of invoicing and processing payments. This information is collected and stored securely; and
(d) Communications: records of correspondence, emails, meeting notes, and other communications relating to your engagement with us.
2.3 Service Delivery Information
In the course of delivering services to you, we may collect or be provided with:
(a) Platform access credentials: login credentials, API keys, and account access information for third-party platforms such as Google Ads, Google Analytics, Meta Business Manager, and similar platforms. This information is used solely to perform the services and is handled in accordance with our platform credential security practices (see Section 8.2);
(b) Client Materials: content, data, files, brand guidelines, advertising assets, and other materials you provide to enable us to perform the services (see also Section 2.5 regarding third-party personal information within Client Materials); and
(c) Campaign and performance data: advertising performance metrics, analytics data, audience insights, and campaign results generated in the course of delivering services.
2.4 Website Visitor Information
When you visit our Website, we automatically collect certain usage and technical data through cookies and analytics tools, including:
(a) Internet Protocol (IP) address;
(b) browser type and version;
(c) device type and operating system;
(d) pages visited on our Website, time and duration of visits, and referring URLs; and
(e) diagnostic and session performance data.
For detailed information about our use of cookies and how to manage your preferences, please refer to our Cookies Policy, available at dizian.com.au.
2.5 Third-Party Personal Information in Client Materials
Where you provide us with personal information about your own customers, employees, or other individuals as part of Client Materials (for example, customer email lists for advertising campaigns, audience data for targeting, or testimonials containing personal details), you acknowledge and warrant that:
(a) you have obtained all necessary consents from those individuals for the collection, use, and disclosure of their personal information as required for the services;
(b) the provision of that information to us is lawful and does not breach any obligation you owe to those individuals or any applicable privacy law; and
(c) we handle such information strictly in accordance with your instructions and in compliance with this Privacy Policy.
Dizian Digital handles third-party personal information contained in Client Materials as directed by the client and does not use such information for any purpose beyond performing the services.
2.6 Sensitive Information
We do not generally collect sensitive information (as defined under the Privacy Act, including health information, racial or ethnic origin, religious beliefs, political opinions, sexual orientation, or criminal records) in the ordinary course of our business. If a specific engagement requires the collection of sensitive information, we will:
(a) seek your explicit consent before collecting such information;
(b) handle such information with heightened care, consistent with the APPs; and
(c) collect only the minimum amount of sensitive information necessary for the stated purpose.
2.7 Subcontractor Information
We collect personal information about subcontractors who are natural persons (individuals), including their full name, contact details, ABN, bank account information, and professional qualifications, for the purpose of engaging, managing, and paying subcontractors who assist us in delivering services to clients.
3.1 Direct Collection
We collect most personal information directly from the individual or from the client organisation we are dealing with. This occurs when you:
(a) submit an enquiry via our Website contact form;
(b) respond to a quote or proposal submitted by us;
(c) sign an MSA, Summary MSA, SOW, or other contract with us;
(d) communicate with us by email, telephone, or other means; or
(e) attend meetings, workshops, or consultations with our team.
3.2 Automated Collection via the Website
We collect certain information automatically when you visit our Website through cookies, web beacons, and analytics tools, as described in Section 2.4. This collection occurs without you actively providing the information. Please refer to our Cookies Policy for details of the specific tools currently in use and guidance on how to opt out of non-essential tracking.
3.3 Collection via Third-Party Platforms
In the course of delivering services, we may receive or access personal information through:
(a) third-party platforms such as Google and Meta, where we operate your advertising and analytics accounts as part of the services; and
(b) white-label agency partners who engage us on behalf of their end clients and provide information necessary to perform the services (see also Section 3.4).
3.4 White-Label Engagements
Where Dizian Digital is engaged by an agency partner to provide services on behalf of that agency’s end clients, personal information about those end clients may be provided to us by the agency partner. In such circumstances:
(a) Dizian Digital handles that information as directed by the agency partner and in accordance with the terms of our agreement with them;
(b) the agency partner is responsible for ensuring that its end clients have been appropriately informed about the disclosure of their information to Dizian Digital and any applicable consents have been obtained; and
(c) individuals seeking to understand how their information is handled in a white-label context should contact the relevant agency partner directly.
3.5 Collection from Publicly Available Sources
We may also collect personal information that is publicly available, such as from business directories, LinkedIn profiles, company websites, or ASIC registers, for the purposes of:
(a) identifying and engaging prospective clients or subcontractors; or
(b) verifying business or identity information provided to us.
4.1 Primary Purposes
We use personal information for the primary purpose for which it was collected. Primary purposes include:
(a) providing, managing, and improving the digital marketing, SEO, website development, and related services you have engaged us for;
(b) responding to enquiries and preparing quotes, proposals, and presentations;
(c) preparing, executing, and administering contracts, SOWs, and other legal documents;
(d) managing billing, invoicing, payment collection, and related financial administration;
(e) communicating with you about your account, service delivery progress, and service-related updates;
(f) engaging, managing, directing, and paying subcontractors who assist in delivering services; and
(g) complying with our obligations under the MSA, including data protection, reporting, and confidentiality requirements.
4.2 Secondary Purposes
We may also use personal information for secondary purposes where you would reasonably expect us to do so, or where permitted by law, including:
(a) improving and developing our services, internal systems, and business processes;
(b) conducting internal performance analysis and service quality reporting;
(c) training our personnel and subcontractors and maintaining service standards;
(d) protecting and enforcing our legal rights, and managing disputes; and
(e) complying with applicable laws, regulations, court orders, and legal obligations.
4.3 Purposes Requiring Consent
We will only use personal information for direct marketing purposes where we have your consent, as set out in Section 5. We will not use personal information for any purpose that is materially incompatible with the primary purpose of collection without first obtaining your consent or as otherwise permitted by law.
5.1 Our Approach
Dizian Digital is a business-to-business (B2B) professional services provider. We do not engage in broad-based consumer direct marketing campaigns. Any marketing communications we send are typically informational in nature and directed at existing or prospective business clients.
5.2 Consent Basis
We will only send direct marketing communications to individuals where:
(a) we have your express prior consent to do so; or
(b) you are an existing client and the communication relates to services similar to those we have previously provided to you, and you have not opted out (in accordance with APP 7.2).
5.3 Opt-Out Mechanism
You may opt out of receiving marketing communications from us at any time by:
(a) clicking the unsubscribe link included in any marketing email we send to you; or
(b) contacting us directly at alex@dizian.com.au with the subject line “Unsubscribe”.
We will action opt-out requests as soon as practicable and in any event within five (5) Business Days of receipt. We will not charge a fee for processing an opt-out request, nor will we penalise you in any way for exercising this right.
5.4 No Sale of Information
Dizian Digital does not sell, rent, trade, or otherwise transfer personal information to third parties for their own marketing or commercial purposes.
5.5 Third-Party Marketing
We do not provide personal information to third parties for the purpose of those third parties conducting direct marketing directed at our clients or contacts.
6.1 General
We do not disclose personal information to third parties except in the circumstances set out in this Section 6 or as otherwise required or permitted by law. Any disclosure made under this Section 6 is subject to appropriate contractual and security safeguards.
6.2 Service Providers and Technology Vendors
We engage trusted third-party service providers to assist us in operating our business and delivering services. These providers process personal information on our behalf and are contractually prohibited from using it for any other purpose. Categories of such providers include:
(a) Analytics and website performance providers (including Google Analytics, which tracks and reports on website usage to help us understand how our Website is used);
(b) Project management and communication platforms used to manage internal operations, client workflows, and subcontractor coordination;
(c) Cloud storage and infrastructure providers who host and secure our business data; and
(d) Accounting and invoicing software providers who assist in financial administration and record-keeping.
6.3 Subcontractors
We may engage subcontractors to assist in delivering services to clients. Where subcontractors are given access to personal information (including platform credentials or Client Materials), we ensure they are:
(a) bound by confidentiality obligations under a Subcontractor Agreement, which are no less restrictive than those in our standard Subcontractor Agreement; and
(b) prohibited from accessing, using, or disclosing personal information for any purpose other than the specific tasks assigned to them.
6.4 White-Label Agency Partners
In engagements where we provide services on behalf of a white-label agency partner, we may disclose relevant service information and performance data to that agency partner as reasonably necessary to manage the engagement and provide service reporting. Such disclosures are made in accordance with the relevant agreement between Dizian Digital and the agency partner.
6.5 Business Transfers
If Dizian Digital is involved in a merger, acquisition, corporate restructure, or sale of all or part of its business assets, personal information we hold may be transferred to a successor entity as part of that transaction. Where it is practicable to do so, we will notify affected individuals before their personal information is transferred and becomes subject to a different privacy policy.
6.6 Legal and Regulatory Requirements
We may disclose personal information if required or authorised to do so by law or legal process, including:
(a) in response to a valid court order, subpoena, warrant, or other legal process;
(b) at the request of a law enforcement agency or regulatory body (including the OAIC) with lawful authority to require disclosure;
(c) to protect and enforce our legal rights, defend against legal claims, or recover amounts owed to us; or
(d) to prevent fraud, illegal activity, or threats to the safety or security of any person.
Where permitted by law and practicable in the circumstances, we will endeavour to notify you before making such a disclosure.
6.7 With Your Consent
We may disclose personal information to third parties not otherwise described in this Section 6 where we have obtained your express prior consent to that disclosure.
7.1 Circumstances of Cross-Border Transfers
In the course of our business, personal information may be transferred to, processed in, or accessible from, countries outside Australia. This occurs in the following circumstances:
(a) use of cloud-based platforms and digital services (such as Google Workspace, Meta Business Tools, advertising platforms, and project management software) that store and process data on servers located in multiple international jurisdictions;
(b) our historical operational relationship with New Zealand through our predecessor entity Dizian Limited (NZ), which may involve data flows between Australia and New Zealand; and
(c) engagement of subcontractors who may be located outside Australia.
7.2 Our Obligations Under APP 8
Before disclosing personal information to an overseas recipient, Dizian Digital will take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information. We do this by:
(a) applying contractual data protection obligations to overseas subcontractors and service providers, requiring them to handle personal information in a manner consistent with the APPs;
(b) preferring service providers who maintain internationally recognised privacy and security certifications (such as ISO 27001, SOC 2, or equivalent); and
(c) reviewing the published privacy practices of third-party platform providers before relying on their services.
7.3 Consent to Transfer
In circumstances where we are unable to ensure an equivalent level of protection for personal information to be transferred overseas, we will seek your express consent to the transfer, with appropriate disclosure of the risks involved. Where you have been notified of those risks and consent, APP 8.2(a) of the Privacy Act applies.
7.4 Australia and New Zealand Operations
Where personal information is transferred between Australia and New Zealand in connection with our business operations, we note that New Zealand has been assessed by the Australian Government as providing comparable privacy protections to Australia, consistent with the requirements of APP 8. We nonetheless apply our standard contractual safeguards to such transfers.
8.1 Security Measures
Dizian Digital takes the security of personal information seriously and implements appropriate technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include:
(a) secure storage of all documents and data on password-protected systems and cloud platforms with restricted access;
(b) access controls ensuring that personal information is accessible only to personnel and subcontractors who have a genuine need to access it in the performance of their duties;
(c) strong password requirements and, where available, mandatory multi-factor authentication on all business platforms and client accounts;
(d) requiring all subcontractors to implement equivalent security measures, including use of strong passwords, two-factor authentication on all client platform accounts, and prohibition on accessing client data on public or unsecured networks;
(e) secure disposal of physical documents containing personal information through cross-cut shredding or equivalent destruction; and
(f) regular review of our data security practices to ensure they remain appropriate and effective.
8.2 Platform Credential Security
Given the nature of our digital marketing services, we regularly hold access credentials to clients’ advertising, analytics, and other platform accounts. We apply heightened security standards to such credentials, including:
(a) storing credentials in secure, access-controlled systems;
(b) restricting access to credentials to personnel and subcontractors directly responsible for the relevant service;
(c) never sharing credentials with unauthorised persons; and
(d) revoking and deleting all credentials promptly upon termination of the relevant service engagement.
8.3 No Absolute Guarantee
Despite our best efforts, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of personal information transmitted to or held by us. In the event of a data security incident, we will act promptly in accordance with Section 9 of this Privacy Policy.
8.4 Retention of Personal Information
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required or authorised by law. Our general retention practices are:
(a) Client engagement records (contracts, SOWs, correspondence): retained for 7 years following the end of the relevant engagement, in accordance with legal and contractual obligations;
(b) Financial records (invoices, payment records, bank information): retained for 7 years as required under Australian tax and corporations law;
(c) Campaign and performance data: retained for the duration of the relevant service engagement plus a reasonable period thereafter for reporting, dispute resolution, and reference purposes;
(d) Platform access credentials: revoked and securely deleted promptly upon termination of the relevant service engagement, in accordance with Section 8.2(d); and
(e) Website usage and analytics data: generally retained for up to 26 months, consistent with standard analytics platform practices, unless a shorter or longer period is required.
8.5 Destruction and De-Identification
When personal information is no longer required, we will take reasonable steps to destroy it or de-identify it in a secure manner. Digital records are permanently deleted or overwritten; physical records are shredded. We do not retain personal information in any identifiable form beyond the applicable retention period.
9.1 Our Obligations Under the NDB Scheme
Dizian Digital is subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). The NDB scheme requires us to notify the Office of the Australian Information Commissioner (OAIC) and affected individuals where an “eligible data breach” occurs.
9.2 What Is an Eligible Data Breach
An eligible data breach occurs when:
(a) there is unauthorised access to, or unauthorised disclosure of, personal information held by Dizian Digital, or personal information is lost in circumstances where unauthorised access or disclosure is likely to occur; and
(b) a reasonable person would conclude that the access or disclosure would be likely to result in serious harm to any of the individuals to whom the information relates.
9.3 Our Response to a Suspected Breach
Upon becoming aware of a suspected data breach, Dizian Digital will:
(a) take immediate steps to contain the breach and limit any potential harm to affected individuals;
(b) conduct a prompt and reasonable assessment to determine whether the incident constitutes an eligible data breach; and
(c) complete the assessment within 30 days of becoming aware of the suspected breach, as required by the Privacy Act.
9.4 Notification to OAIC and Individuals
If an eligible data breach is confirmed, Dizian Digital will:
(a) notify the OAIC by submitting a data breach notification in the prescribed form as soon as practicable;
(b) notify affected individuals directly if it is practicable to do so, providing them with the information required under the Privacy Act, including details of the breach, the types of information affected, and recommended steps to protect themselves; and
(c) where direct notification is not practicable, publish a prominent statement on our Website notifying individuals of the breach and the recommended steps.
9.5 Client Notification
Consistent with our obligations under the Master Services Agreement (Section 14.8), we will notify affected clients of any data breach involving their personal information or Client Materials without undue delay. We will cooperate with affected clients in addressing the breach, meeting any applicable notification obligations, and minimising harm.
9.6 Reporting a Suspected Breach
If you become aware of, or suspect, a data breach involving information held by Dizian Digital, please contact us immediately at alex@dizian.com.au with the subject line “Data Breach Report”. Prompt reporting assists us in containing breaches and protecting affected individuals.
10.1 Right of Access (APP 12)
Under the Privacy Act, you have the right to request access to the personal information that Dizian Digital holds about you. To make an access request:
(a) contact us in writing at alex@dizian.com.au with the subject line “Privacy Access Request”;
(b) provide sufficient detail to allow us to identify the personal information you are seeking access to; and
(c) note that we may ask you to verify your identity before processing the request, to ensure that we do not disclose your information to an unauthorised person.
10.2 Access Timeframes
We will acknowledge receipt of your access request promptly (within 5 Business Days) and will provide a substantive response within 30 days of receiving the request. If additional time is required to process a complex or voluminous request, we will notify you of the expected timeframe within the initial 30-day period.
10.3 Grounds for Refusing Access
We may refuse an access request on grounds permitted by APP 12.3 of the Privacy Act, including where:
(a) providing access would have an unreasonable impact on the privacy of other individuals;
(b) the request is frivolous or vexatious;
(c) providing access would be unlawful or would prejudice enforcement activities; or
(d) providing access would be contrary to a court or tribunal order.
Where we refuse access, we will provide you with a written response explaining the reason for refusal and advising you of the complaint mechanisms available, including the right to escalate to the OAIC.
10.4 Access Costs
We will not charge a fee for making an access request. In the case of particularly complex or voluminous requests, we may charge a reasonable fee to cover the cost of locating, compiling, and providing access to the requested information. If a charge applies, we will notify you of the estimated cost before processing the request, and you may withdraw the request if you do not wish to proceed.
10.5 Right to Correction (APP 13)
You have the right to request that Dizian Digital correct personal information we hold about you if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading. To make a correction request:
(a) contact us in writing at alex@dizian.com.au with the subject line “Privacy Correction Request”; and
(b) specify the information you believe is incorrect and provide the correct information where possible.
10.6 Correction Timeframes
We will take reasonable steps to correct the information within 30 days of receiving your correction request. If correction is not possible within this period, we will notify you and provide a revised timeframe.
10.7 Refusal to Correct
If we do not agree that the information requires correction, we will notify you in writing of our reasons. At your request, and as required by APP 13.3, we will take reasonable steps to associate a statement with the information noting that you believe it to be inaccurate, out of date, incomplete, irrelevant, or misleading.
11.1 Right to Make a Privacy Complaint
If you believe that Dizian Digital has interfered with your privacy or otherwise handled personal information in a manner that breaches the APPs or any other applicable privacy obligation, you have the right to make a complaint. We take all privacy complaints seriously and are committed to resolving them promptly and fairly.
11.2 How to Make a Complaint
To lodge a privacy complaint with Dizian Digital:
(a) email us at alex@dizian.com.au with the subject line “Privacy Complaint”; or
(b) write to us at: Privacy Officer, DZN Group Pty Ltd, 5a Hartnett Close, Mulgrave VIC 3170.
Your complaint should include: your name and contact details; a description of the nature of your complaint; details of any steps you have already taken in relation to the matter; and details of the outcome you are seeking.
11.3 Our Internal Complaints Process
Upon receiving a privacy complaint, Dizian Digital will:
(a) acknowledge receipt of your complaint within five (5) Business Days;
(b) investigate the complaint promptly and in good faith, including by examining our privacy practices and the specific circumstances of the complaint;
(c) provide you with a substantive written response within 30 days of receiving the complaint, addressing the matters raised and any proposed remedial steps; and
(d) where additional time is required to complete the investigation (for example, in complex cases involving multiple parties), notify you within the initial 30-day period, providing reasons for the delay and a revised expected timeframe.
11.4 Integration with MSA Dispute Resolution Framework
For complaints relating to the handling of personal information in connection with professional services provided under an MSA, the Parties are encouraged to resolve the matter informally in the first instance. Where informal resolution is not achieved, the Parties may refer the matter to the dispute resolution framework set out in Section 21 of the MSA, which provides for good faith negotiation, followed by mediation and, if required, arbitration.
Nothing in this Section 11.4 limits your right to lodge a complaint with the OAIC at any time.
11.5 Escalation to the OAIC
If you are not satisfied with our response to your complaint, or if we fail to respond within the timeframes set out in Section 11.3, you have the right to escalate your complaint to the Office of the Australian Information Commissioner (OAIC). The OAIC can investigate complaints about interferences with privacy under the Privacy Act. The OAIC can be contacted at:
Website: www.oaic.gov.au | Phone: 1300 363 992 | Email: enquiries@oaic.gov.au
Post: GPO Box 5218, Sydney NSW 2001
12.1 Updates
Dizian Digital may update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, technology, or business operations. We encourage you to review this Privacy Policy periodically to stay informed of how we manage personal information.
12.2 Notification of Material Changes
We will provide advance notice of any material changes to this Privacy Policy by:
(a) posting the updated policy on our Website at dizian.com.au, clearly displaying the updated “Last Updated” date; and
(b) where practicable, notifying current clients by email if the change materially affects how we handle their personal information.
12.3 Effective Date
The updated Privacy Policy will take effect from the date it is posted on our Website, unless a later effective date is expressly specified in the updated policy. We will maintain a version history of material changes for reference.
12.4 Continued Engagement
Your continued engagement with Dizian Digital, including use of our Website or services, following notification of changes to this Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree to the updated policy, you should contact us to discuss your concerns before continuing to use our services.
13.1 Privacy Officer
Dizian Digital has designated a Privacy Officer who is responsible for managing compliance with this Privacy Policy and the Privacy Act. All privacy-related enquiries, access requests, correction requests, and complaints should be directed to:
Privacy Officer: Alex Yeldizian, Director
DZN Group Pty Ltd (ABN 77 282 349 431) trading as Dizian Digital
Email: alex@dizian.com.au | Phone: +61 414 215 045
Website: dizian.com.au/contact-us
Postal Address: 5a Hartnett Close, Mulgrave VIC 3170, Australia
13.2 Response Commitment
We are committed to responding to all privacy enquiries and requests promptly and in accordance with our obligations under the Privacy Act and the APPs. We strive to acknowledge all written enquiries within five (5) Business Days and provide substantive responses within 30 days.
13.3 Cookies Policy
Our Cookies Policy, which provides detailed information about the specific tracking technologies and analytics tools used on our Website and how to manage your preferences, is available separately at dizian.com.au. The Cookies Policy forms part of our overall privacy framework and should be read in conjunction with this Privacy Policy.